diff --git a/README.md b/README.md
index 1458834..ae3a3a2 100644
--- a/README.md
+++ b/README.md
@@ -268,7 +268,7 @@ worker_groups = {
 | <a name="input_enable_sso_rbac"></a> [enable\_sso\_rbac](#input\_enable\_sso\_rbac) | Enable SSO RBAC integration or not | `bool` | `false` | no |
 | <a name="input_enable_waf_for_alb"></a> [enable\_waf\_for\_alb](#input\_enable\_waf\_for\_alb) | Enables WAF and WAF V2 addons for ALB | `bool` | `false` | no |
 | <a name="input_external_secrets_namespace"></a> [external\_secrets\_namespace](#input\_external\_secrets\_namespace) | The namespace of external-secret operator | `string` | `"kube-system"` | no |
-| <a name="input_fluent_bit_configs"></a> [fluent\_bit\_configs](#input\_fluent\_bit\_configs) | Fluent Bit configs | <pre>object({<br>    fluent_bit_name       = optional(string, "")<br>    log_group_name        = optional(string, "")<br>    system_log_group_name = optional(string, "")<br>    log_retention_days    = optional(number, 90)<br>    values_yaml           = optional(string, "")<br>    configs = optional(object({<br>      inputs  = optional(string, "")<br>      filters = optional(string, "")<br>      outputs = optional(string, "")<br>    }), {})<br>    drop_namespaces        = optional(list(string), [])<br>    log_filters            = optional(list(string), [])<br>    additional_log_filters = optional(list(string), [])<br>    kube_namespaces        = optional(list(string), [])<br>  })</pre> | <pre>{<br>  "additional_log_filters": [<br>    "ELB-HealthChecker",<br>    "Amazon-Route53-Health-Check-Service"<br>  ],<br>  "configs": {<br>    "filters": "",<br>    "inputs": "",<br>    "outputs": ""<br>  },<br>  "drop_namespaces": [<br>    "kube-system",<br>    "opentelemetry-operator-system",<br>    "adot",<br>    "cert-manager",<br>    "opentelemetry.*",<br>    "meta.*"<br>  ],<br>  "fluent_bit_name": "",<br>  "kube_namespaces": [<br>    "kube.*",<br>    "meta.*",<br>    "adot.*",<br>    "devops.*",<br>    "cert-manager.*",<br>    "git.*",<br>    "opentelemetry.*",<br>    "stakater.*",<br>    "renovate.*"<br>  ],<br>  "log_filters": [<br>    "kube-probe",<br>    "health",<br>    "prometheus",<br>    "liveness"<br>  ],<br>  "log_group_name": "",<br>  "log_retention_days": 90,<br>  "system_log_group_name": "",<br>  "values_yaml": ""<br>}</pre> | no |
+| <a name="input_fluent_bit_configs"></a> [fluent\_bit\_configs](#input\_fluent\_bit\_configs) | Fluent Bit configs | <pre>object({<br>    fluent_bit_name       = optional(string, "")<br>    log_group_name        = optional(string, "")<br>    system_log_group_name = optional(string, "")<br>    log_retention_days    = optional(number, 90)<br>    values_yaml           = optional(string, "")<br>    configs = optional(object({<br>      inputs                     = optional(string, "")<br>      filters                    = optional(string, "")<br>      outputs                    = optional(string, "")<br>      cloudwatch_outputs_enabled = optional(bool, true)<br>    }), {})<br>    drop_namespaces        = optional(list(string), [])<br>    log_filters            = optional(list(string), [])<br>    additional_log_filters = optional(list(string), [])<br>    kube_namespaces        = optional(list(string), [])<br>    image_pull_secrets     = optional(list(string), [])<br>  })</pre> | <pre>{<br>  "additional_log_filters": [<br>    "ELB-HealthChecker",<br>    "Amazon-Route53-Health-Check-Service"<br>  ],<br>  "configs": {<br>    "cloudwatch_outputs_enabled": true,<br>    "filters": "",<br>    "inputs": "",<br>    "outputs": ""<br>  },<br>  "drop_namespaces": [<br>    "kube-system",<br>    "opentelemetry-operator-system",<br>    "adot",<br>    "cert-manager",<br>    "opentelemetry.*",<br>    "meta.*"<br>  ],<br>  "fluent_bit_name": "",<br>  "image_pull_secrets": [],<br>  "kube_namespaces": [<br>    "kube.*",<br>    "meta.*",<br>    "adot.*",<br>    "devops.*",<br>    "cert-manager.*",<br>    "git.*",<br>    "opentelemetry.*",<br>    "stakater.*",<br>    "renovate.*"<br>  ],<br>  "log_filters": [<br>    "kube-probe",<br>    "health",<br>    "prometheus",<br>    "liveness"<br>  ],<br>  "log_group_name": "",<br>  "log_retention_days": 90,<br>  "system_log_group_name": "",<br>  "values_yaml": ""<br>}</pre> | no |
 | <a name="input_manage_aws_auth"></a> [manage\_aws\_auth](#input\_manage\_aws\_auth) | n/a | `bool` | `true` | no |
 | <a name="input_map_roles"></a> [map\_roles](#input\_map\_roles) | Additional IAM roles to add to the aws-auth configmap. | <pre>list(object({<br>    rolearn  = string<br>    username = string<br>    groups   = list(string)<br>  }))</pre> | `[]` | no |
 | <a name="input_metrics_exporter"></a> [metrics\_exporter](#input\_metrics\_exporter) | Metrics Exporter, can use cloudwatch or adot | `string` | `"adot"` | no |
diff --git a/fluent-bit.tf b/fluent-bit.tf
index 6645218..74aa094 100644
--- a/fluent-bit.tf
+++ b/fluent-bit.tf
@@ -14,6 +14,7 @@ module "fluent-bit" {
   log_group_name        = try(var.fluent_bit_configs.log_group_name, "") != "" ? var.fluent_bit_configs.log_group_name : "fluent-bit-cloudwatch-${module.eks-cluster[0].cluster_id}"
   system_log_group_name = try(var.fluent_bit_configs.system_log_group_name, "")
   log_retention_days    = try(var.fluent_bit_configs.log_retention_days, 90)
+  image_pull_secrets    = try(var.fluent_bit_configs.image_pull_secrets, [])
 
   values_yaml = try(var.fluent_bit_configs.values_yaml, "")
 
@@ -51,9 +52,10 @@ module "fluent-bit" {
   ])
 
   fluent_bit_config = try(var.fluent_bit_configs.configs, {
-    inputs  = ""
-    outputs = ""
-    filters = ""
+    inputs                     = ""
+    outputs                    = ""
+    filters                    = ""
+    cloudwatch_outputs_enabled = true
   })
 
   depends_on = [
diff --git a/modules/fluent-bit/README.md b/modules/fluent-bit/README.md
index e5ebbb5..bcce4c6 100644
--- a/modules/fluent-bit/README.md
+++ b/modules/fluent-bit/README.md
@@ -53,8 +53,9 @@ No modules.
 | <a name="input_create_namespace"></a> [create\_namespace](#input\_create\_namespace) | Wether or no to create namespace. | `bool` | `false` | no |
 | <a name="input_drop_namespaces"></a> [drop\_namespaces](#input\_drop\_namespaces) | Flunt bit doesn't send logs for this namespaces | `list(string)` | <pre>[<br>  "kube-system",<br>  "opentelemetry-operator-system",<br>  "adot",<br>  "cert-manager",<br>  "opentelemetry.*",<br>  "meta.*"<br>]</pre> | no |
 | <a name="input_eks_oidc_root_ca_thumbprint"></a> [eks\_oidc\_root\_ca\_thumbprint](#input\_eks\_oidc\_root\_ca\_thumbprint) | n/a | `string` | n/a | yes |
-| <a name="input_fluent_bit_config"></a> [fluent\_bit\_config](#input\_fluent\_bit\_config) | You can add other inputs,outputs and filters which module doesn't have by default | `any` | <pre>{<br>  "filters": "",<br>  "inputs": "",<br>  "outputs": ""<br>}</pre> | no |
+| <a name="input_fluent_bit_config"></a> [fluent\_bit\_config](#input\_fluent\_bit\_config) | You can add other inputs,outputs and filters which module doesn't have by default | `any` | <pre>{<br>  "cloudwatch_outputs_enabled": true,<br>  "filters": "",<br>  "inputs": "",<br>  "outputs": ""<br>}</pre> | no |
 | <a name="input_fluent_bit_name"></a> [fluent\_bit\_name](#input\_fluent\_bit\_name) | Container resource name. | `string` | `"fluent-bit"` | no |
+| <a name="input_image_pull_secrets"></a> [image\_pull\_secrets](#input\_image\_pull\_secrets) | Secret name which can we use for download image | `list(string)` | `[]` | no |
 | <a name="input_kube_namespaces"></a> [kube\_namespaces](#input\_kube\_namespaces) | Kubernates namespaces | `list(string)` | <pre>[<br>  "kube.*",<br>  "meta.*",<br>  "adot.*",<br>  "devops.*",<br>  "cert-manager.*",<br>  "git.*",<br>  "opentelemetry.*",<br>  "stakater.*",<br>  "renovate.*"<br>]</pre> | no |
 | <a name="input_log_filters"></a> [log\_filters](#input\_log\_filters) | Fluent bit doesn't send logs if message consists of this values | `list(string)` | <pre>[<br>  "kube-probe",<br>  "health",<br>  "prometheus",<br>  "liveness"<br>]</pre> | no |
 | <a name="input_log_group_name"></a> [log\_group\_name](#input\_log\_group\_name) | Log group name fluent-bit will be streaming logs into. | `string` | `"fluentbit-default-log-group"` | no |
diff --git a/modules/fluent-bit/locals.tf b/modules/fluent-bit/locals.tf
index 0dae146..c1f9201 100644
--- a/modules/fluent-bit/locals.tf
+++ b/modules/fluent-bit/locals.tf
@@ -3,18 +3,20 @@ locals {
   log_group_name = var.log_group_name != "" ? var.log_group_name : "fluent-bit-cloudwatch"
   region         = var.region
