log permissions

JamesWoolfenden · Jan 27, 2025 · 797b9e8 · 797b9e8
1 parent c2a2926
commit 797b9e8
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 7 deletions.
diff --git a/src/aws.go b/src/aws.go
@@ -1149,6 +1149,7 @@ var tFLookup = map[string]interface{}{ //nolint:gochecknoglobals
 	"aws_cloudwatch_log_delivery_destination_policy":                   awsCloudwatchLogDeliveryDestinationPolicy,
 	"aws_cloudwatch_log_delivery_source":                               awsCloudwatchLogDeliverySource,
 	"aws_cloudwatch_log_index_policy":                                  awsCloudwatchLogIndexPolicy,
+	"aws_cloudwatch_log_anomaly_detector":                              awsCloudwatchLogAnomalyDetector,
 }
 
 // GetAWSPermissions for AWS resources.

diff --git a/src/files.go b/src/files.go
@@ -3237,3 +3237,6 @@ var awsCloudwatchLogDeliverySource []byte
 
 //go:embed mapping/aws/resource/logs/aws_cloudwatch_log_index_policy.json
 var awsCloudwatchLogIndexPolicy []byte
+
+//go:embed mapping/aws/resource/logs/aws_cloudwatch_log_anomaly_detector.json
+var awsCloudwatchLogAnomalyDetector []byte
diff --git a/terraform/aws/backup/aws_cloudwatch_log_anomaly_detector.tf b/terraform/aws/backup/aws_cloudwatch_log_anomaly_detector.tf
@@ -3,10 +3,10 @@ resource "aws_cloudwatch_log_group" "test" {
   name  = "testing-${count.index}"
 }
 
-# resource "aws_cloudwatch_log_anomaly_detector" "test" {
-#   detector_name           = "testing"
-#   log_group_arn_list      = [aws_cloudwatch_log_group.test[0].arn]
-#   anomaly_visibility_time = 7
-#   evaluation_frequency    = "TEN_MIN"
-#   enabled                 = "false"
-# }
+resource "aws_cloudwatch_log_anomaly_detector" "test" {
+  detector_name           = "testing"
+  log_group_arn_list      = [aws_cloudwatch_log_group.test[0].arn]
+  anomaly_visibility_time = 7
+  evaluation_frequency    = "TEN_MIN"
+  enabled                 = "false"
+}