Skip to content

Commit

Permalink
Change default log retention for control plane logs
Browse files Browse the repository at this point in the history
This commit connects to
ministryofjustice/cloud-platform#2860 and
relates to the requirement to keep API log data for 13 months as per
security requirements.

The default value has to be either 365 or 400, nothing in between. I've
chosen 400 as it's only 5 days over 13 months.

src:
https://security-guidance.service.justice.gov.uk/logging-and-monitoring/#log-retention
  • Loading branch information
jasonBirchall committed Aug 25, 2021
1 parent eb6ba01 commit 42497a3
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ variable "cluster_enabled_log_types" {
}

variable "cluster_log_retention_in_days" {
default = 90
default = 400 # Slightly over three months as per security advice https://security-guidance.service.justice.gov.uk/logging-and-monitoring/#log-retention
description = "Number of days to retain log events. Default retention - 90 days."
type = number
}

0 comments on commit 42497a3

Please sign in to comment.