Merge pull request #87 from NHSDigital/feature/CCM-10246_test

CCM-10246: Edge lambda regional log group

Author: sidnhs

infrastructure/modules/lambda/cloudwatch_log_group.tf

@@ -10,3 +10,17 @@ resource "aws_cloudwatch_log_group" "main" {
     },
   )
 }
+
+resource "aws_cloudwatch_log_group" "main_edge" {
+  count             = var.lambda_at_edge ? 1 : 0
+  name              = "/aws/lambda/us-east-1.${local.csi}"
+  retention_in_days = var.log_retention_in_days
+  kms_key_id        = var.kms_key_arn
+
+  tags = merge(
+    local.default_tags,
+    {
+      Name = local.csi
+    },
+  )
+}

infrastructure/modules/lambda/data_iam_policy_document_put_logs.tf

@@ -9,9 +9,11 @@ data "aws_iam_policy_document" "put_logs" {
     ]
 
     #trivy:ignore:aws-iam-no-policy-wildcards
-    resources = [
+    resources = flatten([[
       "${aws_cloudwatch_log_group.main.arn}:*",
-    ]
+      ], var.lambda_at_edge ? [
+      "${aws_cloudwatch_log_group.main_edge[0].arn}:*",
+    ] : []])
   }
 
   dynamic "statement" {