terraform-aws-logs

Additionally:

• Removes enabling Cloudtrail and Cloudwatch for an account, but continues to support allowing Cloudtrail & Cloudwatch to log to bucket via bucket policy.
• Enforces private ACL and policies for bucket.

S3 log bucket retention and cloudwatch log group retention were both being represented by the same variable--expiration. Since the cloudwatch_log_group expiration is limited to a set of values (https://registry.terraform.io/modules/trussworks/logs/aws/1.6.0), and should not always necessarily have the same retention value for an s3 bucket, these 2 values are being decoupled within the module. This release separates the two into s3_log_bucket_retention and cloudwatch_log_group_retention.
This is a breaking change.