add logging stack to mgmt environment

Author: afeld

README.md

@@ -28,7 +28,7 @@ Currently, both the management and environment VPCs will be deployed in the same
 1. Install additional dependencies:
     * [Ansible](https://docs.ansible.com/ansible/latest/intro_installation.html)
     * [Packer](https://www.packer.io/)
-    * [Terraform](https://www.terraform.io/)
+    * [Terraform](https://www.terraform.io/) 0.11.0+
 1. Install Ansible dependencies.
 
     ```sh

terraform/mgmt/monitoring.tf

@@ -16,3 +16,11 @@ module "os_monitoring" {
   high_memory_threshold = "${var.high_memory_jenkins_alarm_threshold}"
   high_disk_util_threshold = "${var.high_disk_util_jenkins_alarm_threshold}"
 }
+
+module "ekk_stack" {
+  # https://github.com/GSA/devsecops-ekk-stack/pull/4
+  source = "git::https://github.com/GSA/devsecops-ekk-stack.git//terraform?ref=modularize-terraform-stack"
+
+  s3_logging_bucket_name = "${var.s3_logging_bucket_name}"
+  es_kinesis_delivery_stream = "${var.es_kinesis_delivery_stream}"
+}

terraform/mgmt/variables.tf

@@ -52,6 +52,14 @@ variable "high_disk_util_jenkins_alarm_threshold" {
   default = "85"
 }
 
+variable "s3_logging_bucket_name" {
+  default = "devsecops-logging"
+}
+
+variable "es_kinesis_delivery_stream" {
+  default = "devsecops-logging"
+}
+
 variable "deployer_username" {
   default = "circleci-deployer"
   description = "Username for the AWS IAM user"