Can we enable logging in Cloudwatch for a AWS Step Function created via terraform to track individual states? The resource "aws_sfn_state_machine" available in terraform does not seem to provide any argument to configure Cloudwatch logging. As per documentation only below arguments are supported :
name,definition,role_arn,tags
or can we configure inside the state machine definition?
Yes, there is a property called logging_configuration : https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sfn_state_machine . It was not possible before, but it was added in the AWS terraform provider >3.x , I don't remember the specific minor version it was added to so just make sure you have the latest version. Remember to also add the necessary permissions to your step function IAM role.
