resource "aws_cloudwatch_log_group" "vpn" {
  name = "/aws/vpn"
  retention_in_days = 30

  # TODO: Encrypt
  # kms_key_id = <arn>
  
  tags = merge(var.standard_tags, var.tags)
}

resource "aws_cloudwatch_log_stream" "vpn" {
  name           = "ClientVPN"
  log_group_name = aws_cloudwatch_log_group.vpn.name
}