Can't disable Cloudwatch Logs

[dfassbender]

We used the Terraform module to setup an AWS Opensearch domain with the default input values for log_publishing_options. So the Index Slow Logs were enabled for the Domain and a Cloudwatch Log Group for them was created.

Now we want to disable this Log Type and set the following value for log_publishing_options in the Terraform module.

log_publishing_options = {
    index_slow_logs = {
      enabled = false
    }
  }

The output of Terraform looks like expected. The Cloudwatch Log Group should be deleted and the Log Type should be removed.

Terraform will perform the following actions:

  # module.opensearch_test.module.opensearch.aws_cloudwatch_log_group.aos["search_slow_logs"] will be destroyed
  # (because key ["search_slow_logs"] is not in for_each map)
  - resource "aws_cloudwatch_log_group" "aos" {
      - arn               = "arn:aws:logs:eu-central-1:XXXXXXXXXXXX:log-group:/aws/OpenSearchService/domains/search-test-min-dev-tfzvxks/search_slow_logs" -> null
      - id                = "/aws/OpenSearchService/domains/search-test-min-dev-tfzvxks/search_slow_logs" -> null
      - log_group_class   = "STANDARD" -> null
      - name              = "/aws/OpenSearchService/domains/search-test-min-dev-tfzvxks/search_slow_logs" -> null
      - retention_in_days = 7 -> null
      - skip_destroy      = false -> null
      - tags              = {} -> null
      - tags_all          = {} -> null
    }

  # module.opensearch_test.module.opensearch.aws_opensearch_domain.this will be updated in-place
  ~ resource "aws_opensearch_domain" "this" {
        id                 = "arn:aws:es:eu-central-1:XXXXXXXXXXXX:domain/search-test-min-dev-tfzvxks"
 
        # (10 unchanged attributes hidden)

      - log_publishing_options {
          - cloudwatch_log_group_arn = "arn:aws:logs:eu-central-1:XXXXXXXXXXXX:log-group:/aws/OpenSearchService/domains/search-test-min-dev-tfzvxks/index_slow_logs" -> null
          - enabled                  = true -> null
          - log_type                 = "INDEX_SLOW_LOGS" -> null
        }

        # (12 unchanged blocks hidden)
    }

After the apply of Terraform the Log Group was deleted, but the Log Type Index Slow Logs is still active and the deleted Log Group is also referenced in the configuration of the Domain.

[abhinavkumarsph]

Fixed in v2.3.4: https://github.com/SPHTech-Platform/terraform-aws-opensearch/releases/tag/v2.3.4