aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

[Resource Type] - [Enhancement] - CloudWatch Log Group protection from deletion

Open
#2,435 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::Logs::LogGroup

### Resource name

_No response_

### Description

Protection of log groups from deletion has been introduced recently:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/protecting-log-groups-from-deletion.html

Unfortunately, AWS::Logs::LogGroup does not provide such an attribute:
https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-logs-loggroup.html

I know that enabling such protection is possible using AWS CLI but it is less convenient that expressing it in CloudFormation.

Similar protections, such as EC2 termination protection, are already supported by AWS::EC2::Instance:
https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-ec2-instance.html

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::Logs::LogGroup CloudFormation reference and the linked CloudWatch log group deletion-protection documentation. Compare the requested capability with the existing EC2 termination protection support. Done means CloudFormation exposes an equivalent protection attribute for AWS::Logs::LogGroup.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.