# EZ4: AWS Logs

It provides all the components to manage logs on AWS.

## Getting started

#### Install

```sh
npm install @ez4/aws-logs -D
```

#### Permission

Ensure the user performing deployments has the permissions below:

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "LogManagement",
      "Effect": "Allow",
      "Action": [
        "logs:CreateLogGroup",
        "logs:DeleteLogGroup",
        "logs:PutRetentionPolicy",
        "logs:DeleteRetentionPolicy",
        "logs:PutResourcePolicy",
        "logs:DeleteResourcePolicy",
        "logs:DescribeLogStreams",
        "logs:TagResource",
        "logs:UntagResource"
      ],
      "Resource": ["arn:aws:logs:{region}:{account-id}:log-group:{prefix}-*"]
    }
  ]
}
```

## Deletion behavior

Non-forced log group deletion is deferred while the newest log event is
younger than the configured retention period. The resource remains in state
and is checked again by a later deployment. A log group without retention is
only deleted automatically when it has no log events; use forced deletion to
delete it while events are still retained.

## License

MIT License