feat: Add VPC flow logs option + s3 https-only policy

modules/networking/main.tf

@@ -20,6 +20,7 @@ module "vpc" {
   elasticache_subnets            = var.create_elasticache_subnet ? var.elasticache_subnet_cidrs : []
   enable_dns_hostnames           = true
   enable_dns_support             = true
+  enable_vpc_flow_logs           = var.enable_vpc_flow_logs
   enable_nat_gateway             = true
   enable_vpn_gateway             = var.enable_vpn_gateway
   manage_default_security_group  = true
@@ -46,4 +47,4 @@ resource "aws_vpc_endpoint" "clickhouse" {
   vpc_endpoint_type   = "Interface"
   subnet_ids          = module.vpc.private_subnets
   private_dns_enabled = true
-}
+}

modules/networking/variables.tf

@@ -45,6 +45,12 @@ variable "create_elasticache_subnet" {
   default     = false
 }
 
+variable "enable_vpc_flow_logs" {
+  description = "Controls whether VPC Flow Logs are enabled"
+  type        = bool
+  default     = false
+}
+
 variable "enable_vpn_gateway" {
   type        = bool
   description = "(Optional) Should be true if you want to create a new VPN Gateway resource and attach it to the VPC."