resource "aws_cloudwatch_log_group" "unencrypted_log_group" {
  name              = "${var.environment}-${var.service_name}-unencrypted"
  retention_in_days = 7
  tags              = local.tags
}

resource "aws_cloudwatch_log_group" "shared_key_encrypted_log_group" {
  name              = "${var.environment}-${var.service_name}-encrypted-with-shared-key"
  kms_key_id        = data.aws_kms_alias.shared_kms_alias.target_key_arn
  retention_in_days = 7
  tags              = local.tags
}

resource "aws_cloudwatch_log_group" "specific_key_encrypted_log_group" {
  name              = "${var.environment}-${var.service_name}-encrypted-with-specific-key"
  kms_key_id        = data.aws_kms_alias.specific_kms_alias.target_key_arn
  retention_in_days = 7
  tags              = local.tags
}