firehose kms key

Author: Karthikeyannhs

infrastructure/modules/kinesis_firehose/kinesis_firehose_delivery_stream.tf

@@ -13,7 +13,7 @@ resource "aws_kinesis_firehose_delivery_stream" "eligibility_audit_firehose_deli
     cloudwatch_logging_options {
       enabled         = true
       log_group_name  = var.kinesis_cloud_watch_log_group_name
-      log_stream_name = "to-s3"
+      log_stream_name = var.kinesis_cloud_watch_log_stream
     }
   }
 

infrastructure/modules/kinesis_firehose/variables.tf

@@ -18,4 +18,10 @@ variable "kinesis_cloud_watch_log_group_name" {
   type        = string
 }
 
+variable "kinesis_cloud_watch_log_stream" {
+  description = "kinesis cloud watch log stream"
+  type        = string
+}
+
+
 

infrastructure/stacks/api-layer/cloudwatch.tf

@@ -19,3 +19,8 @@ resource "aws_cloudwatch_log_group" "firehose_audit" {
     Stack = local.stack_name
   }
 }
+
+resource "aws_cloudwatch_log_stream" "firehose_audit_stream" {
+  name           = "audit_stream_log"
+  log_group_name = aws_cloudwatch_log_group.firehose_audit.name
+}

infrastructure/stacks/api-layer/iam_policies.tf

@@ -175,7 +175,7 @@ data "aws_iam_policy_document" "s3_rules_kms_key_policy" {
     effect = "Allow"
     principals {
       type        = "AWS"
-      identifiers = [aws_iam_role.eligibility_lambda_role.arn]
+      identifiers = [aws_iam_role.eligibility_lambda_role.arn, aws_iam_role.eligibility_audit_firehose_role.arn]
     }
     actions   = ["kms:Decrypt"]
     resources = ["*"]

infrastructure/stacks/api-layer/kinesis_firehose.tf

@@ -8,4 +8,5 @@ module "eligibility_audit_firehose_delivery_stream" {
   workspace                           = local.workspace
   tags                                = local.tags
   kinesis_cloud_watch_log_group_name  = aws_cloudwatch_log_group.firehose_audit.name
+  kinesis_cloud_watch_log_stream      = aws_cloudwatch_log_stream.firehose_audit_stream.name
 }