# NOTE: This bucket must be emptied manually before `terraform destroy`.
# AWS refuses to delete non-empty buckets, causing the destroy to fail.
resource "aws_s3_bucket" "audit_log" {
  bucket = "tidbcloud-${var.env}-${var.logical_region_name}-byoc-audit"

  tags = merge({
    env         = var.env
    servicetype = "byoc"
    usedby      = "dbaas-control-plane-shoot"
    tenant      = "admin"

    "tidbcloud-auto-deploy-owner" = local.eks.name
  }, var.tags)
}