diff --git a/services/terraform/modules/shared/opensearch.tf b/services/terraform/modules/shared/opensearch.tf --- a/services/terraform/modules/shared/opensearch.tf +++ b/services/terraform/modules/shared/opensearch.tf @@ -52,4 +52,10 @@ Name = var.domain Environment = var.is_dev ? "development" : "production" } + + log_publishing_options { + cloudwatch_log_group_arn = "arn:aws:logs:us-east-2:${var.target_account_id}:log-group:/aws/OpenSearchService/domains/identity-search-domain/application-logs" + enabled = true + log_type = "ES_APPLICATION_LOGS" + } } diff --git a/services/terraform/modules/shared/variables.tf b/services/terraform/modules/shared/variables.tf --- a/services/terraform/modules/shared/variables.tf +++ b/services/terraform/modules/shared/variables.tf @@ -14,3 +14,8 @@ variable "cidr_block" {} variable "subnet_ids" {} + +variable "target_account_id" { + type = string + default = "" +} diff --git a/services/terraform/remote/main.tf b/services/terraform/remote/main.tf --- a/services/terraform/remote/main.tf +++ b/services/terraform/remote/main.tf @@ -60,6 +60,7 @@ subnet_ids = [ aws_subnet.public_a.id, ] + target_account_id = local.target_account_id } check "workspace_check" {