如何通过Terraform设置AWS CloudWatch的数据保留期限

Question

如何通过Terraform设置AWS CloudWatch的数据保留期限

aws-api-gatewayterraformamazon-cloudwatch

9

使用Terraform部署API Gateway/Lambda，已在Cloudwatch中记录了相应的日志。但是，我似乎找不到一种通过Terraform设置日志保留的方法，使用我当前部署的资源（如下所示）。看起来日志组资源是我需要做的地方，但是不确定如何将api gateway的日志流指向新的日志组。我一定漏掉了一些显而易见的东西...非常感谢您的任何建议！

resource "aws_api_gateway_account" "name" {
  cloudwatch_role_arn = "${aws_iam_role.cloudwatch.arn}"
}

  resource "aws_iam_role" "cloudwatch" {
    name = "#{name}_APIGatewayCloudWatchLogs"
    assume_role_policy = <<EOF
{
 "Version": "2012-10-17",
 "Statement": [
   {
     "Sid": "",
     "Effect": "Allow",
     "Principal": {
     "Service": "apigateway.amazonaws.com"
    },
    "Action": "sts:AssumeRole"
  }
 ]
}
  EOF
  }

resource "aws_iam_policy_attachment" "api_gateway_logs" {
  name = "#{name}_api_gateway_logs_policy_attach"
  roles = ["${aws_iam_role.cloudwatch.id}"]
  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonAPIGatewayPushToCloudWatchLogs"
}  

resource "aws_api_gateway_method_settings" "name" {
  rest_api_id = "${aws_api_gateway_rest_api.name.id}"
  stage_name  = "${aws_api_gateway_stage.name.stage_name}"
  method_path = "${aws_api_gateway_resource.name.path_part}/${aws_api_gateway_method.name.http_method}"

  settings {
    metrics_enabled = true
    logging_level = "INFO"
    data_trace_enabled = true
  }
}

- LHK

1个回答

阿里云服务器只需要99元/年，新老用户同享，点击查看详情

网页内容由stack overflow 提供, 点击上面的

可以查看英文原文，

- victor m · Accepted Answer

是的，您可以使用Lambda日志名称在创建Lambda函数之前创建日志资源。或者，您可以导入现有的日志组。

resource "aws_cloudwatch_log_group" "lambda" {
  name = "/aws/lambda/${var.env}-${join("", split("_",title(var.lambda_name)))}-Lambda"

  retention_in_days = 7

  lifecycle {
    create_before_destroy = true
    prevent_destroy       = false
  }
}