EZ4: AWS Logs

It provides all the components to manage logs on AWS.

Getting started

Install

npm install @ez4/aws-logs -D

Permission

Ensure the user performing deployments has the permissions below:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "LogManagement",
      "Effect": "Allow",
      "Action": [
        "logs:CreateLogGroup",
        "logs:DeleteLogGroup",
        "logs:PutRetentionPolicy",
        "logs:DeleteRetentionPolicy",
        "logs:PutResourcePolicy",
        "logs:DeleteResourcePolicy",
        "logs:DescribeLogStreams",
        "logs:TagResource",
        "logs:UntagResource"
      ],
      "Resource": ["arn:aws:logs:{region}:{account-id}:log-group:{prefix}-*"]
    }
  ]
}

Deletion behavior

Non-forced log group deletion is deferred while the newest log event is younger than the configured retention period. The resource remains in state and is checked again by a later deployment. A log group without retention is only deleted automatically when it has no log events; use forced deletion to delete it while events are still retained.

License

MIT License