RDS increase log retention period

[BrianEllwood]

User Story
As an AP engineer, I would like to retain RDS logs for 6 months to aid with investigating issues

Value / Purpose
Whilst investigating issue 3193 it was found that logs were not retained log enough to aid investigation increasing the retention period would help with any future investigation.

User Types
AP Engineers

Proposal
Review current RDS log retention and increase where possible (how?)

DOD

• Current retention period investigated
• Where possible increase retention period to 6 months

[BrianEllwood]

So while investigating how to increase log retention period I was checking via the console in cloudwatch where the furthest back you can see in the alarm metrics is two weeks. if I access monitoring via RDS the same metric can be seen for 12 months, though if you try to view full screen it drops back to two weeks ? Another quirk enlarge allows to increase the plot size and see 12 months.

"Metric data is kept for 15 months, enabling you to view both up-to-the-minute data and historical data" from AWS documentation.

[BrianEllwood]

When we had issue 3324 we could not look at the metrics in CloudWatch as the metrics were only available for a short period, I have since found that this information is available via the RDS console for 15 months.
Unfortunately the RDS error logs are only retained for 3 days, which is the default. We could increase the rds.log_retention_period but this could cause issues with spaces on the RDS instance and has a maximum retention period of 7 days which would not have helped the previous investigation.

Alternatively we can store our PostgreSQL log records in Amazon CloudWatch Logs

[BrianEllwood]

Resolving issues raised by checkov/trivy

[BrianEllwood]

decision made that this work not required as RDS will be looked at in next version of control panel.

[github-actions]

This issue is being marked as stale because it has been open for 60 days with no activity. Remove stale label or comment to keep the issue open.