fix: Remove CreateLogGroup permission from service role (#550)

navaati · web-flow · commit 4d31b0d74ffb · 2021-02-23T10:06:16.000+01:00
diff --git a/vpc-flow-logs.tf b/vpc-flow-logs.tf
@@ -90,7 +90,6 @@ data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {
     effect = "Allow"
 
     actions = [
-      "logs:CreateLogGroup",
       "logs:CreateLogStream",
       "logs:PutLogEvents",
       "logs:DescribeLogGroups",
