Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Broken VPC Flow Logs Dynamic Partitioning #524

Open
2 of 6 tasks
StephenBedard opened this issue Aug 6, 2024 · 0 comments
Open
2 of 6 tasks

Broken VPC Flow Logs Dynamic Partitioning #524

StephenBedard opened this issue Aug 6, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@StephenBedard
Copy link
Contributor

StephenBedard commented Aug 6, 2024

Describe the bug
After upgrading to v1.8.1, VPC flow logs are sent to newly named CloudWatch log groups. This breaks the dynamic log partitioning feature of LZA.

To Reproduce

  1. Make sure VPC flow logs are configured to send to CWL in your LZA config
  2. Upgrade to LZA v1.8.1
  3. VPC flow logs will no longer be dynamically partitioned by the ${ACCELERATOR_PREFIX}-FirehoseRecordsProcessor Lambda

Expected behavior
Ideally changes made to the logging stack don't change the name of resources (i.e. CW log group names) that customers refer to in their config for dynamic log partitioning. This can be fixed by modifying the log filters file to match the new log group name patterns (see below screenshot).

Please complete the following information about the solution:

  • Version: v1.8.1

To get the version of the solution, you can look at the description of the created AWS CloudFormation stack used to install the LZA (AWSAccelerator-InstallerStack). For example, "(SO0199) Landing Zone Accelerator on AWS. Version 1.5.1.". If the description does not contain the version information, you can look at the Parameters of the stack for the RepositoryBranchName as that should contain the version number.

  • Region: ca-central-1
  • Was the solution modified from the version published on this repository?
  • If the answer to the previous question was yes, are the changes available on GitHub?
  • Have you checked your service quotas for the services this solution uses?
  • Were there any errors in the CloudWatch Logs?

Screenshots
image

Additional context
Add any other context about the problem here.

@StephenBedard StephenBedard added the bug Something isn't working label Aug 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant