GenderDysphoria.fyi/terraform/cloudwatch-logs.tf

data "aws_caller_identity" "current" {}

data "aws_region" "current" {}

resource "aws_cloudwatch_log_group" "ipixel_results" {
  name = "/aws/ipixel/${var.site}"

  retention_in_days = 90

  tags = {
    Site = var.site,
    Role = "ipixel"
  }
}

data "aws_iam_policy_document" "logs_cloudwatch_log_group" {
  statement {
    actions   = ["logs:DescribeLogStreams"]
    resources = ["arn:aws:logs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:*"]
  }

  statement {
    actions   = ["logs:CreateLogStream", "logs:PutLogEvents"]
    resources = ["${aws_cloudwatch_log_group.ipixel_results.arn}:*"]
  }
}

resource "aws_cloudwatch_log_group" "ipixel_parser_logs" {
  name = "/aws/ipixel_parser/${var.site}"

  retention_in_days = 3

  tags = {
    Site = var.site,
    Role = "ipixel"
  }
}

data "aws_iam_policy_document" "ipixel_parser_cloudwatch_log_group" {
  statement {
    actions   = ["logs:DescribeLogStreams"]
    resources = ["arn:aws:logs:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:*"]
  }

  statement {
    actions   = ["logs:CreateLogStream", "logs:PutLogEvents"]
    resources = ["${aws_cloudwatch_log_group.ipixel_parser_logs.arn}:*"]
  }
}