aws-solutions / aws-control-tower-customizations

The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.
https://docs.aws.amazon.com/controltower/latest/userguide/cfct-overview.html
Apache License 2.0
354 stars 205 forks source link

Would like logging added to the stepfunction #190

Open cf-mark-de-boer opened 4 months ago

cf-mark-de-boer commented 4 months ago

Is your feature request related to a problem? Please describe. SecurityHub best-practice standards prescribe using loging on a stepfunction. I would like the posibility to enable it with stack parameter (s). Both StaeMachines dont have this option yet.

Describe the feature you'd like custom-control-tower-initiation.template:

ServiceControlPolicyMachine: Type: 'AWS::StepFunctions::StateMachine' Properties: StateMachineName: CustomControlTowerServiceControlPolicyMachine RoleArn: !GetAtt 'StateMachineRole.Arn' **LoggingConfiguration: Destinations:

Additional context Add any other context or screenshots about the feature request here.

hanafya commented 4 months ago

Hey @cf-mark-de-boer!

Thank you very for this feature request! I have created an item in our backlog for this request!