serverless / serverless/serverless

Support encrypted CW log groups

Open
#4,565 11 comments 17 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

cat/lambda enhancement needs feedback
Dominant language
JavaScript
Stars
46.9k
Forks
5.7k
Avg merge
10h 7m
Merged PRs (30d)
57

Description

This is a Feature Proposal

Description

AWS just announced encrypted CW logstreams (by using KMS) on a log group basis. As soon as this is supported in CloudFormation it would be great to have the functionality available in Serverless, i.e. that you can select encryption per function and reference a KMS key.

Reference: https://aws.amazon.com/about-aws/whats-new/2017/12/amazon-cloudwatch-logs-now-supports-kms-encryption/

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by confirming the CloudFormation support for encrypted CloudWatch log groups and review the AWS announcement linked in the issue. Trace how Serverless creates per-function log groups and determine how a function-level encryption setting and KMS key reference should be represented; done means the configuration is deployable through CloudFormation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
cloud, observability
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.