Skip to content

[Week 4] L1-006 답안 제출 #20

@do-dop

Description

@do-dop

Week

4

Scenario ID

L1-006

Problem Identification

[이슈 1] cloudwatch-log-group-7vex12, cloudwatch-log-group-nyk5m1, cloudwatch-log-group-zja19a, cloudwatch-log-group-ig4aie, cloudwatch-log-group-ohkosm, cloudwatch-log-group-tg2zpn, cloudwatch-log-group-fykujp, cloudwatch-log-group-r0am86 | 심각도: medium | 유형: data

8개 CloudWatch 로그 그룹에서 보존 기간 미설정으로 인한 영구 보존 비용 발생
retention_days=0으로 설정되어 로그가 영구 보존되면서 불필요한 스토리지 비용이 지속적으로 증가하고 있음

Root Cause

로그 보존 정책이 설정되지 않아 모든 로그가 영구적으로 저장되어 스토리지 비용이 누적됨

  • 8개 로그 그룹의 retention_days=0 설정으로 영구 보존 상태
  • 각 로그 그룹당 일일 2GB 수집으로 월 60GB씩 누적 (8개 × 60GB = 480GB/월)
  • log_bytes_ingested 평균 100.0으로 지속적인 로그 수집 확인

Proposed Solution

로그 보존 기간을 30일 또는 90일로 설정하여 불필요한 과거 로그 자동 삭제

  • 8개 로그 그룹에 retention_in_days = 30 설정 적용
  • 기존 누적된 30일 이전 로그 데이터 정리

Estimated Monthly Savings (USD)

129.6

Optimized Terraform

terraform {
    required_providers {
      aws = {
        source  = "hashicorp/aws"
        version = "~> 5.0"
      }
    }
  }

  provider "aws" {
    region = "us-east-1"
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-7vex12" {
    name              = "cloudwatch-log-group-7vex12"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-7vex12"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-nyk5m1" {
    name              = "cloudwatch-log-group-nyk5m1"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-nyk5m1"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-zja19a" {
    name              = "cloudwatch-log-group-zja19a"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-zja19a"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-ig4aie" {
    name              = "cloudwatch-log-group-ig4aie"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-ig4aie"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-ohkosm" {
    name              = "cloudwatch-log-group-ohkosm"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-ohkosm"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-tg2zpn" {
    name              = "cloudwatch-log-group-tg2zpn"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-tg2zpn"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-fykujp" {
    name              = "cloudwatch-log-group-fykujp"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-fykujp"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-r0am86" {
    name              = "cloudwatch-log-group-r0am86"
    retention_in_days = 30

    tags = {
      Name = "cloudwatch-log-group-r0am86"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-egkot0" {
    name              = "cloudwatch-log-group-egkot0"
    retention_in_days = 90

    tags = {
      Name = "cloudwatch-log-group-egkot0"
    }
  }

  resource "aws_cloudwatch_log_group" "cloudwatch-log-group-xx8vln" {
    name              = "cloudwatch-log-group-xx8vln"
    retention_in_days = 90

    tags = {
      Name = "cloudwatch-log-group-xx8vln"
    }
  }

Attached Reports

analysis.pdf
(Files committed to submissions/ directory)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions