Merge pull request #6748 from guardian/ash/log4jsmode

Fix dotcom-rendering kinesis stream
guardian · Dec 12, 2022 · 586e833 · 586e833
2 parents 16afbca + 2572791
commit 586e833
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/dotcom-rendering/cloudformation.yml b/dotcom-rendering/cloudformation.yml
@@ -242,6 +242,7 @@ Resources:
 
               groupadd frontend
               useradd -r -m -s /usr/bin/nologin -g frontend dotcom-rendering
+              usermod -a -G frontend aws-kinesis-agent-user
               cd /home/dotcom-rendering
 
               aws --region eu-west-1 s3 cp s3://aws-frontend-artifacts/frontend/${Stage}/${App}/dist/${App}.zip ./

diff --git a/dotcom-rendering/src/server/lib/logging.ts b/dotcom-rendering/src/server/lib/logging.ts
@@ -68,6 +68,8 @@ const enableLog4j = {
 			backups: 5,
 			compress: true,
 			layout: { type: 'json', separator: ',' },
+			// Owner Read & Write, Group Read
+			mode: 0o640,
 		},
 	},
 	categories: {