lambdaAtEdge-LambdaPolicyCloudWatch.js

resource "aws_iam_policy" "lambda_policy" {
  name        = "HttpHeaderShimLambdaPolicy"
  description = "Http Header Shim Lambda Policy"

  policy = jsonencode({
    "Version" : "2012-10-17",
    "Statement" : [
      {
        "Action" : [
          "cloudwatch:PutMetricData",
          "logs:CreateLogGroup",
          "logs:CreateLogStream",
          "logs:PutLogEvents"
        ],
        "Resource" : [
          "*"
        ],
        "Effect" : "Allow",
        "Sid" : "CloudWatchPutMetricData"
      }
    ]
  })
}

resource "aws_iam_role_policy_attachment" "lambda-policy" {
  role       = aws_iam_role.lambda_role.name
  policy_arn = aws_iam_policy.lambda_policy.arn
}