Error: creating CloudWatch Logs Log Group

Error: creating CloudWatch Logs Log Group  (xxx/xxx/xx/): operation error CloudWatch Logs: CreateLogGroup, https response error 
StatusCode: 400, RequestID: 1234667890, api error AccessDeniedException: User: arn:aws:sts::1234567:assumed-role/xxxx-runner-xxx- 
clusters/gitHubSession is not authorized to perform: logs:CreateLogGroup on resource: arn:aws:logs:us-east-1:12334567:log- 
group:/aws/containerinsights/xxxxxcluster/host:log-stream: because no identity-based policy allows the logs:CreateLogGroup action

See also

• Template:Log groups