diff --git a/cloudtrail/README.md b/cloudtrail/README.md index 2ddc7ca..7beb7af 100644 --- a/cloudtrail/README.md +++ b/cloudtrail/README.md @@ -60,7 +60,6 @@ No modules. | Name | Type | |------|------| | [aws_cloudtrail.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail) | resource | -| [aws_cloudwatch_log_group.cloudtrail](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource | | [aws_cloudwatch_log_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource | | [aws_iam_policy.cloudtrail_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource | | [aws_iam_role.cloudtrail](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource | diff --git a/cloudtrail/cloudtrail.tf b/cloudtrail/cloudtrail.tf index 2efd5bd..0052076 100644 --- a/cloudtrail/cloudtrail.tf +++ b/cloudtrail/cloudtrail.tf @@ -8,7 +8,7 @@ resource "aws_cloudtrail" "this" { enable_logging = true kms_key_id = var.kms_key_arn sns_topic_name = var.enable_sns ? aws_sns_topic.cloudtrail[0].arn : null - cloud_watch_logs_group_arn = format("%v:*", aws_cloudwatch_log_group.cloudtrail.arn) + cloud_watch_logs_group_arn = format("%v:*", aws_cloudwatch_log_group.this.arn) cloud_watch_logs_role_arn = aws_iam_role.cloudtrail.arn is_organization_trail = var.enable_organization @@ -70,15 +70,15 @@ data "aws_iam_policy_document" "cloudtrail_cloudwatch" { } } -resource "aws_cloudwatch_log_group" "cloudtrail" { - name = local.name - - kms_key_id = var.kms_key_arn - retention_in_days = 7 - - tags = merge( - local.base_tags, - var.tags, - map("Name", format("%v-log", local.name)), - ) -} +# resource "aws_cloudwatch_log_group" "cloudtrail" { +# name = local.name +# +# kms_key_id = var.kms_key_arn +# retention_in_days = 7 +# +# tags = merge( +# local.base_tags, +# var.tags, +# map("Name", format("%v-log", local.name)), +# ) +# }