Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 16 additions & 13 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ Export [Render](https://render.com) audit logs to an AWS S3 bucket.
## Overview

This project provides:

- A Go application that fetches audit logs from the Render API and uploads them to S3
- Terraform modules to deploy the infrastructure on both AWS and Render
- Automatic scheduling via a Render Cron Job that runs every 15 minutes by default
Expand All @@ -24,7 +25,7 @@ Supports both workspace-level and organization-level (Enterprise) audit logs.
### 1. Clone the repository

```bash
git clone https://github.com/renderinc/render-auditlogs.git
git clone https://github.com/render-examples/render-auditlogs.git
cd render-auditlogs/terraform
```

Expand Down Expand Up @@ -66,28 +67,30 @@ terraform apply \

## Terraform Variables

| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `aws_s3_bucket_name` | Yes | - | Name of the S3 bucket to create for storing audit logs |
| `render_api_key` | Yes | - | Render API key for accessing audit logs |
| `render_workspace_ids` | No | `[]` | List of workspace IDs to fetch audit logs from |
| `render_organization_id` | No | `""` | Organization ID for Enterprise audit logs |
| `aws_iam_user_name` | No | `render-audit-log-processor` | Name of the IAM user created for S3 access |
| `render_cronjob_name` | No | `render-auditlogs` | Name of the Render Cron Job |
| `render_cronjob_schedule` | No | `1/15 * * * *` | Cron schedule (default: every 15 minutes) |
| `render_cronjob_plan` | No | `starter` | Render plan for the Cron Job |
| `render_cronjob_region` | No | `oregon` | Region to deploy the Cron Job |
| `render_project_name` | No | `audit-logs` | Name of the Render project |
| Variable | Required | Default | Description |
| ------------------------- | -------- | ---------------------------- | ------------------------------------------------------ |
| `aws_s3_bucket_name` | Yes | - | Name of the S3 bucket to create for storing audit logs |
| `render_api_key` | Yes | - | Render API key for accessing audit logs |
| `render_workspace_ids` | No | `[]` | List of workspace IDs to fetch audit logs from |
| `render_organization_id` | No | `""` | Organization ID for Enterprise audit logs |
| `aws_iam_user_name` | No | `render-audit-log-processor` | Name of the IAM user created for S3 access |
| `render_cronjob_name` | No | `render-auditlogs` | Name of the Render Cron Job |
| `render_cronjob_schedule` | No | `1/15 * * * *` | Cron schedule (default: every 15 minutes) |
| `render_cronjob_plan` | No | `starter` | Render plan for the Cron Job |
| `render_cronjob_region` | No | `oregon` | Region to deploy the Cron Job |
| `render_project_name` | No | `audit-logs` | Name of the Render project |

## Architecture

The Terraform configuration creates:

**AWS Resources:**

- S3 bucket (versioned, encrypted, public access blocked)
- IAM user with S3 write permissions

**Render Resources:**

- Project
- Cron Job (builds from this repo)

Expand Down
2 changes: 1 addition & 1 deletion terraform/modules/render-audit-logs/render.tf
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ resource "render_cron_job" "render-audit-logs" {
auto_deploy = true
branch = "main"
build_command = "go build -tags netgo -ldflags '-s -w' -o render-auditlogs"
repo_url = "https://github.com/renderinc/render-auditlogs"
repo_url = "https://github.com/render-examples/render-auditlogs"
runtime = "go"
}
}
Expand Down
4 changes: 2 additions & 2 deletions terraform/modules/render-audit-logs/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -20,13 +20,13 @@ variable "aws_region" {
variable "render_organization_id" {
type = string
default = ""
description = "Render organization id (enterprise only)"
description = "Render organization ID (enterprise only)"
}

variable "render_workspace_ids" {
type = list(string)
default = []
description = "Command seperated string of Render workspace ids"
description = "List of Render workspace IDs"
}

variable "render_api_key" {
Expand Down