Revert "Enable audit logs"

nasa-gcn · Aug 9, 2024 · 936ef3b · 936ef3b
1 parent 846a85b
commit 936ef3b
Showing 1 changed file with 3 additions and 21 deletions.
diff --git a/service.ts b/service.ts
@@ -36,7 +36,7 @@ export function cloudformationResources({
   }
 
   return {
-    OpenSearchApplicationLogGroup: {
+    OpenSearchLogGroup: {
       Type: 'AWS::Logs::LogGroup',
       Properties: {
         LogGroupName: {
@@ -45,15 +45,6 @@ export function cloudformationResources({
         },
       },
     },
-    OpenSearchAuditLogGroup: {
-      Type: 'AWS::Logs::LogGroup',
-      Properties: {
-        LogGroupName: {
-          'Fn::Sub':
-            '/aws/OpenSearchService/stacks/${AWS::StackName}/audit-logs',
-        },
-      },
-    },
     OpenSearchLogPolicy: {
       Type: 'AWS::Logs::ResourcePolicy',
       Properties: {
@@ -67,10 +58,7 @@ export function cloudformationResources({
                 Effect: 'Allow',
                 Principal: { Service: 'es.amazonaws.com' },
                 Action: ['logs:PutLogEvents', 'logs:CreateLogStream'],
-                Resource: [
-                  { 'Fn::GetAtt': ['OpenSearchAuditLogGroup', 'Arn'] },
-                  { 'Fn::GetAtt': ['OpenSearchApplicationLogGroup', 'Arn'] },
-                ],
+                Resource: { 'Fn::GetAtt': ['OpenSearchLogGroup', 'Arn'] },
               },
             ],
           },
@@ -110,15 +98,9 @@ export function cloudformationResources({
         EncryptionAtRestOptions: { Enabled: true },
         IPAddressType: 'dualstack',
         LogPublishingOptions: {
-          AUDIT_LOGS: {
-            CloudWatchLogsLogGroupArn: {
-              'Fn::GetAtt': ['OpenSearchAuditLogGroup', 'Arn'],
-            },
-            Enabled: true,
-          },
           ES_APPLICATION_LOGS: {
             CloudWatchLogsLogGroupArn: {
-              'Fn::GetAtt': ['OpenSearchApplicationLogGroup', 'Arn'],
+              'Fn::GetAtt': ['OpenSearchLogGroup', 'Arn'],
             },
             Enabled: true,
           },