packages/constructs/L3/governance/roles-l3-construct/policy-statements/app-based/utility-basic-policy.yaml [74:107]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  - Sid: CloudWatchNoResourceAccess
    Action:
      - 'cloudwatch:List*'
      - 'cloudwatch:Get*'
      - 'cloudwatch:Describe*'
    Resource: '*'
    Effect: Allow

  - Sid: CloudWatchLogsNoResource
    Action:
      - 'logs:DeleteSubscriptionFilter'
      - 'logs:DescribeAccountPolicies'
      - 'logs:DescribeDestinations'
      - 'logs:DescribeExportTasks'
      - 'logs:DescribeLogGroups'
      - 'logs:DescribeQueries'
      - 'logs:DescribeQueryDefinitions'
      - 'logs:DescribeResourcePolicies'
      - 'logs:DescribeSubscriptionFilters'
      - 'logs:TestMetricFilter'
      - 'logs:StopQuery'
    Resource: '*'
    Effect: Allow

  # TODO: Discuss with MDAA core team if we would like such basic actions
  # defined in our MDAA managed policies 
  - Sid: AllowLogGroupAndStreamWriteAccess
    Action:
      - 'logs:CreateLogStream'
      - 'logs:PutLogEvents'
      - 'logs:CreateLogGroup'
      - 'logs:DescribeLogStreams'
    Resource: '*'
    Effect: Allow
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



packages/constructs/L3/governance/roles-l3-construct/policy-statements/service-based/cloudwatch-basic-policy.yaml [2:35]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  -   Sid: CloudWatchNoResourceAccess
      Action:
          - 'cloudwatch:List*'
          - 'cloudwatch:Get*'
          - 'cloudwatch:Describe*'
      Resource: '*'
      Effect: Allow

  - Sid: CloudWatchLogsNoResource
    Action:
      - 'logs:DeleteSubscriptionFilter'
      - 'logs:DescribeAccountPolicies'
      - 'logs:DescribeDestinations'
      - 'logs:DescribeExportTasks'
      - 'logs:DescribeLogGroups'
      - 'logs:DescribeQueries'
      - 'logs:DescribeQueryDefinitions'
      - 'logs:DescribeResourcePolicies'
      - 'logs:DescribeSubscriptionFilters'
      - 'logs:TestMetricFilter'
      - 'logs:StopQuery'
    Resource: '*'
    Effect: Allow

  # TODO: Discuss with MDAA core team if we would like such basic actions
  # defined in our MDAA managed policies 
  - Sid: AllowLogGroupAndStreamWriteAccess
    Action:
      - 'logs:CreateLogStream'
      - 'logs:PutLogEvents'
      - 'logs:CreateLogGroup'
      - 'logs:DescribeLogStreams'
    Resource: '*'
    Effect: Allow
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



