[NDR -110] API Gateway access logs (#323)

* correcting variable errors pre-existing

* removing tags

* temp reverting typo as var not being set

* removing unnecessary stream

* depends on

* removing depends on

* moving cloudwatch to new file

* deleting copied cloudwatch

* [NDR-102] remove null check

* removing access log + execution logs

* removing unused cloudwatch module

* removing unused cloudwatch resource

* log group name chnage

* change regex

* pr fixes

* removing space

* [NDR-102] pr fixes

* [ndr-102] fix

---------

Co-authored-by: Sam Whyte <[email protected]>

Author: SWhyteAnswer

infrastructure/api.tf

@@ -91,7 +91,28 @@ resource "aws_api_gateway_stage" "ndr_api" {
   deployment_id        = aws_api_gateway_deployment.ndr_api_deploy.id
   rest_api_id          = aws_api_gateway_rest_api.ndr_doc_store_api.id
   stage_name           = var.environment
-  xray_tracing_enabled = false
+  xray_tracing_enabled = var.enable_xray_tracing
+
+  depends_on = [aws_cloudwatch_log_group.api_gateway_stage]
+}
+
+resource "aws_cloudwatch_log_group" "api_gateway_stage" {
+  # Name must follow this format to allow execution logging 
+  # https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html
+  name              = "API-Gateway-Execution-Logs_${aws_api_gateway_rest_api.ndr_doc_store_api.id}/${var.environment}"
+  retention_in_days = 0
+}
+
+resource "aws_api_gateway_method_settings" "api_gateway_stage" {
+  rest_api_id = aws_api_gateway_rest_api.ndr_doc_store_api.id
+  stage_name  = aws_api_gateway_stage.ndr_api.stage_name
+  method_path = "*/*"
+
+  settings {
+    logging_level      = "INFO"
+    metrics_enabled    = true
+    data_trace_enabled = true
+  }
 }
 
 resource "aws_api_gateway_gateway_response" "unauthorised_response" {

infrastructure/modules/cloudwatch/README.md

@@ -217,4 +217,10 @@ variable "cloud_security_console_public_address" {
   type        = string
   default     = "0.0.0.0/0"
   description = "Using public address to make sure CloudStorageSecurity console is available"
+}
+
+variable "enable_xray_tracing" {
+  description = "Enable AWS X-Ray tracing for the API Gateway stage"
+  type        = bool
+  default     = false
 }