Set log group removalPolicy to RETAIN

Author: kris-szlapa

packages/cdk/resources/LambdaFunction.ts

@@ -62,7 +62,7 @@ export class LambdaFunction extends Construct {
       encryptionKey: cloudWatchLogsKmsKey,
       logGroupName: `/aws/lambda/${props.functionName!}`,
       retention: props.logRetentionInDays,
-      removalPolicy: RemovalPolicy.DESTROY
+      removalPolicy: RemovalPolicy.RETAIN
     })
 
     const cfnlogGroup = logGroup.node.defaultChild as CfnLogGroup

packages/cdk/resources/RestApiGateway.ts

@@ -54,7 +54,7 @@ export class RestApiGateway extends Construct {
       encryptionKey: cloudWatchLogsKmsKey,
       logGroupName: `/aws/apigateway/${props.stackName}-apigw`,
       retention: props.logRetentionInDays,
-      removalPolicy: RemovalPolicy.DESTROY
+      removalPolicy: RemovalPolicy.RETAIN
     })
 
     new CfnSubscriptionFilter(this, "ApiGatewayAccessLogsSplunkSubscriptionFilter", {

packages/cdk/stacks/EpsAssistMeStack.ts

@@ -74,7 +74,7 @@ export class EpsAssistMeStack extends Stack {
     const accessLogBucket = new Bucket(this, "EpsAssistAccessLogsBucket", {
       encryption: BucketEncryption.KMS,
       encryptionKey: cloudWatchLogsKmsKey,
-      removalPolicy: RemovalPolicy.DESTROY,
+      removalPolicy: RemovalPolicy.RETAIN,
       blockPublicAccess: BlockPublicAccess.BLOCK_ALL,
       versioned: true,
       objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED
@@ -84,7 +84,7 @@ export class EpsAssistMeStack extends Stack {
     const kbDocsBucket = new Bucket(this, "EpsAssistDocsBucket", {
       encryptionKey: cloudWatchLogsKmsKey,
       encryption: BucketEncryption.KMS,
-      removalPolicy: RemovalPolicy.DESTROY,
+      removalPolicy: RemovalPolicy.RETAIN,
       blockPublicAccess: BlockPublicAccess.BLOCK_ALL,
       versioned: true,
       objectOwnership: ObjectOwnership.BUCKET_OWNER_ENFORCED,