Skip to content

feat(otel-aws-log-processor): add license failure action, CRL sync URL, and violation alarm - #7

Merged
ngoyal16 merged 1 commit into
mainfrom
feat/otel-aws-log-processor-license-failure-action-and-crl
Sep 24, 2026
Merged

ngoyal16 merged 1 commit into
mainfrom
feat/otel-aws-log-processor-license-failure-action-and-crl

Conversation

@ngoyal16

Copy link
Copy Markdown
Contributor

Summary

Updates the otel-aws-log-processor serverless CloudFormation template to support recent architecture improvements:

  1. Serverless SQS Retry Loop Prevention:
    • Added DivmoraLicenseFailureAction parameter (discard default, dlq) and passed it as DIVMORA_LICENSE_FAILURE_ACTION to Lambda.
    • Prevents infinite SQS ESM retry storms and billing inflation on deterministic license compliance failures in production strict mode.
  2. Online Certificate Revocation List (CRL) Distribution:
    • Added DivmoraCrlUrl parameter and mapped to DIVMORA_CRL_URL for real-time license revocation synchronization.
  3. Automated CloudWatch Alarm for License Violations:
    • Added LicenseViolationAlarm monitoring the Divmora/LogProcessor LicenseViolations metric emitted via CloudWatch Embedded Metric Format (EMF).
    • Exported LicenseViolationAlarmArn in CloudFormation stack outputs.
  4. Documentation:
    • Updated README.md parameter tables and added an Observability & Alarms reference section.

…L, and violation alarm

- Add DivmoraLicenseFailureAction (discard default, dlq) parameter and environment variable to prevent SQS ESM retry storms
- Add DivmoraCrlUrl parameter and environment variable for online CRL synchronization
- Add LicenseViolationAlarm CloudWatch Alarm monitoring Divmora/LogProcessor LicenseViolations metric
- Add LicenseViolationAlarmArn output
- Update documentation and parameters reference in README.md
@ngoyal16
ngoyal16 merged commit a9946ef into main Sep 24, 2026
2 checks passed
@ngoyal16
ngoyal16 deleted the feat/otel-aws-log-processor-license-failure-action-and-crl branch September 24, 2026 13:31
ngoyal16 added a commit that referenced this pull request Sep 24, 2026
…L, and violation alarm (#7)

- Add DivmoraLicenseFailureAction (discard default, dlq) parameter and environment variable to prevent SQS ESM retry storms

- Add DivmoraCrlUrl parameter and environment variable for online CRL synchronization

- Add LicenseViolationAlarm CloudWatch Alarm monitoring Divmora/LogProcessor LicenseViolations metric

- Add LicenseViolationAlarmArn output

- Update documentation and parameters reference in README.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant