chore: add log group

README.md

@@ -1,2 +1,3 @@
 # c7n-left-demo
+
 demo of custodian shift left capabilities

policies/cost-log-retain.yaml

@@ -0,0 +1,17 @@
+policies:
+  - name: cost-log-group-retain-qa
+    description: "qa environments should retain cloud watch logs group for a max of 30 days" 
+    resource: terraform.aws_cloudwatch_log_group
+    metadata:
+      severity: medium
+      categories: [cost]
+    filters:
+      - or:
+         - type: value
+           key: retention_in_days
+           value: absent
+
+         - type: value
+           key: retention_in_days
+           value: 30
+           op: lte

root-module/log.tf

@@ -0,0 +1,8 @@
+resource "aws_cloudwatch_log_group" "yada" {
+  name = "Yada"
+
+  tags = {
+    Env = "Dev"
+    Application = "serviceA"
+  }
+}