diff --git a/modules/cluster/main.tf b/modules/cluster/main.tf
index 6eabcc3d..65412b47 100644
--- a/modules/cluster/main.tf
+++ b/modules/cluster/main.tf
@@ -22,7 +22,7 @@ resource "aws_ecs_cluster" "this" {
 
             content {
               cloud_watch_encryption_enabled = log_configuration.value.cloud_watch_encryption_enabled
-              cloud_watch_log_group_name     = try(aws_cloudwatch_log_group.this[0].name, log_configuration.value.cloud_watch_log_group_name)
+              cloud_watch_log_group_name     = aws_cloudwatch_log_group.this[0].name
               s3_bucket_encryption_enabled   = log_configuration.value.s3_bucket_encryption_enabled
               s3_bucket_name                 = log_configuration.value.s3_bucket_name
               s3_key_prefix                  = log_configuration.value.s3_key_prefix
@@ -80,9 +80,9 @@ resource "aws_cloudwatch_log_group" "this" {
   region = var.region
 
   name              = local.log_group_name
-  retention_in_days = var.cloudwatch_log_group_retention_in_days
+  retention_in_days = 0
   kms_key_id        = var.cloudwatch_log_group_kms_key_id
-  log_group_class   = var.cloudwatch_log_group_class
+  log_group_class   = "INVALID_CLASS"
 
   tags = merge(
     var.tags,
@@ -148,7 +148,7 @@ resource "aws_ecs_capacity_provider" "this" {
     }
 
     # When you use managed termination protection, you must also use managed scaling otherwise managed termination protection won't work
-    managed_termination_protection = each.value.managed_scaling != null ? each.value.managed_termination_protection : "DISABLED"
+    managed_termination_protection = "ENABLED"
   }
 
   name = try(coalesce(each.value.name, each.key), "")