Skip to content

TD2-08: EKS control-plane audit logging off on both clusters #816

Description

@gangster

MED. cluster.logging.enabled=false for all 5 types on platform + preprod (deliberate ~$700/mo cost override, eks/terragrunt.hcl:42-45). Forensics gap today and a hard hipaa/pci blocker. Provide a per-tier enable path (e.g. on for regulated tiers) without paying the cost on standard dev clusters.

See docs/tech-debt-audit-2026-06-26-second-pass.md. Part of #809.

Metadata

Metadata

Assignees

No one assigned

    Labels

    deferredIntentionally parked until a trigger (prod, regulated tier, second zone, ...)securitySecurity hardening, posture, or risk reductiontech-debtCleanup, refactoring, or reliability debt

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions