Add send VPC flow logs to S3 AWS Provider #5600
Labels
enhancement
Requests to existing resources that expand the functionality or scope.
service/ec2
Issues and PRs that pertain to the ec2 service.
service/s3
Issues and PRs that pertain to the s3 service.
Milestone
This issue was originally opened by @whume as hashicorp/terraform#18701. It was migrated here as a result of the provider split. The original body of the issue is below.
Current Terraform Version
Use-cases
Attempted Solutions
This functionality would allow users to dump data directly to S3 instead of a cloudwatch log group.
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs-s3.html
Currently for centralized logging we create cloud watch destination then use a subscription filter on the cloudwatch log group created by vpc flow logs to send the data to a kinesis stream in another aws account. This would allow us to dump logs directly to s3 then use a bucket policy to provision access.
Proposal
Add feature to support AWS new feature https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs-s3.html
References
The text was updated successfully, but these errors were encountered: