chore: re-enable pgAudit in Staging (#1298)

Update the RDS cluster in Staging to use the custom parameter group that enables pgAudit and exports logs to CloudWatch.
cds-snc · May 2, 2024 · 1dc53ed · 1dc53ed
1 parent 98725ef
commit 1dc53ed
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/aws/rds/rds.tf b/aws/rds/rds.tf
@@ -146,8 +146,8 @@ resource "aws_rds_cluster" "notification-canada-ca" {
   storage_encrypted   = true
   deletion_protection = var.enable_delete_protection
 
-  db_cluster_parameter_group_name = aws_rds_cluster_parameter_group.default.name
-  enabled_cloudwatch_logs_exports = null
+  db_cluster_parameter_group_name = var.env != "production" ? aws_rds_cluster_parameter_group.pgaudit.name : aws_rds_cluster_parameter_group.default.name
+  enabled_cloudwatch_logs_exports = var.env != "production" ? ["postgresql"] : null
 
   vpc_security_group_ids = [
     var.eks_cluster_securitygroup