fix: make Resource more specific [no ci]

webiny · Oct 19, 2023 · 500083a · 500083a
1 parent a2586d1
commit 500083a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/DEPLOY_WEBINY_PROJECT_CF_TEMPLATE.yaml b/docs/DEPLOY_WEBINY_PROJECT_CF_TEMPLATE.yaml
@@ -449,10 +449,10 @@ Resources:
 
               # We need this to get logs from CloudWatch during data migrations.
               - Effect: Allow
-                Resource: "*"
+                Resource: "arn:aws:logs:*:*:log-group:wby-data-migration-*"
                 Action:
-                  - logs:GetLogEvents
                   - logs:Unmask
+                  - logs:GetLogEvents
 
   UserToDeployWebinyProjectGroup1:
     Type: AWS::IAM::UserToGroupAddition