Merge pull request #15 from companieshouse/feature/cloudwatch-log-group

Add CloudWatch log group for agent logs

Author: marcransome

groups/frontend/iam.tf

@@ -2,7 +2,7 @@ module "instance_profile" {
   source = "[email protected]:companieshouse/terraform-modules//aws/instance_profile?ref=tags/1.0.62"
   name = "tuxedo-frontend-profile"
 
-  cw_log_group_arns = [for log_group in merge(aws_cloudwatch_log_group.tuxedo, aws_cloudwatch_log_group.ngsrv) : log_group.arn]
+  cw_log_group_arns = [for log_group in merge(aws_cloudwatch_log_group.tuxedo, aws_cloudwatch_log_group.ngsrv, {"cloudwatch" = aws_cloudwatch_log_group.cloudwatch}) : log_group.arn]
   enable_SSM = true
   kms_key_refs = [
     local.ssm_kms_key_id

groups/frontend/logs.tf

@@ -24,3 +24,13 @@ resource "aws_cloudwatch_log_group" "ngsrv" {
     nGsrvLogName = each.value.log_name
   })
 }
+
+resource "aws_cloudwatch_log_group" "cloudwatch" {
+  name              = "${var.service_subtype}-${var.service}-cloudwatch"
+  retention_in_days = var.default_log_retention_in_days
+  kms_key_id        = local.logs_kms_key_id
+
+  tags = merge(local.common_tags, {
+    LogName = "cloudwatch"
+  })
+}