https://github.com/trussworks/terraform-aws-route53-query-logs
Configures query logging on an existing Route53 hosted zones.
https://github.com/trussworks/terraform-aws-route53-query-logs
aws aws-route53 terraform terraform-modules
Last synced: 3 months ago
JSON representation
Configures query logging on an existing Route53 hosted zones.
- Host: GitHub
- URL: https://github.com/trussworks/terraform-aws-route53-query-logs
- Owner: trussworks
- License: bsd-3-clause
- Created: 2019-09-24T21:51:51.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2023-06-08T19:35:49.000Z (almost 2 years ago)
- Last Synced: 2024-09-27T19:21:44.258Z (7 months ago)
- Topics: aws, aws-route53, terraform, terraform-modules
- Language: HCL
- Homepage: https://registry.terraform.io/modules/trussworks/route53-query-logs
- Size: 278 KB
- Stars: 5
- Watchers: 8
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
This module configures query logging on an existing Route53 hosted zone.
**NOTE: AWS only supports sending Route53 logs in us-east-1 so we must create all the resources in that region.**
In order to use this module, you will need to define a `us-east-1` provider using the following code:
```hcl
provider "aws" {
alias = "us-east-1"
region = "us-east-1"
}
```
**ADDITIONAL NOTE: There is a limit of ten Cloudwatch log resource policies an AWS account can have in place. If you plan to have several instances of this module, it is recommended that only one should have `create_resource_policy` set to true and the others to false.**
Creates the following resources:
- CloudWatch log group for storing Route53 query logs
- IAM Policy for allowing logs to be written
- Route53 query logging service
## Usage
```hcl
module "r53_query_logging" {
source = "trussworks/route53-query-logs/aws"
version = "~> 3.0.0"
providers = {
aws.us-east-1 = aws.us-east-1
}
logs_cloudwatch_retention = 30
zone_id = aws_route53_zone.my_zone.zone_id
}
```
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 1.0 |
| [aws](#requirement\_aws) | >= 3.0 |
## Providers
| Name | Version |
|------|---------|
| [aws](#provider\_aws) | >= 3.0 |
| [aws.us-east-1](#provider\_aws.us-east-1) | >= 3.0 |
## Modules
No modules.
## Resources
| Name | Type |
|------|------|
| [aws_cloudwatch_log_group.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
| [aws_cloudwatch_log_resource_policy.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_resource_policy) | resource |
| [aws_route53_query_log.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_query_log) | resource |
| [aws_iam_policy_document.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document) | data source |
| [aws_route53_zone.main](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/route53_zone) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [create\_resource\_policy](#input\_create\_resource\_policy) | Specifies whether the module should create the resource policy. | `bool` | `true` | no |
| [logs\_cloudwatch\_retention](#input\_logs\_cloudwatch\_retention) | Specifies the number of days you want to retain log events in the log group. | `string` | `90` | no |
| [zone\_id](#input\_zone\_id) | Route53 zone ID. | `string` | n/a | yes |
## Outputs
No outputs.