VIA-433 AS/AJ Modify retention of forwarded logs

anoop-surej-nhs · anoop-surej-nhs · commit 1b0bd8e8d561 · 2025-09-16T17:13:42.000+01:00
diff --git a/infrastructure/environments/prod/locals.tf b/infrastructure/environments/prod/locals.tf
@@ -12,7 +12,7 @@ locals {
   prefix                    = "${local.deploy_workspace}-${local.project_identifier_shortcode}-${data.aws_caller_identity.current.account_id}"
   open_next_path            = "../../../.open-next"
   node_version              = "nodejs22.x"
-  log_retention_in_days     = 90
+  log_retention_in_days     = 30
   cache_lambda_zip_path     = "../../../lambda.zip"
   content_cache_bucket_name = "${local.prefix}-content-cache"
   app_version               = var.app_version
diff --git a/infrastructure/environments/test/test-github-iam-role-policy.json b/infrastructure/environments/test/test-github-iam-role-policy.json
@@ -221,6 +221,7 @@
         "s3:PutBucketPublicAccessBlock",
         "s3:PutBucketTagging",
         "s3:PutBucketVersioning",
+        "s3:PutLifecycleConfiguration",
         "s3:PutObject",
         "secretsmanager:DescribeSecret",
         "secretsmanager:GetResourcePolicy",
diff --git a/infrastructure/github-iam-role-policy.json b/infrastructure/github-iam-role-policy.json
@@ -147,6 +147,7 @@
         "s3:PutBucketPublicAccessBlock",
         "s3:PutBucketTagging",
         "s3:PutBucketVersioning",
+        "s3:PutLifecycleConfiguration",
         "s3:PutObject",
         "secretsmanager:DescribeSecret",
         "secretsmanager:GetResourcePolicy",
