65 lines
1.3 KiB
HCL
65 lines
1.3 KiB
HCL
# S3 bucket for logs
|
|
resource "aws_s3_bucket" "logs" {
|
|
bucket = "${var.cluster_name}-logs"
|
|
force_destroy = true
|
|
}
|
|
|
|
resource "aws_s3_bucket_lifecycle_configuration" "logs" {
|
|
bucket = aws_s3_bucket.logs.id
|
|
|
|
rule {
|
|
id = "expire-old-logs"
|
|
status = "Enabled"
|
|
|
|
filter {
|
|
prefix = ""
|
|
}
|
|
|
|
transition {
|
|
days = 30
|
|
storage_class = "INTELLIGENT_TIERING"
|
|
}
|
|
|
|
expiration {
|
|
days = 365
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "aws_s3_bucket_server_side_encryption_configuration" "logs" {
|
|
bucket = aws_s3_bucket.logs.id
|
|
rule {
|
|
apply_server_side_encryption_by_default {
|
|
sse_algorithm = "AES256"
|
|
}
|
|
}
|
|
}
|
|
|
|
# Athena database + workgroup
|
|
resource "aws_athena_database" "logs" {
|
|
name = "${replace(var.cluster_name, "-", "_")}_logs"
|
|
bucket = aws_s3_bucket.athena_results.bucket
|
|
}
|
|
|
|
resource "aws_s3_bucket" "athena_results" {
|
|
bucket = "${var.cluster_name}-athena-results"
|
|
force_destroy = true
|
|
}
|
|
|
|
resource "aws_athena_workgroup" "logs" {
|
|
name = "${var.cluster_name}-logs"
|
|
|
|
configuration {
|
|
result_configuration {
|
|
output_location = "s3://${aws_s3_bucket.athena_results.bucket}/results/"
|
|
|
|
encryption_configuration {
|
|
encryption_option = "SSE_S3"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
output "logs_bucket" {
|
|
value = aws_s3_bucket.logs.bucket
|
|
}
|