From 34b3d912d771a6d7d73854bcc696375450c22ef9 Mon Sep 17 00:00:00 2001
From: Derek Croote <dcroote@users.noreply.github.com>
Date: Thu, 6 Feb 2025 22:15:01 -0800
Subject: [PATCH] fix: add missing CloudWatch Log Groups permissions

---
 .changeset/gold-plums-allow.md                               | 5 +++++
 .../airnode-deployer/terraform/aws/modules/function/data.tf  | 3 +++
 2 files changed, 8 insertions(+)
 create mode 100644 .changeset/gold-plums-allow.md

diff --git a/.changeset/gold-plums-allow.md b/.changeset/gold-plums-allow.md
new file mode 100644
index 0000000000..04972ba4ee
--- /dev/null
+++ b/.changeset/gold-plums-allow.md
@@ -0,0 +1,5 @@
+---
+"@api3/airnode-deployer": minor
+---
+
+Bump hashicorp/terraform-provider-aws to v5
diff --git a/packages/airnode-deployer/terraform/aws/modules/function/data.tf b/packages/airnode-deployer/terraform/aws/modules/function/data.tf
index 9cc15e9615..03729d95bd 100644
--- a/packages/airnode-deployer/terraform/aws/modules/function/data.tf
+++ b/packages/airnode-deployer/terraform/aws/modules/function/data.tf
@@ -18,6 +18,9 @@ data "aws_iam_policy_document" "cloudwatch_log_policy" {
     actions = [
       "logs:CreateLogStream",
       "logs:PutLogEvents",
+      "logs:ListTagsForResource",
+      "logs:TagResource",
+      "logs:UntagResource"
     ]
     resources = ["${aws_cloudwatch_log_group.cloudwatch_log_group.arn}:*"]
   }