eli-238 outputting kms key arns

Author: eddalmond1

infrastructure/modules/api_gateway/outputs.tf

@@ -25,3 +25,7 @@ output "logging_policy_attachment" {
 output "iam_role_name" {
   value = aws_iam_role.api_gateway.name
 }
+
+output "kms_key_arn" {
+  value = aws_kms_key.api_gateway.arn
+}

infrastructure/modules/lambda/outputs.tf

@@ -12,3 +12,7 @@ output "aws_lambda_function_name" {
 output "aws_lambda_invoke_arn" {
   value = aws_lambda_function.eligibility_signposting_lambda.invoke_arn
 }
+
+output "lambda_cmk_arn" {
+  value = aws_kms_key.lambda_cmk.arn
+}

infrastructure/modules/s3/outputs.tf

@@ -17,3 +17,7 @@ output "storage_bucket_name" {
 output "storage_bucket_id" {
   value = aws_s3_bucket.storage_bucket.id
 }
+
+output "storage_bucket_kms_key_arn" {
+  value = aws_kms_key.storage_bucket_cmk.arn
+}

infrastructure/modules/s3/s3.tf

@@ -109,6 +109,9 @@ resource "aws_s3_bucket_lifecycle_configuration" "storage_bucket_access_logs_obj
     id     = "StorageBucketLogsMultipartUploadExpiration"
     status = "Enabled"
 
+    filter {
+      prefix = ""
+    }
     abort_incomplete_multipart_upload {
       days_after_initiation = 7
     }

infrastructure/stacks/api-layer/cloudwatch.tf

@@ -2,7 +2,7 @@
 resource "aws_cloudwatch_log_group" "lambda_logs" {
   name              = "/aws/lambda/${module.eligibility_signposting_lambda_function.aws_lambda_function_id}"
   retention_in_days = 365
-  kms_key_id        = module.eligibility_signposting_api_gateway.lambda_cmk.arn
+  kms_key_id        = module.eligibility_signposting_lambda_function.lambda_cmk_arn
 
   tags = {
     Name  = "lambda-execution-logs"