templates/copy.template.yaml [21:86]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      Path: /
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
        - Effect: Allow
          Principal:
            Service: lambda.amazonaws.com
          Action: sts:AssumeRole
      Policies:
      - PolicyName: ConfigPolicy
        PolicyDocument:
          Version: 2012-10-17
          Statement:
          - Sid: Logging
            Effect: Allow
            Action:
              - logs:AssociateKmsKey
              - logs:CancelExportTask
              - logs:CreateExportTask
              - logs:CreateLogDelivery
              - logs:CreateLogGroup
              - logs:CreateLogStream
              - logs:DeleteDestination
              - logs:DeleteLogDelivery
              - logs:DeleteLogGroup
              - logs:DeleteLogStream
              - logs:DeleteMetricFilter
              - logs:DeleteQueryDefinition
              - logs:DeleteResourcePolicy
              - logs:DeleteRetentionPolicy
              - logs:DeleteSubscriptionFilter
              - logs:DescribeDestinations
              - logs:DescribeExportTasks
              - logs:DescribeLogGroups
              - logs:DescribeLogStreams
              - logs:DescribeMetricFilters
              - logs:DescribeQueries
              - logs:DescribeQueryDefinitions
              - logs:DescribeResourcePolicies
              - logs:DescribeSubscriptionFilters
              - logs:DisassociateKmsKey
              - logs:FilterLogEvents
              - logs:GetLogDelivery
              - logs:GetLogEvents
              - logs:GetLogGroupFields
              - logs:GetLogRecord
              - logs:GetQueryResults
              - logs:ListLogDeliveries
              - logs:ListTagsLogGroup
              - logs:PutDestination
              - logs:PutDestinationPolicy
              - logs:PutLogEvents
              - logs:PutMetricFilter
              - logs:PutQueryDefinition
              - logs:PutResourcePolicy
              - logs:PutRetentionPolicy
              - logs:PutSubscriptionFilter
              - logs:StartQuery
              - logs:StopQuery
              - logs:TagLogGroup
              - logs:TestMetricFilter
              - logs:UntagLogGroup
              - logs:UpdateLogDelivery
            Resource: !Sub arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:*
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/dragen.template.yaml [280:345]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      Path: /
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
        - Effect: Allow
          Principal:
            Service: lambda.amazonaws.com
          Action: sts:AssumeRole
      Policies:
      - PolicyName: ConfigPolicy
        PolicyDocument:
          Version: 2012-10-17
          Statement:
          - Sid: Logging
            Effect: Allow
            Action:
              - logs:AssociateKmsKey
              - logs:CancelExportTask
              - logs:CreateExportTask
              - logs:CreateLogDelivery
              - logs:CreateLogGroup
              - logs:CreateLogStream
              - logs:DeleteDestination
              - logs:DeleteLogDelivery
              - logs:DeleteLogGroup
              - logs:DeleteLogStream
              - logs:DeleteMetricFilter
              - logs:DeleteQueryDefinition
              - logs:DeleteResourcePolicy
              - logs:DeleteRetentionPolicy
              - logs:DeleteSubscriptionFilter
              - logs:DescribeDestinations
              - logs:DescribeExportTasks
              - logs:DescribeLogGroups
              - logs:DescribeLogStreams
              - logs:DescribeMetricFilters
              - logs:DescribeQueries
              - logs:DescribeQueryDefinitions
              - logs:DescribeResourcePolicies
              - logs:DescribeSubscriptionFilters
              - logs:DisassociateKmsKey
              - logs:FilterLogEvents
              - logs:GetLogDelivery
              - logs:GetLogEvents
              - logs:GetLogGroupFields
              - logs:GetLogRecord
              - logs:GetQueryResults
              - logs:ListLogDeliveries
              - logs:ListTagsLogGroup
              - logs:PutDestination
              - logs:PutDestinationPolicy
              - logs:PutLogEvents
              - logs:PutMetricFilter
              - logs:PutQueryDefinition
              - logs:PutResourcePolicy
              - logs:PutRetentionPolicy
              - logs:PutSubscriptionFilter
              - logs:StartQuery
              - logs:StopQuery
              - logs:TagLogGroup
              - logs:TestMetricFilter
              - logs:UntagLogGroup
              - logs:UpdateLogDelivery
            Resource: !Sub arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:*
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



