feat: adding vpc flow logs support to main vpc module (#267)

Co-authored-by: Benjamin Valiente (Contractor) <benjamin.valiente@thoughtbot.com>

Author: benjaminvaliente

aws/network/README.md

@@ -91,6 +91,7 @@ module "network" {
 | <a name="input_enable_flow_logs"></a> [enable\_flow\_logs](#input\_enable\_flow\_logs) | Set to true to enable VPC flow logs | `bool` | `false` | no |
 | <a name="input_enable_ipv6"></a> [enable\_ipv6](#input\_enable\_ipv6) | Set to false to disable IPV6 | `bool` | `false` | no |
 | <a name="input_enable_public_ip_on_launch"></a> [enable\_public\_ip\_on\_launch](#input\_enable\_public\_ip\_on\_launch) | Set to true to auto-assign IP addresses in public subnets | `bool` | `false` | no |
+| <a name="input_flow_logs_retention_days"></a> [flow\_logs\_retention\_days](#input\_flow\_logs\_retention\_days) | Number of days to retain VPC Flow Logs in CloudWatch. | `number` | `null` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name for this network | `string` | n/a | yes |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | Prefix to be applied to created resources | `list(string)` | `[]` | no |
 | <a name="input_nat_availability_zones"></a> [nat\_availability\_zones](#input\_nat\_availability\_zones) | Availability zones in which NAT should be provided | `list(string)` | n/a | yes |

aws/network/main.tf

@@ -2,12 +2,13 @@ module "vpc" {
   count  = var.create_vpc ? 1 : 0
   source = "./modules/vpc"
 
-  cidr_block       = var.vpc_cidr_block
-  enable_flow_logs = var.enable_flow_logs
-  enable_ipv6      = var.enable_ipv6
-  name             = var.name
-  namespace        = var.namespace
-  tags             = local.vpc_tags
+  cidr_block               = var.vpc_cidr_block
+  enable_flow_logs         = var.enable_flow_logs
+  enable_ipv6              = var.enable_ipv6
+  name                     = var.name
+  namespace                = var.namespace
+  tags                     = local.vpc_tags
+  flow_logs_retention_days = var.flow_logs_retention_days
 }
 
 data "aws_vpc" "this" {

aws/network/variables.tf

@@ -94,3 +94,9 @@ variable "vpc_tags" {
   description = "Tags to be applied to the VPC"
   default     = {}
 }
+
+variable "flow_logs_retention_days" {
+  description = "Number of days to retain VPC Flow Logs in CloudWatch." # Only applies when enable_flow_logs is true.
+  type        = number
+  default     = null # null = retain forever
+}