⭐ Add cloudWatchLogsLogGroupArn to aws.cloudtrail.trails resource (#3290

) * has issue Signed-off-by: Hossein Rouhani <[email protected]> * new clean version Signed-off-by: Hossein Rouhani <[email protected]> --------- Signed-off-by: Hossein Rouhani <[email protected]>
mondoohq · Feb 14, 2024 · 5aeb69d · 5aeb69d
1 parent 9220b11
commit 5aeb69d
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 0 deletions.
diff --git a/providers/aws/resources/aws.lr b/providers/aws/resources/aws.lr
@@ -1520,6 +1520,8 @@ private aws.cloudtrail.trail @defaults("name region") {
   logGroup() aws.cloudwatch.loggroup
   // Role for logs endpoint to assume when writing to log group
   cloudWatchLogsRoleArn string
+  // Group for logs endpoint to assume when writing to log group
+  cloudWatchLogsLogGroupArn string
   // Settings for the trail's configured event selectors
   eventSelectors() []dict
   // Region in which the trail was created (home region)

diff --git a/providers/aws/resources/aws.lr.go b/providers/aws/resources/aws.lr.go
diff --git a/providers/aws/resources/aws.lr.manifest.yaml b/providers/aws/resources/aws.lr.manifest.yaml
@@ -460,6 +460,7 @@ resources:
           status
           logGroup
           cloudWatchLogsRoleArn
+          cloudWatchLogsLogGroupArn
           eventSelectors
           region
         }
@@ -474,6 +475,7 @@ resources:
         The `aws.cloudtrail.trail` object represents an individual AWS CloudTrail configured within an account. For usage, read the `aws.cloudtrail` resource documentation.
     fields:
       arn: {}
+      cloudWatchLogsLogGroupArn: {}
       cloudWatchLogsRoleArn: {}
       eventSelectors: {}
       includeGlobalServiceEvents: {}

diff --git a/providers/aws/resources/aws_cloudtrail.go b/providers/aws/resources/aws_cloudtrail.go
@@ -131,6 +131,7 @@ func (a *mqlAwsCloudtrail) getTrails(conn *connection.AwsConnection) []*jobpool.
 					"includeGlobalServiceEvents": llx.BoolDataPtr(trail.IncludeGlobalServiceEvents),
 					"snsTopicARN":                llx.StringDataPtr(trail.SnsTopicARN),
 					"cloudWatchLogsRoleArn":      llx.StringDataPtr(trail.CloudWatchLogsRoleArn),
+					"cloudWatchLogsLogGroupArn":  llx.StringDataPtr(trail.CloudWatchLogsLogGroupArn),
 					"region":                     llx.StringDataPtr(trail.HomeRegion),
 				}