add list permission (#143)

Author: lorenzo-merici

modules/log_ingestion.s3.cft.yaml

@@ -92,6 +92,13 @@ Resources:
                 Resource:
                   - !Sub '${BucketARN}'
                   - !Sub '${BucketARN}/*'
+              - Sid: "CloudlogsS3AccessList"
+                Effect: "Allow"
+                Action:
+                  - "s3:List*"
+                Resource:
+                  - !Sub '${BucketARN}'
+                  - !Sub '${BucketARN}/*'
 
   CloudTrailNotificationsTopic:
     Condition: CreateSNSTopic