Create bucket and log group for terraform-managed lambdas.

infrastructure/cloudtrail.tf

@@ -25,8 +25,7 @@ resource "aws_cloudtrail" "all-events" {
 }
 
 resource "aws_s3_bucket" "cloudtrail_bucket" {
-  bucket        = var.cloudtrail_bucket_name
-  force_destroy = true
+  bucket = var.cloudtrail_bucket_name
   tags = {
     Project = var.project
     Stage   = var.stage

infrastructure/infrastructure.tf

@@ -0,0 +1,17 @@
+resource "aws_s3_bucket" "infrastructure" {
+  name = var.infrastructure_bucket_name
+  tags = {
+    Project = var.project
+    Stage   = var.stage
+  }
+}
+
+resource "aws_cloudwatch_log_group" "infrastructure" {
+  name              = var.infrastructure_log_group_name
+  retention_in_days = 3653
+  kms_key_id        = aws_kms_key.key.arn
+  tags = {
+    Project = var.project
+    Stage   = var.stage
+  }
+}

infrastructure/prod.tfvars

@@ -46,6 +46,8 @@ cloudtrail_bucket_name            = "cisa-crossfeed-prod-cloudtrail"
 cloudtrail_role_name              = "cisa-crossfeed-prod-cloudtrail"
 cloudtrail_log_group_name         = "cisa-crossfeed-prod-cloudtrail"
 export_bucket_name                = "cisa-crossfeed-prod-exports"
+infrastructure_bucket_name        = "cisa-crossfeed-prod-infrastructure"
+infrastructure_log_group_name     = "cisa-crossfeed-prod-infrastructure"
 reports_bucket_name               = "cisa-crossfeed-prod-reports"
 pe_db_backups_bucket_name         = "cisa-crossfeed-prod-pe-db-backups"
 user_pool_name                    = "crossfeed-prod"

infrastructure/stage.tfvars

@@ -46,6 +46,8 @@ cloudtrail_bucket_name            = "cisa-crossfeed-staging-cloudtrail"
 cloudtrail_role_name              = "cisa-crossfeed-staging-cloudtrail"
 cloudtrail_log_group_name         = "cisa-crossfeed-staging-cloudtrail"
 export_bucket_name                = "cisa-crossfeed-staging-exports"
+infrastructure_bucket_name        = "cisa-crossfeed-staging-infrastructure"
+infrastructure_log_group_name     = "cisa-crossfeed-staging-infrastructure"
 reports_bucket_name               = "cisa-crossfeed-staging-reports"
 pe_db_backups_bucket_name         = "cisa-crossfeed-staging-pe-db-backups"
 user_pool_name                    = "crossfeed-staging"

infrastructure/vars.tf

@@ -286,6 +286,18 @@ variable "export_bucket_name" {
   default     = "cisa-crossfeed-staging-exports"
 }
 
+variable "infrastructure_bucket_name" {
+  description = "infrastructure_bucket_name"
+  type        = string
+  default     = "cisa-crossfeed-staging-infrastructure"
+}
+
+variable "infrastructure_log_group_name" {
+  description = "infrastructure_log_group_name"
+  type        = string
+  default     = "crossfeed-staging-infrastructure-logs"
+}
+
 variable "reports_bucket_name" {
   description = "reports_bucket_name"
   type        = string