AwsCloudwatchExternalSubscriptionFilterArgs
interface AwsCloudwatchExternalSubscriptionFilterArgs extends AwsCloudwatchSubscriptionFilterBaseArgs {
applyOnTransformedLogs?: Input<boolean | undefined>;
createLambdaInvokePermission: false;
destinationArn: Input<string>;
distribution?: Input<string | undefined>;
emitSystemFields?: Input<Input<string>[] | undefined>;
filterPattern: Input<string>;
lambdaFunction?: undefined;
logGroup: AwsCloudwatchLogGroupReference;
name: string;
region?: Input<string | undefined>;
roleArn?: Input<string | undefined>;
}Externally permissioned Lambda subscription destination.
Hierarchy
AwsCloudwatchSubscriptionFilterBaseArgsAwsCloudwatchExternalSubscriptionFilterArgs
Properties
applyOnTransformedLogs: Input<boolean | undefined>
Inherited from applyOnTransformedLogs
Boolean to indicate whether to apply the subscription filter on the transformed version of the log events instead of the original ingested log events. Defaults to false. Valid only for log groups that have an active log transformer.
createLambdaInvokePermission: false
Explicitly confirms that the required Lambda invoke permission is managed externally.
destinationArn: Input<string>
Lambda destination input accepted as either a full function ARN or a function name.
distribution: Input<string | undefined>
Inherited from distribution
Method used to distribute log data to the destination. By default log data is grouped by log stream, but the grouping can be set to random for a more even distribution. This property is only applicable when the destination is an Amazon Kinesis stream. Valid values are "Random" and "ByLogStream".
emitSystemFields: Input<Input<string>[] | undefined>
Inherited from emitSystemFields
List of system fields to include in the log events sent to the subscription destination. These fields provide source information for centralized log data in the forwarded payload. Valid values: "@aws.account", "@aws.region", "@source.log". To remove this argument after it has been set, specify an empty list [] explicitly to avoid perpetual differences.
filterPattern: Input<string>
Inherited from filterPattern
Valid CloudWatch Logs filter pattern for subscribing to a filtered stream of log events. Use empty string "" to match everything. For more information, see the Amazon CloudWatch Logs User Guide.
lambdaFunction: undefined
logGroup: AwsCloudwatchLogGroupReference
Inherited from logGroup
Log group input or reference exposing a log-group name.
name: string
Inherited from name
Required subscription-filter purpose name used as the Pulumi logical identity source.
Remarks
Must be a synchronous plain string available at preview time. The AWS provider subscription-filter name is derived separately from this value using the AWS naming style.
region: Input<string | undefined>
Inherited from region
Region where this resource will be managed. Defaults to the Region set in the provider configuration.
roleArn: Input<string | undefined>
Inherited from roleArn
ARN of an IAM role that grants CloudWatch Logs permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery. If you use Lambda as a destination, you should skip this argument and use aws.lambda.Permission resource for granting access from CloudWatch logs to the destination Lambda function.