From e0b587db4a18b81063d60e6d6cb489619afb30d7 Mon Sep 17 00:00:00 2001 From: Kai Siren Date: Wed, 9 Oct 2024 23:37:58 -0700 Subject: [PATCH] appease checkov --- infra/modules/search/main.tf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/infra/modules/search/main.tf b/infra/modules/search/main.tf index 45020d78f..ab63b4a81 100644 --- a/infra/modules/search/main.tf +++ b/infra/modules/search/main.tf @@ -69,24 +69,31 @@ resource "aws_opensearch_domain" "opensearch" { log_publishing_options { cloudwatch_log_group_arn = aws_cloudwatch_log_group.opensearch.arn log_type = "AUDIT_LOGS" + enabled = true } log_publishing_options { cloudwatch_log_group_arn = aws_cloudwatch_log_group.opensearch.arn log_type = "ES_APPLICATION_LOGS" + enabled = true } log_publishing_options { cloudwatch_log_group_arn = aws_cloudwatch_log_group.opensearch.arn log_type = "INDEX_SLOW_LOGS" + enabled = true } log_publishing_options { cloudwatch_log_group_arn = aws_cloudwatch_log_group.opensearch.arn log_type = "SEARCH_SLOW_LOGS" + enabled = true } software_update_options { auto_software_update_enabled = true } + + # checkov:skip=CKV_AWS_318: false positve, we use a high availability setup in prod + # checkov:skip=CKV2_AWS_59: false positve, we use a high availability setup in prod }