Hello, I was using 

sst version 0.43.3

 and I've just updated to latest version after update I am facing this error:

AccessDeniedException: User: arn:aws:sts::702716627781:assumed-role/bshr-cordova-CordovaPubli-publicCordovaGraphqlPric-SJHXCJ61EAQY/public-cordova-pricing-bshr is not authorized to perform: logs:DescribeLogStreams on resource: arn:aws:logs:us-east-1:702716627781:log-group:cordova-bshr:log-stream:

this is the stack:

const apiAuth = new sst.Auth(this, 'auth2', {
      cognito: {
        userPool: cordovaMainUserPool,
        userPoolClient: toledoClient
      },
      identityPool: {
        allowUnauthenticatedIdentities: true,
        identityPoolName: `api-identity-pool-${scope.stage}`,
      }
});
const publicApi = new sst.ApolloApi(this, 'publicCordovaGraphqlGateway', props);
apiAuth.attachPermissionsForUnauthUsers([publicApi]);

I tried

sst remove

and it didn't fix it

Hey @Bshr Ramadan, are you getting this error on deploy or inside ur Lambda?

Hey @Frank, no it's inside lambda, after a request

Are you granting

publicApi

the

logs:DescribeLogStreams

permission? Give this a try:

publicApi.attachPermissions(["logs:DescribeLogStreams"]);

Actually I realized this error is appearing when any error happens in lambda I will try attaching permission and let you know, thanks in advance @Frank