fix: edge case when not logging to cloudwatch

[willfarrell]

Fixes:

Error: Attempt to get attribute from null value

  on .terraform/modules/security/main.tf line 70, in module "alarm_baseline":
  70:   cloudtrail_log_group_name = local.is_cloudtrail_enabled ? module.cloudtrail_baseline.log_group.name : ""
    |----------------
    | module.cloudtrail_baseline.log_group is null

Module:

module "security" {
 source = "nozaq/secure-baseline/aws"
 account_type = "individual"
 aws_account_id = data.aws_caller_identity.current.account_id
 #master_account_id = data.terraform_remote_state.master.outputs.account_id # Future
 audit_log_bucket_name = module.logs-edge.id 
 use_external_audit_log_bucket = true
 cloudtrail_s3_key_prefix = ""
 vpc_flow_logs_s3_key_prefix = ""
 config_s3_bucket_key_prefix = ""
 config_delivery_frequency = "TwentyFour_Hours"
 cloudtrail_cloudwatch_logs_enabled = false

 securityhub_enable_aws_foundational_standard = true
 securityhub_enable_cis_standard = true
 securityhub_enable_pci_dss_standard = false

 create_password_policy = false
 create_manager_role = true
 create_master_role = true
 create_support_role = false
 support_iam_role_principal_arns = []

 region = var.region
 target_regions = [
   var.region,
   "us-east-1", # edge
   ]

 #tags = local.workspace["tags"]

 providers = {
   aws = aws.edge
   aws.ap-northeast-1 = aws.ap-northeast-1
   aws.ap-northeast-2 = aws.ap-northeast-2
   aws.ap-northeast-3 = aws.ap-northeast-3
   aws.ap-south-1 = aws.ap-south-1
   aws.ap-southeast-1 = aws.ap-southeast-1
   aws.ap-southeast-2 = aws.ap-southeast-2
   aws.ca-central-1 = aws.ca-central-1
   aws.eu-central-1 = aws.eu-central-1
   aws.eu-north-1 = aws.eu-north-1
   aws.eu-west-1 = aws.eu-west-1
   aws.eu-west-2 = aws.eu-west-2
   aws.eu-west-3 = aws.eu-west-3
   aws.sa-east-1 = aws.sa-east-1
   aws.us-east-1 = aws.us-east-1
   aws.us-east-2 = aws.us-east-2
   aws.us-west-1 = aws.us-west-1
   aws.us-west-2 = aws.us-west-2
 }
}

[nozaq]

@willfarrell Thanks for the patch. LGTM!

[willfarrell]

No problem!