This is a request to allow PutSubscriptionFilter API to support the iam:PassedToService condition key.
Currently,
PutSubscriptionFilter does not seem to populate condition key iam:PassedToService with either logs.amazonaws.com or logs.{region}.amazonaws.com, and the permission would need to be restricted using Role ARN in resource section.
Name of the resource
AWS::Logs::SubscriptionFilter
Resource name
No response
Description
This is a request to allow PutSubscriptionFilter API to support the iam:PassedToService condition key. Currently, PutSubscriptionFilter does not seem to populate condition key iam:PassedToService with either logs.amazonaws.com or logs.{region}.amazonaws.com, and the permission would need to be restricted using Role ARN in resource section.
Other Details
No response