Add support for CloudWatch Logs Infrequent Access to RDS

[vchernov-avenga]

Describe the feature

• Make it possible to set a custom Cloudwatch log group when enabling log exports
• Or make it possible to set the CloudWatch Log class when enabling log exports

Use Case

To reduce costs we would like to change the log class from Standard to Infrequent Access.

As of now, there is no way to set the CloudWatch Log class or custom log group when you enable CloudWatch log export for RDS:

aws rds modify-db-instance \
    --db-instance-identifier mydbinstance \
    --cloudwatch-logs-export-configuration '{"EnableLogTypes":["audit","error","general","slowquery"]}'

The Cloudwatch log group for RDS is created with the Standard log class by default.

• We can't change the CloudWatch log class because of RDS limitations.
• Also, we can't create our log group for RDS because RDS doesn't support that .
• Also, We are not able to set a custom log group for RDS

Proposed Solution

• Make it possible to set a custom Cloudwatch log group when enabling log exports:

  aws rds modify-db-instance \
  --db-instance-identifier mydbinstance \
  --cloudwatch-logs-export-configuration '{"EnableLogTypes":["audit","error","general","slowquery"],"LogGroup":"MyCustomLogGroupARN"}'

• Or make it possible to set the CloudWatch Log class when enabling log exports:

  aws rds modify-db-instance \
  --db-instance-identifier mydbinstance \
  --cloudwatch-logs-export-configuration '{"EnableLogTypes":["audit","error","general","slowquery"],"LogClass":"InfrequentAccess"}'

Other Information

No response

Acknowledgements

• [ ] I may be able to implement this feature request
• [ ] This feature might incur a breaking change

CLI version used

aws-cli/2.15.6

Environment details (OS name and version, etc.)

Darwin Kernel Version 21.6.0: Mon Aug 22 20:19:52 PDT 2022; root:xnu-8020.140.49~2/RELEASE_ARM64_T6000

[tim-finnigan]

Hi @vchernov-avenga thanks for the feature request and for your patience here. It sounds like this request should go to the RDS team, as they own and maintain the underlying ModifyDbInstance API. I'll go ahead and forward this to the RDS team, and will transfer this issue to our cross-SDK repository for tracking, since service APIs are used across AWS SDKs.

[tim-finnigan]

Upon searching internally, I found that there is an existing backlog item for the RDS team tracking this feature request. We cannot guarantee if or when a feature request like this will be implemented, but I'll record the feedback you provided here, and you can track the CHANGELOGs and blogs for updates going forward. Thanks again.

[github-actions[bot]]

This issue is now closed.

Comments on closed issues are hard for our team to see. If you need more assistance, please either tag a team member or open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.