{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents" ], "Resource": "*" } ] } Inline Policy with this role { "Version": "2012-10-17", "Statement": [ { "Action": [ "s3:GetObjectTagging", "s3:GetObject" ], "Resource": "arn:aws:s3:::atlan/*", "Effect": "Allow" }, { "Action": [ "s3:PutObject", "s3:DeleteObject", "s3:PutObjectTagging" ], "Resource": "arn:aws:s3:::bucket name/*", "Effect": "Allow" } ] }