terraform/ecc-aws-353-redshift_user_activity_logging_enabled/red2/redshift.tf

data "aws_caller_identity" "current" {}

resource "aws_redshift_cluster" "this" {
  cluster_identifier           = "redshift-353-red2"
  database_name                = "redshift353red"
  master_username              = "root"
  master_password              = random_password.this.result
  node_type                    = "dc2.large"
  skip_final_snapshot          = true
  cluster_parameter_group_name = aws_redshift_parameter_group.this.name
}

resource "aws_cloudwatch_log_group" "useractivitylog" {
  name = "/aws/redshift/cluster/${aws_redshift_cluster.this.cluster_identifier}/useractivitylog"
}

resource "aws_cloudwatch_log_group" "connectionlog" {
  name = "/aws/redshift/cluster/${aws_redshift_cluster.this.cluster_identifier}/connectionlog"
}

resource "aws_redshift_logging" "this" {
  cluster_identifier   = aws_redshift_cluster.this.id
  log_destination_type = "cloudwatch"
  log_exports          = ["connectionlog", "useractivitylog"]
}

resource "random_integer" "this" {
  min = 10000
  max = 99999
}

resource "aws_redshift_parameter_group" "this" {
  name   = "parameter-group-353-red2"
  family = "redshift-1.0"

  parameter {
    name  = "enable_user_activity_logging"
    value = "false"
  }
}

resource "random_password" "this" {
  length           = 12
  special          = true
  numeric          = true
  min_numeric      = 1
  min_upper        = 1
  min_lower        = 1
  override_special = "!#$%*()-_=+[]{}:?"
}