hms-tools/athena-hive-metastore-with-layer.yaml [95:113]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                - lambda:InvokeFunction
                - logs:CreateLogGroup
                - logs:CreateLogStream
                - logs:PutLogEvents
              Effect: Allow
              Resource: '*'
            - Action:
                - s3:GetObject
                - s3:GetBucketLocation
                - s3:ListBucket
                - s3:PutObject
              Effect: Allow
              Resource: !Sub "arn:aws:s3:::${SpillLocation}/*"
          Version: '2012-10-17'
        # Gives access to create, delete, describe, and detach Elastic Network Interfaces to connect to customer's VPC.
        - VPCAccessPolicy: {}
      VpcConfig:
        SecurityGroupIds: !Ref VPCSecurityGroupIds
        SubnetIds: !Ref VPCSubnetIds
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



hms-tools/athena-hive-metastore.yaml [81:99]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                - lambda:InvokeFunction
                - logs:CreateLogGroup
                - logs:CreateLogStream
                - logs:PutLogEvents
              Effect: Allow
              Resource: '*'
            - Action:
                - s3:GetObject
                - s3:GetBucketLocation
                - s3:ListBucket
                - s3:PutObject
              Effect: Allow
              Resource: !Sub "arn:aws:s3:::${SpillLocation}/*"
          Version: '2012-10-17'
        # Gives access to create, delete, describe, and detach Elastic Network Interfaces to connect to customer's VPC.
        - VPCAccessPolicy: {}
      VpcConfig:
        SecurityGroupIds: !Ref VPCSecurityGroupIds
        SubnetIds: !Ref VPCSubnetIds
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



