Add logs:DescribeMetricFilters to Custom IAM Policy section.

This commit is contained in:
Virtual JJ
2017-01-09 20:27:29 +09:00
parent aa6cd9c614
commit 931da9920e

View File

@@ -436,6 +436,7 @@ Instead of using default policy SecurityAudit for the account you use for checks
"kms:list*", "kms:list*",
"lambda:getpolicy", "lambda:getpolicy",
"lambda:listfunctions", "lambda:listfunctions",
"logs:DescribeMetricFilters",
"rds:describe*", "rds:describe*",
"rds:downloaddblogfileportion", "rds:downloaddblogfileportion",
"rds:listtagsforresource", "rds:listtagsforresource",