2118 au 05 audit process migrate logs to s3 buckets (#2198)

* Give s3 bucket and cloudwatch role unique names.
cisagov · Aug 25, 2023 · 773df72 · 773df72
1 parent c15096b
commit 773df72
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/infrastructure/cloudtrail.tf b/infrastructure/cloudtrail.tf
@@ -11,8 +11,8 @@ resource "aws_cloudwatch_log_group" "cloudtrail" {
 
 resource "aws_cloudtrail" "all-events" {
   name                       = "all-events"
-  s3_bucket_name             = var.logging_bucket_name
-  cloud_watch_logs_role_arn  = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${var.logging_bucket_name}-cloudtrail-role"
+  s3_bucket_name             = "crossfeed-${var.stage}-cloudtrail-logs"
+  cloud_watch_logs_role_arn  = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/${var.stage}-cloudtrail-role"
   cloud_watch_logs_group_arn = "${aws_cloudwatch_log_group.cloudtrail.arn}:*"
   tags = {
     Project = var.project