allow dynamic logging configuration in prometheus

Author: minaslater

aws/telemetry/README.md

@@ -63,6 +63,7 @@ module "telemetry" {
 | <a name="input_grafana_role_name"></a> [grafana\_role\_name](#input\_grafana\_role\_name) | Name of the IAM role created for Grafana | `string` | `"grafana"` | no |
 | <a name="input_grafana_workspace_name"></a> [grafana\_workspace\_name](#input\_grafana\_workspace\_name) | Name of the Grafana workspace which will use telemetry resources | `string` | `"Grafana"` | no |
 | <a name="input_kms_alias_name"></a> [kms\_alias\_name](#input\_kms\_alias\_name) | KMS alias name for SNS topics | `string` | `"alias/sns-alarm-topics"` | no |
+| <a name="input_log_group_arn"></a> [log\_group\_arn](#input\_log\_group\_arn) | ARN for the CW log group | `list(string)` | `[]` | no |
 | <a name="input_monitoring_account_ids"></a> [monitoring\_account\_ids](#input\_monitoring\_account\_ids) | AWS account IDs in which Grafana will run | `list(string)` | `null` | no |
 | <a name="input_prometheus_workspace_name"></a> [prometheus\_workspace\_name](#input\_prometheus\_workspace\_name) | Name of the AWS Managed Prometheus workspace | `string` | n/a | yes |
 | <a name="input_sns_topic_name_suffix"></a> [sns\_topic\_name\_suffix](#input\_sns\_topic\_name\_suffix) | Suffix for SNS topic names | `string` | `""` | no |

aws/telemetry/main.tf

@@ -23,6 +23,7 @@ module "prometheus_workspace" {
   alert_resolve_timeout       = var.alert_resolve_timeout
   alert_subject_template      = var.alert_subject_template
   alertmanager_config_enabled = var.alertmanager_config_enabled
+  log_group_arn               = var.log_group_arn
   name                        = var.prometheus_workspace_name
   tags                        = var.tags
 

aws/telemetry/modules/prometheus-workspace/README.md

@@ -42,6 +42,7 @@ write to the workspace.
 | <a name="input_alert_resolve_timeout"></a> [alert\_resolve\_timeout](#input\_alert\_resolve\_timeout) | Time after which alerts without an end time after resolved | `string` | `null` | no |
 | <a name="input_alert_subject_template"></a> [alert\_subject\_template](#input\_alert\_subject\_template) | Template used for AlertManager alert subjects | `string` | `null` | no |
 | <a name="input_alertmanager_config_enabled"></a> [alertmanager\_config\_enabled](#input\_alertmanager\_config\_enabled) | Enable alertmanager configs for the Prometheus workspace | `bool` | `true` | no |
+| <a name="input_log_group_arn"></a> [log\_group\_arn](#input\_log\_group\_arn) | ARN for the CW log group | `list(string)` | `[]` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name for this Prometheus workspace | `string` | n/a | yes |
 | <a name="input_sns_receivers"></a> [sns\_receivers](#input\_sns\_receivers) | Map of alert priorities to SNS topics for AlertManager | `map(string)` | n/a | yes |
 | <a name="input_tags"></a> [tags](#input\_tags) | Tags to be applied to created resources | `map(string)` | `{}` | no |

aws/telemetry/modules/prometheus-workspace/main.tf

@@ -1,6 +1,13 @@
 resource "aws_prometheus_workspace" "this" {
   alias = var.name
   tags  = var.tags
+
+  dynamic logging_configuration {
+    for_each = var.log_group_arn
+    content {
+      log_group_arn = logging_configuration.value
+    }
+  }
 }
 
 resource "aws_iam_role" "ingestion" {

aws/telemetry/modules/prometheus-workspace/variables.tf

@@ -28,6 +28,12 @@ variable "alertmanager_config_enabled" {
   default     = true
 }
 
+variable "log_group_arn" {
+  description = "ARN for the CW log group"
+  type        = list(string)
+  default     = []
+}
+
 variable "name" {
   description = "Name for this Prometheus workspace"
   type        = string

aws/telemetry/variables.tf

@@ -46,6 +46,12 @@ variable "alertmanager_config_enabled" {
   default     = true
 }
 
+variable "log_group_arn" {
+  description = "ARN for the CW log group"
+  type        = list(string)
+  default     = []
+}
+
 variable "grafana_role_name" {
   description = "Name of the IAM role created for Grafana"
   type        = string