I created a Terraform module that sets a default log retention period for all CloudWatch Log groups in a region. It saves money by deleting old, unneeded logs. It is called terraform-aws-default-log-retention.

I also wrote a blog post about it at the official State Farm Engineering blog and feel free to leave me a comment below if you have any thoughts to share.