terraform-aws-logs

Module now requires using Terraform version 1.0 or higher.

Update the module to work with ACL and object ownership changes introduced by AWS in April 2023.

See https://github.com/trussworks/terraform-aws-logs#upgrade-paths for details on how to upgrade.

What's Changed

• chore: removing makefile by @esacteksab in https://github.com/trussworks/terraform-aws-logs/pull/304
• "ci: validate-tf rather than validate and TFDocs GHA" by @esacteksab in https://github.com/trussworks/terraform-aws-logs/pull/305
• NT: adds arn as output and custom bucket policy example by @nyanbinaryneko in https://github.com/trussworks/terraform-aws-logs/pull/306

Full Changelog: https://github.com/trussworks/terraform-aws-logs/compare/v14.2.0...v14.2.1

• Adds bucket policy to outputs allowing a user to amend or append a custom bucket policy

• Add enable_s3_log_bucket_lifecycle_rule. Thanks @amber-h !

• Add support to source account policy for multi account prefixes in Config buckets

Remove filter /* as it's redundant and invalid

This releases https://github.com/trussworks/terraform-aws-logs/pull/273.

See https://github.com/trussworks/terraform-aws-logs#upgrade-paths for details on how to upgrade.

Of note, this replaces the enable_versioning boolean variable with the versioning_status string variable due to the more nuanced behavior of the aws_s3_bucket_versioning resource. With the new behavior, the AWS provider distinguishes between Disabled versioning (versioning has never been enabled) and Suspended versioning (versioning was once enabled, but is now turned off). The old behavior did not include this differentiation.

Additionally, this sets the minimum AWS provider version to 3.75.0.

• add backwards compatibility to aws_s3_bucket
• When mfa_delete is not enabled, just don't set it

Enable the use of version 4 of the AWS provider. Upgrading to this version will require running multiple terraform import statements. Please see the Readme for details: https://github.com/trussworks/terraform-aws-logs#upgrading-from-11xx-to-12xx

• Remove Automation tagging - The preference is to use the AWS provider default_tags for setting Automation = Terraform. If you would like to continue using Automation tagging, you can define it directly in var.tags.

• Restrict to 3.x of the aws provider in anticipation of breaking changes

• Expose the mfa_delete attribute

This release adds the ability to turn on versioning for the logs bucket via the enable_versioning variable.

• Relax version constraints so folks can use this module with 0.14.x

Beware of the logging turtles

• Add logging support to s3 bucket to address CIS.2.6