   config_settings = {
-    log_group_name         = local.log_group_name
-    system_log_group_name  = var.system_log_group_name == "" ? "${local.log_group_name}-kube" : "${var.system_log_group_name}"
-    region                 = local.region
-    log_retention_days     = var.log_retention_days
-    auto_create_group      = var.create_log_group ? "On" : "Off"
-    drop_namespaces        = "(${join("|", var.drop_namespaces)})"
-    log_filters            = "(${join("|", var.log_filters)})"
-    additional_log_filters = "(${join("|", var.additional_log_filters)})"
-    inputs                 = try(var.fluent_bit_config.inputs, "")
-    outputs                = try(var.fluent_bit_config.outputs, "")
-    filters                = try(var.fluent_bit_config.filters, "")
-    kube_namespaces        = var.kube_namespaces
+    log_group_name             = local.log_group_name
+    system_log_group_name      = var.system_log_group_name == "" ? "${local.log_group_name}-kube" : "${var.system_log_group_name}"
+    region                     = local.region
+    log_retention_days         = var.log_retention_days
+    auto_create_group          = var.create_log_group ? "On" : "Off"
+    drop_namespaces            = "(${join("|", var.drop_namespaces)})"
+    log_filters                = "(${join("|", var.log_filters)})"
+    additional_log_filters     = "(${join("|", var.additional_log_filters)})"
+    inputs                     = try(var.fluent_bit_config.inputs, "")
+    outputs                    = try(var.fluent_bit_config.outputs, "")
+    filters                    = try(var.fluent_bit_config.filters, "")
+    cloudwatch_outputs_enabled = try(var.fluent_bit_config.cloudwatch_outputs_enabled, true)
+    kube_namespaces            = var.kube_namespaces
+    imagePullSecrets           = [for item in var.image_pull_secrets : { name : item }]
   }
 
   values = var.values_yaml == "" ? templatefile("${path.module}/values.yaml.tpl", local.config_settings) : var.values_yaml
diff --git a/modules/fluent-bit/tests/advanced/0-setup.tf b/modules/fluent-bit/tests/advanced/0-setup.tf
index 72a3014..4857ca2 100644
--- a/modules/fluent-bit/tests/advanced/0-setup.tf
+++ b/modules/fluent-bit/tests/advanced/0-setup.tf
@@ -1,9 +1,5 @@
 terraform {
   required_providers {
-    test = {
-      source = "terraform.io/builtin/test"
-    }
-
     aws = {
       source  = "hashicorp/aws"
       version = "~> 4.37"
diff --git a/modules/fluent-bit/tests/advanced/2-assert.tf b/modules/fluent-bit/tests/advanced/2-assert.tf
deleted file mode 100644
index 414ed51..0000000
--- a/modules/fluent-bit/tests/advanced/2-assert.tf
+++ /dev/null
@@ -1,9 +0,0 @@
-resource "test_assertions" "api_url" {
-  component = "Basic-Setup"
-
-  equal "scheme" {
-    description = "As module does not have any output and data just make sure the case runs. Probably can be thrown away."
-    got         = "all good"
-    want        = "all good"
-  }
-}
diff --git a/modules/fluent-bit/tests/advanced/README.md b/modules/fluent-bit/tests/advanced/README.md
index b9d2940..8de83f1 100644
--- a/modules/fluent-bit/tests/advanced/README.md
+++ b/modules/fluent-bit/tests/advanced/README.md
@@ -11,9 +11,7 @@
 
