VIA-433 AS/AJ Add splunk tf module config to test, preprod, and prod envs

Author: anoop-surej-nhs

infrastructure/environments/preprod/locals.tf

@@ -25,6 +25,10 @@ locals {
   audit_log_group_name         = "/aws/audit/${local.prefix}-audit-logs"
   audit_log_stream_name        = "audit-logs"
 
+  # Splunk
+  python_version               = "python3.13" # Transformer lambda runtime
+  splunk_log_retention_in_days = 30
+
   application_environment_variables = {
     SSM_PREFIX = "/${local.prefix}/"
 

infrastructure/environments/preprod/main.tf

@@ -52,3 +52,16 @@ module "deploy_audit" {
   alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
   default_tags                 = local.default_tags
 }
+
+module "deploy_splunk" {
+  count  = var.is_github_action ? 1 : 0
+  source = "../../modules/deploy_splunk"
+
+  prefix                       = local.prefix
+  default_tags                 = local.default_tags
+  splunk_log_retention_in_days = local.splunk_log_retention_in_days
+  region                       = local.region
+  account_id                   = data.aws_caller_identity.current.account_id
+  alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
+  python_version               = local.python_version
+}

infrastructure/environments/prod/locals.tf

@@ -25,6 +25,10 @@ locals {
   audit_log_group_name         = "/aws/audit/${local.prefix}-audit-logs"
   audit_log_stream_name        = "audit-logs"
 
+  # Splunk
+  python_version               = "python3.13" # Transformer lambda runtime
+  splunk_log_retention_in_days = 90
+
   application_environment_variables = {
     SSM_PREFIX = "/${local.prefix}/"
 

infrastructure/environments/prod/main.tf

@@ -52,3 +52,16 @@ module "deploy_audit" {
   alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
   default_tags                 = local.default_tags
 }
+
+module "deploy_splunk" {
+  count  = var.is_github_action ? 1 : 0
+  source = "../../modules/deploy_splunk"
+
+  prefix                       = local.prefix
+  default_tags                 = local.default_tags
+  splunk_log_retention_in_days = local.splunk_log_retention_in_days
+  region                       = local.region
+  account_id                   = data.aws_caller_identity.current.account_id
+  alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
+  python_version               = local.python_version
+}

infrastructure/environments/test/locals.tf

@@ -25,6 +25,10 @@ locals {
   audit_log_group_name         = "/aws/audit/${local.prefix}-audit-logs"
   audit_log_stream_name        = "audit-logs"
 
+  # Splunk
+  python_version               = "python3.13" # Transformer lambda runtime
+  splunk_log_retention_in_days = 30
+
   application_environment_variables = {
     SSM_PREFIX = "/${local.prefix}/"
 

infrastructure/environments/test/main.tf

@@ -60,3 +60,16 @@ module "deploy_audit" {
   alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
   default_tags                 = local.default_tags
 }
+
+module "deploy_splunk" {
+  count  = var.is_github_action ? 1 : 0
+  source = "../../modules/deploy_splunk"
+
+  prefix                       = local.prefix
+  default_tags                 = local.default_tags
+  splunk_log_retention_in_days = local.splunk_log_retention_in_days
+  region                       = local.region
+  account_id                   = data.aws_caller_identity.current.account_id
+  alerting_sns_topic_arn       = module.deploy_monitoring.alerting_sns_topic_arn
+  python_version               = local.python_version
+}