Best practices Blueprint for AWS CloudWatch Log Group

Customizable templates for deploying cloud infrastructure

AWS CloudWatch Log Group

This blueprint creates an AWS CloudWatch Log Group with best practices in mind, such as setting a default retention period of 14 days to prevent unlimited storage costs and optionally enabling encryption using a KMS key for enhanced security. It encourages the use of tags for better resource identification and management. The blueprint is organized to assist users, including those who may not be cloud infrastructure experts, in configuring essential settings easily.

‍

Create this Blueprint in Resourcely

Define and customize Blueprints to set what infrastructure configuration options are available to developers.


---
constants:
  __name: "{{ name }}_{{ __guid }}"
variables:
  name:
    desc: "Name of the CloudWatch Log Group."
    required: true
    group: Log Group Details
  retention_in_days:
    desc: "Number of days to retain log events."
    required: false
    group: Log Group Details
    default: 14
  kms_key_id:
    desc: "ARN of the KMS Key for encrypting log data."
    required: false
    group: Security
    links_to: resource.aws_kms_key.arn
  tags:
    group: Tags
    required: false
groups:
  Log Group Details:
    order: 1
    desc: "Basic settings for the CloudWatch Log Group."
  Security:
    order: 2
    desc: "Encryption settings for the log group."
  Tags:
    order: 3
    desc: "Tags to assign to the log group."
---

resource "aws_cloudwatch_log_group" "__name" {
  name              = {{ name }}
  retention_in_days = {{ retention_in_days }}
  kms_key_id        = {{ kms_key_id | required: false }}

  tags = {
    {{# tags }}
      {{ tags.key | required: false }} = {{ tags.value | required: false }}
    {{/ tags }}
  }
}

// Sets a default retention period to prevent unlimited storage costs.
// Allows optional encryption with KMS for enhanced security.
// Encourages tagging for resource identification and management.
//

A form is created automatically that accepts inputs that you defined in the Blueprint.

After filling out the Blueprint form, Terraform is generated and a PR is automatically submitted.

AWS CloudWatch Log Group

Talk to a Human