 ## Providers
 
-| Name | Version |
-|------|---------|
-| <a name="provider_test"></a> [test](#provider\_test) | n/a |
+No providers.
 
 ## Modules
 
@@ -23,9 +21,7 @@
 
 ## Resources
 
-| Name | Type |
-|------|------|
-| test_assertions.api_url | resource |
+No resources.
 
 ## Inputs
 
diff --git a/modules/fluent-bit/tests/basic/0-setup.tf b/modules/fluent-bit/tests/basic/0-setup.tf
index 72a3014..4857ca2 100644
--- a/modules/fluent-bit/tests/basic/0-setup.tf
+++ b/modules/fluent-bit/tests/basic/0-setup.tf
@@ -1,9 +1,5 @@
 terraform {
   required_providers {
-    test = {
-      source = "terraform.io/builtin/test"
-    }
-
     aws = {
       source  = "hashicorp/aws"
       version = "~> 4.37"
diff --git a/modules/fluent-bit/tests/basic/2-assert.tf b/modules/fluent-bit/tests/basic/2-assert.tf
deleted file mode 100644
index 414ed51..0000000
--- a/modules/fluent-bit/tests/basic/2-assert.tf
+++ /dev/null
@@ -1,9 +0,0 @@
-resource "test_assertions" "api_url" {
-  component = "Basic-Setup"
-
-  equal "scheme" {
-    description = "As module does not have any output and data just make sure the case runs. Probably can be thrown away."
-    got         = "all good"
-    want        = "all good"
-  }
-}
diff --git a/modules/fluent-bit/tests/basic/README.md b/modules/fluent-bit/tests/basic/README.md
index ba15240..f21aca4 100644
--- a/modules/fluent-bit/tests/basic/README.md
+++ b/modules/fluent-bit/tests/basic/README.md
@@ -11,9 +11,7 @@
 
 ## Providers
 
-| Name | Version |
-|------|---------|
-| <a name="provider_test"></a> [test](#provider\_test) | n/a |
+No providers.
 
 ## Modules
 
@@ -23,9 +21,7 @@
 
 ## Resources
 
-| Name | Type |
-|------|------|
-| test_assertions.api_url | resource |
+No resources.
 
