def instance_add_log_permissions()

in helpers/functions.py [0:0]

• 12 lines of code
• 2 McCabe index (conditional complexity)

def instance_add_log_permissions(the_instance):
    """ add log permissions to an instance """
    # create policies for logs
    logs_policy = iam.PolicyStatement(
        effect=iam.Effect.ALLOW,
        actions=[
            "logs:CreateLogGroup",
            "logs:CreateLogStream",
            "logs:PutLogEvents",
            "logs:DescribeLogStreams",
        ],
        resources=["*"],
    )
    # add policy to instance
    the_instance.add_to_role_policy(statement=logs_policy)