what
- Use
terraform-aws-s3-log-storagemodule for CloudTrail logs - Add
TravisCI
why
terraform-aws-s3-log-storageprovisions an S3 bucket with server-side encryption, versioning and life-cycle events (to move the logs toGlacier), which is what's required for CloudTrail logs- Reuse code
TravisCIto lint Terraform code and monitor build status