diff --git a/main.tf b/main.tf
index 5f5ad33..235d522 100644
--- a/main.tf
+++ b/main.tf
@@ -77,7 +77,7 @@ data "aws_iam_policy_document" "log" {
       "logs:PutLogEvents"
     ]
 
-    resources = [aws_cloudwatch_log_group.main[0].arn]
+    resources = [aws_cloudwatch_log_group.main[0].arn, "${aws_cloudwatch_log_group.main[0].arn}/*"]
   }
 }