Attach log group to MWAA environment

mellevanderlinde · Jul 10, 2024 · 29087ad · 29087ad
1 parent 943b33c
commit 29087ad
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 1 deletion.
diff --git a/lib/mwaa-stack.ts b/lib/mwaa-stack.ts
@@ -5,6 +5,7 @@ import {
   aws_ec2 as ec2,
   aws_s3 as s3,
   aws_iam as iam,
+  aws_logs as logs,
   aws_mwaa as mwaa,
 } from "aws-cdk-lib";
 import { Construct } from "constructs";
@@ -29,6 +30,11 @@ export class MwaaStack extends Stack {
 
     const role = this.createRole(environmentName, bucket);
 
+    const logGroup = new logs.LogGroup(this, "LogGroup", {
+      retention: logs.RetentionDays.ONE_DAY,
+      removalPolicy: RemovalPolicy.DESTROY,
+    });
+
     const vpc = new ec2.Vpc(this, "Vpc", {
       maxAzs: 2,
       natGateways: 1,
@@ -48,6 +54,7 @@ export class MwaaStack extends Stack {
       vpc,
       allowAllOutbound: true,
     });
+
     securityGroup.addIngressRule(securityGroup, ec2.Port.allTraffic());
 
     new mwaa.CfnEnvironment(this, "MwaaEnvironment", {
@@ -68,7 +75,11 @@ export class MwaaStack extends Stack {
       },
       webserverAccessMode: "PUBLIC_ONLY",
       loggingConfiguration: {
-        taskLogs: { enabled: true, logLevel: "INFO" },
+        taskLogs: {
+          cloudWatchLogGroupArn: logGroup.logGroupArn,
+          enabled: true,
+          logLevel: "INFO",
+        },
       },
     });
 

diff --git a/test/__snapshots__/mwaa-airflow.test.ts.snap b/test/__snapshots__/mwaa-airflow.test.ts.snap
@@ -682,6 +682,14 @@ exports[`Match MwaaStack with snapshot 1`] = `
       },
       "Type": "AWS::IAM::Role",
     },
+    "LogGroupF5B46931": {
+      "DeletionPolicy": "Delete",
+      "Properties": {
+        "RetentionInDays": 1,
+      },
+      "Type": "AWS::Logs::LogGroup",
+      "UpdateReplacePolicy": "Delete",
+    },
     "MwaaEnvironment": {
       "Properties": {
         "AirflowVersion": "2.9.2",
@@ -695,6 +703,12 @@ exports[`Match MwaaStack with snapshot 1`] = `
         },
         "LoggingConfiguration": {
           "TaskLogs": {
+            "CloudWatchLogGroupArn": {
+              "Fn::GetAtt": [
+                "LogGroupF5B46931",
+                "Arn",
+              ],
+            },
             "Enabled": true,
             "LogLevel": "INFO",
           },