Merge pull request #61 from Optum/hotfix/iam-cloudwatch-logs

eschwartz · web-flow · commit ee43b63eba53 · 2019-10-18T13:11:37.000-05:00
PrincipalPolicy: Allow full access to CloudWatch Logs
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## v0.18.1
+
+- Fix IAM policy for DCE principal, to allow full access to CloudWatch logs
+
 ## v0.18.0
 
 - Minor fixes to `scripts/deploy_local/deploy_local_build.sh` for options to be recognized.
diff --git a/modules/fixtures/policies/redbox_principal_policy.tmpl b/modules/fixtures/policies/redbox_principal_policy.tmpl
@@ -119,6 +119,7 @@
           "kms:*",
           "kinesis:*",
           "lambda:*",
+          "logs:*",
           "mq:*",
           "machinelearning:*",
           "mediaconvert:*",
diff --git a/pipelines/test-and-create-pr-env.yml b/pipelines/test-and-create-pr-env.yml
@@ -14,6 +14,7 @@ trigger:
 # Run builds for PRs against `master`
 pr:
   - master
+  - release/*
 
 steps:
 # Setup Python
