fix: do not create cw log group for fluent bit if not needed

SPHTech-Platform · Jul 7, 2023 · 4a861e5 · 4a861e5
1 parent 886f9c7
commit 4a861e5
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modules/essentials/fluent_bit.tf b/modules/essentials/fluent_bit.tf
@@ -29,6 +29,8 @@ locals {
 resource "aws_cloudwatch_log_group" "aws_for_fluent_bit" {
   #checkov:skip=CKV_AWS_158:Not using CMK to save cost
   #checkov:skip=CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
+  count = var.fluent_bit_enabled ? 1 : 0
+
   name              = local.log_group_name
   retention_in_days = var.fluent_bit_log_group_retention
 }