Added Option to use KMS key for cloudwatch logs group. (#404)

This commit is contained in:
till-krauss
2019-06-24 12:53:43 +02:00
committed by Max Williams
parent 8260f1095e
commit ba3377360e
4 changed files with 8 additions and 1 deletions

View File

@@ -3,7 +3,11 @@ variable "cluster_enabled_log_types" {
description = "A list of the desired control plane logging to enable. For more information, see Amazon EKS Control Plane Logging documentation (https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html)"
type = list(string)
}
variable "cluster_log_kms_key_id" {
default = ""
description = "If a KMS Key ARN is set, this key will be used to encrypt the corresponding log group. Please be sure that the KMS Key has an appropriate key policy (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)"
type = string
}
variable "cluster_log_retention_in_days" {
default = 90
description = "Number of days to retain log events. Default retention - 90 days."