> For the complete documentation index, see [llms.txt](https://oklencodes.gitbook.io/untitled/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oklencodes.gitbook.io/untitled/devops/creating-a-codebuild-project-and-getting-the-output-with-cloudwatch-logs/iam.md).
# IAM
Click on Policies, then Create policy. Following that, the next screen click on the JSON button then copy and paste the code below then click Next.
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Resource": [
"*"
],
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents",
"logs:List*",
"logs:Get*",
"logs:Describe*"
]
},
{
"Effect": "Allow",
"Resource": [
"*"
],
"Action": [
"s3:PutObject",
"s3:Get*",
"s3:List*"
]
},
{
"Effect": "Allow",
"Action": [
"codebuild:CreateReportGroup",
"codebuild:CreateReport",
"codebuild:UpdateReport",
"codebuild:BatchPutTestCases",
"codebuild:Get*",
"codebuild:Describe*",
"codebuild:Batch*",
"codebuild:List*",
"codebuild:BatchPutCodeCoverages"
],
"Resource": [
"*"
]
}
]
}
```
Once the whole JSON has been copied and reviewed. The policy can be reviewed and created
Permissions defined in the policy because of the Json output should be:
Next in IAM roles, select create role then for trust entity select AWS Service
and use case is CodeBuild.
For permissions should only need Codebuild-policy before selecting next
For simplicity i’ve named it CodeBuild-Role
