Control: Unused log streams should be removed if not required
Description
Unnecessary log streams should be deleted for storage cost savings.
Usage
Run the control in your terminal:
powerpipe control run aws_thrifty.control.cw_log_stream_unusedSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_thrifty.control.cw_log_stream_unused --shareSteampipe Tables
Params
| Args | Name | Default | Description | Variable |
|---|---|---|---|---|
| $1 | cloudwatch_log_stream_age_max_days | | The maximum number of days log streams are allowed without any log event written to them. |
SQL
select arn as resource, case when last_ingestion_time is null then 'error' when date_part('day', now() - last_ingestion_time) > $1 then 'alarm' else 'ok' end as status, case when last_ingestion_time is null then name || ' is not reporting a last ingestion time.' else name || ' last log ingestion was ' || date_part('day', now() - last_ingestion_time) || ' days ago.' end as reason , region, account_idfrom aws_cloudwatch_log_stream;