 ## Inputs
 
diff --git a/modules/fluent-bit/tests/cloudwatch-export-disable/0-setup.tf b/modules/fluent-bit/tests/cloudwatch-export-disable/0-setup.tf
new file mode 100644
index 0000000..4857ca2
--- /dev/null
+++ b/modules/fluent-bit/tests/cloudwatch-export-disable/0-setup.tf
@@ -0,0 +1,17 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4.37"
+    }
+    kubernetes = {
+      source  = "hashicorp/kubernetes"
+      version = "~>2.23"
+    }
+    helm = ">= 2.0"
+  }
+}
+
+provider "aws" {}
+provider "helm" {}
+provider "kubernetes" {}
diff --git a/modules/fluent-bit/tests/cloudwatch-export-disable/1-example.tf b/modules/fluent-bit/tests/cloudwatch-export-disable/1-example.tf
new file mode 100644
index 0000000..ee5e71a
--- /dev/null
+++ b/modules/fluent-bit/tests/cloudwatch-export-disable/1-example.tf
@@ -0,0 +1,20 @@
+locals {
+  oidc_provider_arn = "arn:aws:iam::000000000000:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/6F40EA94327Dh8956DDB9S0AE7907CFD"
+}
+
+module "fluent-bit" {
+  source = "../../"
+
+  cluster_name                = "Test"
+  oidc_provider_arn           = local.oidc_provider_arn
+  eks_oidc_root_ca_thumbprint = replace(local.oidc_provider_arn, "/.*id//", "")
+  region                      = "eu-central-1"
+  account_id                  = 000000000000
+  log_retention_days          = 7
+
+  fluent_bit_config = {
+    outputs                    = templatefile("${path.module}/templates/outputs.yaml.tpl", {}) # some custom output/exporter for logs
+    cloudwatch_outputs_enabled = false                                                         # whether to disable default cloudwatch exporter/output
+  }
+
+}
diff --git a/modules/fluent-bit/tests/cloudwatch-export-disable/README.md b/modules/fluent-bit/tests/cloudwatch-export-disable/README.md
new file mode 100644
index 0000000..f21aca4
--- /dev/null
+++ b/modules/fluent-bit/tests/cloudwatch-export-disable/README.md
@@ -0,0 +1,33 @@
+# basic
+
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | ~> 4.37 |
+| <a name="requirement_helm"></a> [helm](#requirement\_helm) | >= 2.0 |
+| <a name="requirement_kubernetes"></a> [kubernetes](#requirement\_kubernetes) | ~>2.23 |
+
+## Providers
+
+No providers.
+
+## Modules
+
+| Name | Source | Version |
+|------|--------|---------|
+| <a name="module_fluent-bit"></a> [fluent-bit](#module\_fluent-bit) | ../../ | n/a |
+
+## Resources
+
+No resources.
+
+## Inputs
+
+No inputs.
+
+## Outputs
+
+No outputs.
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/modules/fluent-bit/tests/cloudwatch-export-disable/templates/outputs.yaml.tpl b/modules/fluent-bit/tests/cloudwatch-export-disable/templates/outputs.yaml.tpl
new file mode 100644
index 0000000..4c1378a
--- /dev/null
+++ b/modules/fluent-bit/tests/cloudwatch-export-disable/templates/outputs.yaml.tpl
@@ -0,0 +1,7 @@
+[OUTPUT]
+    Name s3
+    Match test.*
+    bucket s3-bucket
+    region eu-central-1
+    total_file_size 250M
+    s3_key_format /%Y/%m/%d/%H_%M_%S.gz
diff --git a/modules/fluent-bit/tests/own-values-yaml/0-setup.tf b/modules/fluent-bit/tests/own-values-yaml/0-setup.tf
index 72a3014..4857ca2 100644
--- a/modules/fluent-bit/tests/own-values-yaml/0-setup.tf
+++ b/modules/fluent-bit/tests/own-values-yaml/0-setup.tf
@@ -1,9 +1,5 @@
 terraform {
   required_providers {
-    test = {
-      source = "terraform.io/builtin/test"
-    }
-
     aws = {
       source  = "hashicorp/aws"
       version = "~> 4.37"
diff --git a/modules/fluent-bit/tests/own-values-yaml/2-assert.tf b/modules/fluent-bit/tests/own-values-yaml/2-assert.tf
deleted file mode 100644
index 33c30a7..0000000
--- a/modules/fluent-bit/tests/own-values-yaml/2-assert.tf
+++ /dev/null
@@ -1,9 +0,0 @@
-resource "test_assertions" "api_url" {
-  component = "supply_own_yaml_file"
-
-  equal "scheme" {
-    description = "As module does not have any output and data just make sure the case runs. Probably can be thrown away."
-    got         = "all good"
-    want        = "all good"
-  }
-}
diff --git a/modules/fluent-bit/tests/own-values-yaml/README.md b/modules/fluent-bit/tests/own-values-yaml/README.md
index a8dfff9..5577108 100644
--- a/modules/fluent-bit/tests/own-values-yaml/README.md
+++ b/modules/fluent-bit/tests/own-values-yaml/README.md
@@ -11,9 +11,7 @@
 
 ## Providers
 
-| Name | Version |
-|------|---------|
-| <a name="provider_test"></a> [test](#provider\_test) | n/a |
+No providers.
 
 ## Modules
 
@@ -23,9 +21,7 @@
 
 ## Resources
 
-| Name | Type |
-|------|------|
-| test_assertions.api_url | resource |
+No resources.
 
