Skip to content

Latest commit

 

History

History
63 lines (47 loc) · 2.34 KB

README.md

File metadata and controls

63 lines (47 loc) · 2.34 KB

Terraform AWS CloudTrail Module

This module creates an AWS CloudTrail trail and the necessary AWS resources to support logging and monitoring AWS account activity.

Features

  • AWS CloudTrail creation: This module creates a CloudTrail trail that logs API activity in your AWS account.
  • S3 bucket creation: The module creates an S3 bucket to store the CloudTrail logs.
  • Encryption: Logs stored in the S3 bucket are encrypted using AWS Key Management Service (AWS KMS).

Usage

module "cloudtrail" {
  source                       = "github.com/lincolnloop/terraform-aws-cloudtrail.git"
  name                         = "cloudtrail"
  description                  = "Cloudtrail"
  cloudwatch_log_group_name    = "/aws/cloudtrail"
  cloudwatch_retention_in_days = 1
  cloudtrail_iam_role_name     = "CloudWatchRole"
  s3_prefix                    = "cloudtrail"
  tags                         = var.tags
}

Inputs

Name Description Type Default Required
tags Configuration for CloudTrail alarms and tags. object Review next section for default value yes
cloudtrail_iam_role_name IAM Role name for CloudTrail Role. string CloudTrail no
cloudwatch_log_group_name Name for the CloudWatch log group that will contain the cloudtrail logs. string /aws/cloudtrail no
cloudwatch_retention_in_days Cloudwatch log group retention specified in days. number 1 no
description Description for the cloud trail group and new policy group. string cloudtrail yes
name Name for the cloudtrail group configuration and new policy group. string cloudtrail no
s3_prefix S3 naming and configuration prefix. string n/a yes
organization Set the is_organization_trail flag on the trail. bool false no

Variable tags

This input variable controls the tags that will be added to all the resources.

  cloudtrail_tags = {
    Application = "cloudtrail"
  }

Default value is shown here

Outputs

Name Description
cloudtrail_arn The ARN of the CloudTrail trail.
s3_bucket_arn The ARN of the CloudTrail S3 bucket.
cloudwatch_log_group_arn The ARN of the Cloudwatch log group.

Requirements

  • Terraform 1.4 or newer
  • AWS Provider 4.67 or newer