provider "aws" {
  region = "us-east-1"
}

# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket         = "dev-orcd-terraform-state"
    key            = "dev/logs-internal/terraform.tfstate"
    region         = "us-east-1"
    encrypt        = "true"
    dynamodb_table = "terraform-dev-logs-internal"
  }
}

data "aws_caller_identity" "current" {}

module "internal_cloudtrail" {
  source                                      = "../../modules/cloudtrail"
  cloudtrail_log_bucket                       = "dev-orcd-cloudtrail-logs"
  cloud_watch_logs_group_arn                  = "arn:aws:logs:us-east-1:${data.aws_caller_identity.current.account_id}:log-group:CloudTrail/${data.aws_caller_identity.current.account_id}-cloudtrail:*"
  cloud_watch_logs_role_arn                   = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/CloudTrail_CloudWatchLogs_Role"
  cloudtrail_log_bucket_logging_target_bucket = "aws-logs-${data.aws_caller_identity.current.account_id}-us-east-1"
}