 ## Inputs
 
diff --git a/modules/fluent-bit/values.yaml.tpl b/modules/fluent-bit/values.yaml.tpl
index 9661fd6..1947f4e 100644
--- a/modules/fluent-bit/values.yaml.tpl
+++ b/modules/fluent-bit/values.yaml.tpl
@@ -1,3 +1,4 @@
+imagePullSecrets: ${jsonencode(imagePullSecrets)}
 config:
   ## https://docs.fluentbit.io/manual/pipeline/inputs
   inputs: |
@@ -53,6 +54,9 @@ config:
 
     ${indent(4, filters)}
   outputs: |
+
+    %{ if cloudwatch_outputs_enabled }
+
     [OUTPUT]
         Name cloudwatch_logs
         Match  kube.*
@@ -80,4 +84,6 @@ config:
         auto_create_group ${auto_create_group}
         log_retention_days ${log_retention_days}
 
+    %{ endif ~}
+
     ${indent(4, outputs)}
diff --git a/modules/fluent-bit/variables.tf b/modules/fluent-bit/variables.tf
index 21cb6f5..70ffae5 100644
--- a/modules/fluent-bit/variables.tf
+++ b/modules/fluent-bit/variables.tf
@@ -76,9 +76,10 @@ variable "values_yaml" {
 variable "fluent_bit_config" {
   description = "You can add other inputs,outputs and filters which module doesn't have by default"
   default = {
-    inputs  = ""
-    outputs = ""
-    filters = ""
+    inputs                     = ""
+    outputs                    = ""
+    filters                    = ""
+    cloudwatch_outputs_enabled = true # whether to disable default cloudwatch exporter/output
   }
   type = any
 }
@@ -137,3 +138,9 @@ variable "additional_log_filters" {
   ]
   description = "Fluent bit doesn't send logs if message consists of this values"
 }
+
+variable "image_pull_secrets" {
+  type        = list(string)
+  default     = []
+  description = "Secret name which can we use for download image"
+}
diff --git a/tests/basic/README.md b/tests/basic/README.md
index 3f65220..bcd75fe 100644
--- a/tests/basic/README.md
+++ b/tests/basic/README.md
@@ -9,7 +9,7 @@ No requirements.
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws"></a> [aws](#provider\_aws) | n/a |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.67.0 |
 
 ## Modules
 
diff --git a/tests/eks-fluent-bit/0-setup.tf b/tests/eks-fluent-bit/0-setup.tf
index ca00286..1b4b9d4 100644
--- a/tests/eks-fluent-bit/0-setup.tf
+++ b/tests/eks-fluent-bit/0-setup.tf
@@ -1,16 +1,12 @@
 terraform {
   required_providers {
-    test = {
-      source = "terraform.io/builtin/test"
-    }
-
     aws = {
       source  = "hashicorp/aws"
       version = ">= 3.41"
     }
   }
 
-  required_version = ">= 1.3.0, < 1.6.0"
+  required_version = ">= 1.3.0, < 2.0.0"
 }
 
 /**
diff --git a/tests/eks-fluent-bit/1-example.tf b/tests/eks-fluent-bit/1-example.tf
index b570ee1..c02921a 100644
--- a/tests/eks-fluent-bit/1-example.tf
+++ b/tests/eks-fluent-bit/1-example.tf
@@ -12,22 +12,20 @@ data "aws_subnet_ids" "subnets" {
 module "this" {
   source = "../.."
 
-  account_id = "0000000000"
   adot_config = {
     "accept_namespace_regex" : "(default|kube-system)",
     "additional_metrics" : [],
     "log_group_name" : "adot-logs"
   }
-  cluster_enabled_log_types = ["audit"]
-  cluster_name              = "eks-dev"
-  cluster_version           = "1.27"
-  metrics_exporter          = "adot"
+  cluster_name     = "test-eks-fluent-bit"
+  cluster_version  = "1.27"
+  metrics_exporter = "adot"
   node_groups = {
     "dev_nodes" : {
-      "desired_size" : 2,
-      "max_capacity" : 5,
-      "max_size" : 5,
-      "min_size" : 2
+      "desired_size" : 1,
+      "max_capacity" : 1,
+      "max_size" : 1,
+      "min_size" : 1
     }
   }
   node_groups_default = {
@@ -35,10 +33,6 @@ module "this" {
     "instance_types" : ["t3.medium"]
   }
   send_alb_logs_to_cloudwatch = false
-  users = [
-    { "username" : "dasmeta" },
-  ]
-
   vpc = {
     link = {
       id                 = data.aws_vpcs.ids.ids[0]
@@ -47,10 +41,11 @@ module "this" {
   }
 
