terraform-modules/terraform-alicloud-landing-zone-actiontrail-event-alert/cis_at_ram_policy_change.tf

resource "alicloud_log_alert" "cis_at_ram_policy_change" {
  count             = contains(var.enabled_alerts, "cis.at.ram_policy_change") ? 1 : 0
  version           = "2.0"
  type              = "tpl"
  project_name      = var.project_name
  alert_name        = "cis_at_ram_policy_change"
  alert_displayname = var.lang == "en-US" ? "RAM policy Change Alert" : "RAM策略变更告警"

  schedule {
    type     = "FixedRate"
    interval = "15m"
  }

  template_configuration {
    id   = "sls.app.actiontrail.cis.at.ram_policy_change"
    type = "sys"
    lang = var.lang == "en-US" ? "en" : "cn"
    tokens = {
      "default.project"  = var.project_name
      "default.logstore" = var.log_store
      "default.action_policy" = var.action_policy_id
    }
  }

  depends_on = [
    alicloud_log_resource_record.action_policy
  ]
}