resource "aws_iam_user" "cloudwatch" {
  name = "grafana-cloudwatch"
}

resource "aws_iam_user_group_membership" "cloudwatch" {
  user = aws_iam_user.cloudwatch.name

  groups = [
    "CloudWatch_ReadOnly_Access_Group",
    "Logs_ReadOnly_Access_Group",
	"CloudTrail_ReadOnly_Access_Group"
  ]
}