good-iam-role-policy

good-iam-role-policy

Policies:
  - PolicyName: my-pipeline-policy
    PolicyDocument:
      Version: "2012-10-17"
      Statement:
        - Effect: Allow
          Resource:
            - !Sub "arn:aws:logs:*:${AWS::AccountId}:log-group:/aws/codebuild/*"
            - !Sub "arn:aws:logs:*:${AWS::AccountId}:log-group:/aws/codebuild/*:log-stream:*"
          Action:
            - "logs:CreateLogGroup"
            - "logs:CreateLogStream"
            - "logs:PutLogEvents"