/terraform-aws-prowler-monitoring

A collection of log metric filters and alarms to satisfy Prowler Monitoring checks

Primary LanguageHCLApache License 2.0Apache-2.0

DO NOT USE THIS REPO - MIGRATED TO GITLAB

AWS Prowler monitoring Terraform module

Terraform module that creates a collection of AWS log metric filters and alarms to satisfy section 3 of the Prowler Monitoring checks. This modules uses the AWS metric filter alarm Terraform module.

Usage

module "my_prowler_monitoring" {
  source = "dwp/prowler-monitoring/aws"

  log_group_name = "MyLogGroup"
}

Examples

The following example creates a CloudWatch Log Group, SNS Topic and alarms to satisfy section 3 of the Prowler monitoring checks. If any of the alarms go into an "ALARM" state a notification will be sent to the SNS Topic.

resource "aws_cloudwatch_log_group" "MyLogGroup" {
  name = "MyLogGroup"
}

resource "aws_sns_topic" "MyTopic" {
  name = "MyTopic"
  display_name = "My Topic"
}

module "my_prowler_monitoring" {
  source = "dwp/prowler-monitoring/aws"

  log_group_name = aws_cloudwatch_log_group.MyLogGroup.name
  alarm_action_arns = [aws_sns_topic.MyTopic.arn]
}