cluster enabled log types

  cluster_enabled_log_types       = ["api", "audit", "authenticator", "controllerManager", "scheduler"]

Terraform will perform the following actions:

  # module.eks.data.tls_certificate.this[0] will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "tls_certificate" "this" {
      + certificates = (known after apply)
      + id           = (known after apply)
      + url          = "https://oidc.eks.us-east-1.amazonaws.com/id/XXXXXXXXX"
    }

  # module.eks.aws_eks_cluster.this[0] will be updated in-place
  ~ resource "aws_eks_cluster" "this" {
      ~ enabled_cluster_log_types = [
          + "controllerManager",
          + "scheduler",
            # (3 unchanged elements hidden)
        ]
        id                        = "cluster-6m6eSCET"
        name                      = "cluster-6m6eSCET"
        tags                      = {}
        # (10 unchanged attributes hidden)

        # (5 unchanged blocks hidden)
    }

  # module.eks.aws_iam_openid_connect_provider.oidc_provider[0] will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "oidc_provider" {
        id              = "arn:aws:iam::1234567890:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/123123124"
        tags            = {
            "Name" = "cluster-6m6eSCET-eks-irsa"
        }
      ~ thumbprint_list = [
          - "9e99a48a9960dafdasfasf",
          - "06b25927c42a7adfafasf",
          - "414a2060b73adfafa",
          - "aaa68bb211d4adfafads",
        ] -> (known after apply)
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

Related

• List of AWS Config Managed Rules

See also

• cluster_enabled_log_types ([ api, audit, authenticator, controllerManager, scheduler ]), cluster.logging.clusterLogging
• EKS security, endpoint access control, Grant access, AWS Config Security Best Practices for EKS, List of AWS Config Managed Rules