   fluent_bit_configs = {
-    config = {
-      inputs  = templatefile("${path.module}/templates/inputs.yaml.tpl", {})
-      outputs = templatefile("${path.module}/templates/outputs.yaml.tpl", {})
-      filters = templatefile("${path.module}/templates/filters.yaml.tpl", {})
+    configs = {
+      inputs                     = templatefile("${path.module}/templates/inputs.yaml.tpl", {})
+      outputs                    = templatefile("${path.module}/templates/outputs.yaml.tpl", {})
+      filters                    = templatefile("${path.module}/templates/filters.yaml.tpl", {})
+      cloudwatch_outputs_enabled = false # have false in case you want also disable default cloudwatch log exporters/outputs
     }
     drop_namespaces = [
       "kube-system",
diff --git a/tests/eks-fluent-bit/2-assert.tf b/tests/eks-fluent-bit/2-assert.tf
deleted file mode 100644
index 99458ca..0000000
--- a/tests/eks-fluent-bit/2-assert.tf
+++ /dev/null
@@ -1,9 +0,0 @@
-resource "test_assertions" "dummy" {
-  component = "this"
-
-  equal "scheme" {
-    description = "As module does not have any output and data just make sure the case runs. Probably can be thrown away."
-    got         = "all good"
-    want        = "all good"
-  }
-}
diff --git a/tests/eks-fluent-bit/README.md b/tests/eks-fluent-bit/README.md
index e8ab3f4..ee3b419 100644
--- a/tests/eks-fluent-bit/README.md
+++ b/tests/eks-fluent-bit/README.md
@@ -5,15 +5,14 @@
 
 | Name | Version |
 |------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3.0, < 1.6.0 |
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3.0, < 2.0.0 |
 | <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 3.41 |
 
 ## Providers
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 3.41 |
-| <a name="provider_test"></a> [test](#provider\_test) | n/a |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.67.0 |
 
 ## Modules
 
@@ -25,7 +24,6 @@
 
 | Name | Type |
 |------|------|
-| test_assertions.dummy | resource |
 | [aws_availability_zones.available](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/availability_zones) | data source |
 | [aws_subnet_ids.subnets](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/subnet_ids) | data source |
 | [aws_vpcs.ids](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/vpcs) | data source |
diff --git a/tests/eks-fluent-bit/templates/outputs.yaml.tpl b/tests/eks-fluent-bit/templates/outputs.yaml.tpl
index 4c1378a..ab5a602 100644
--- a/tests/eks-fluent-bit/templates/outputs.yaml.tpl
+++ b/tests/eks-fluent-bit/templates/outputs.yaml.tpl
@@ -1,7 +1,7 @@
 [OUTPUT]
     Name s3
     Match test.*
-    bucket s3-bucket
+    bucket test-eks-fluent-bit-dasmeta
     region eu-central-1
     total_file_size 250M
     s3_key_format /%Y/%m/%d/%H_%M_%S.gz
diff --git a/variables.tf b/variables.tf
index 139dc99..a1008a7 100644
--- a/variables.tf
+++ b/variables.tf
@@ -112,14 +112,16 @@ variable "fluent_bit_configs" {
     log_retention_days    = optional(number, 90)
     values_yaml           = optional(string, "")
     configs = optional(object({
-      inputs  = optional(string, "")
-      filters = optional(string, "")
-      outputs = optional(string, "")
+      inputs                     = optional(string, "")
+      filters                    = optional(string, "")
+      outputs                    = optional(string, "")
+      cloudwatch_outputs_enabled = optional(bool, true)
     }), {})
     drop_namespaces        = optional(list(string), [])
     log_filters            = optional(list(string), [])
     additional_log_filters = optional(list(string), [])
     kube_namespaces        = optional(list(string), [])
+    image_pull_secrets     = optional(list(string), [])
   })
   default = {
     fluent_bit_name       = ""
@@ -127,10 +129,12 @@ variable "fluent_bit_configs" {
     system_log_group_name = ""
     log_retention_days    = 90
     values_yaml           = ""
+    image_pull_secrets    = []
     configs = {
-      inputs  = ""
-      outputs = ""
-      filters = ""
+      inputs                     = ""
+      outputs                    = ""
+      filters                    = ""
+      cloudwatch_outputs_enabled = true # whether to disable default cloudwatch exporter/output
     }
     drop_namespaces = [
       "kube-system",