#terraform-aws-modules - September 2021

September 2021
CWills
CWillsabout 5 years ago
Hey folks, wondered if anyone could give me some advice on the aws_backup module, specifically how do I ensure that the resource tags are copied to my recovery tags, this doesn't seem well documented at all. Any pointers would me most appreciated.
CWills
CWillsabout 5 years ago
Anyone know how the aws backup module works ?
CWills
CWillsabout 5 years ago
hello anyone ?
Manuel Morejón
Manuel Morejónabout 5 years ago
Hi team! Any help needed to merge this PR?
https://github.com/cloudposse/terraform-aws-iam-role/pull/30
Manuel Morejón
Manuel Morejónabout 5 years ago(edited)
Hi @RB (pat leave again)! One question, I’m using terraform-aws-cloudwatch-logs to create a log-group for Opensearch (formerly Elasticsearch) and I get this error:
│ Error: ValidationException: The Resource Access Policy specified for the CloudWatch Logs log group home-dev-es-search does not grant sufficient permissions for Amazon OpenSearch Service to create a log stream. Please check the Resource Access Policy.

this is my tf file
module "home_dev_es_label" {
  source  = "cloudposse/label/null"
  version = "0.25.0"

  namespace = "home"
  stage     = "dev"
  name      = "es"
}

module "cloudwatch_search_log" {
  source  = "cloudposse/cloudwatch-logs/aws"
  version = "0.5.0"

  attributes             = ["search"]
  additional_permissions = ["logs:*"]
  principals             = { "Service" : ["<http://es.amazonaws.com|es.amazonaws.com>"] }

  context = module.home_dev_es_label.context
}

Could you help me with this error?
Sergey
Sergeyabout 5 years ago(edited)
Hello all!
I try to manage AWS API GW resources using Terraform. Today I have faced strange issue - I added some changes to the stage configuration in terraform manifest and applied these changes. But Terraform removed a previous deployment version and created new one. So, my questions are:
* Is it valid behaviour?
* Why does Terraform remove previous deployment version instead of creates new one and just switch configuration of API GW onto this configuration?
* If you use terraform for API GW, do you have deployment history with previous deployed versions?