From 65d340cfcdc1c229880bc94455f10d873fcf7846 Mon Sep 17 00:00:00 2001
From: Joris Conijn <jco@woodwing.com>
Date: Fri, 17 Jul 2020 08:39:00 +0200
Subject: [PATCH] docs: provide a sample iam policy

The AWS::Serverless::Function resource will give the proper IAM policies for the logger and tracing automatically but you need to provide an additional policy if you want to make use of the Metrics utility.
---
 docs/content/core/metrics.mdx | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/docs/content/core/metrics.mdx b/docs/content/core/metrics.mdx
index 7265d9b8a50..51b3a89d129 100644
--- a/docs/content/core/metrics.mdx
+++ b/docs/content/core/metrics.mdx
@@ -29,6 +29,18 @@ Resources:
             Variables:
                 POWERTOOLS_SERVICE_NAME: payment # highlight-line
                 POWERTOOLS_METRICS_NAMESPACE: ServerlessAirline # highlight-line
+        ...
+        Policies:
+          - Version: 2012-10-17
+            Statement:          
+              # highlight-start
+              - Effect: Allow
+                Resource: '*'
+                Action: cloudwatch:PutMetricData
+                Condition:
+                  ForAllValues:StringEquals:
+                    cloudwatch:namespace: ServerlessAirline
+              # highlight-end
 ```
 
 We recommend you use your application or main service as a metric namespace.