diff --git a/modules/essentials/fluent_bit.tf b/modules/essentials/fluent_bit.tf index 3b80da95..08e1501e 100644 --- a/modules/essentials/fluent_bit.tf +++ b/modules/essentials/fluent_bit.tf @@ -29,6 +29,8 @@ locals { resource "aws_cloudwatch_log_group" "aws_for_fluent_bit" { #checkov:skip=CKV_AWS_158:Not using CMK to save cost #checkov:skip=CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year" + count = var.fluent_bit_enabled ? 1 : 0 + name = local.log_group_name retention_in_days = var.fluent_bit_log_group_retention }