This is a rival approach to https://github.com/guardian/cloudwatch-logs-management/pull/337.
This approach creates a seperate task and to manage logs containing PII data. This allows us to explicitly define these stacks and manage the retention period for these logs.
This approach also means that stacks that are not intending to migrate any logs outside of AWS do not have resources built that exist to do this.
What does this change?
This is a rival approach to https://github.com/guardian/cloudwatch-logs-management/pull/337. This approach creates a seperate task and to manage logs containing PII data. This allows us to explicitly define these stacks and manage the retention period for these logs. This approach also means that stacks that are not intending to migrate any logs outside of AWS do not have resources built that exist to do this.
What testing has been performed for this change?
How can we measure success?
Have we considered potential risks?