templates/defaultVPC/addDefaultVPCFlowLogs.yaml [135:156]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            Action:
              - "sts:AssumeRole"
      Path: "/"

  VPCFlowLogPolicy:
    Type: "AWS::IAM::Policy"
    Properties:
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Action:
          - logs:CreateLogGroup
          - logs:CreateLogStream
          - logs:PutLogEvents
          - logs:DescribeLogGroups
          - logs:DescribeLogStreams
          Resource:
          - !Sub arn:${AWS::Partition}:logs:*:*:*
      PolicyName: VPCFlowLogPolicy
      Roles:
      - !Ref VPCFlowLogRole
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/vpc/vpc.yaml [215:236]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            Action:
              - "sts:AssumeRole"
      Path: "/"

  VPCFlowLogPolicy:
    Type: "AWS::IAM::Policy"
    Properties:
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Action:
          - logs:CreateLogGroup
          - logs:CreateLogStream
          - logs:PutLogEvents
          - logs:DescribeLogGroups
          - logs:DescribeLogStreams
          Resource:
          - !Sub arn:${AWS::Partition}:logs:*:*:*
      PolicyName: VPCFlowLogPolicy
      Roles:
      - !Ref VPCFlowLogRole
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



