AwsCloudwatchResourcePolicyArgs

interface AwsCloudwatchResourcePolicyArgs extends Omit<aws.cloudwatch.LogResourcePolicyArgs, 'policyDocument' | 'policyName' | 'resourceArn'> {
policyDocument: AwsCloudwatchResourcePolicyDocumentTemplate;
policyName?: string;
region?: Input<string | undefined>;
resourceArn?: string;
}

Input arguments for the CloudWatch log-resource-policy capability.

Remarks

Exactly one of policyName or resourceArn must be set.

resourceArn accepts either a full CloudWatch log-group ARN or a log-group name. Names are resolved to ARNs automatically.

Example

CODE

const resourcePolicy: AwsCloudwatchResourcePolicyArgs = {
  policyName: 'orders-log-policy',
  policyDocument: {
    path: './policy.json',
  },
};

Hierarchy

LogResourcePolicyArgs, "policyDocument" | "policyName" | "resourceArn">
AwsCloudwatchResourcePolicyArgs

Properties

`policyDocument: AwsCloudwatchResourcePolicyDocumentTemplate`

Policy document input accepted as a JSON template file only.

`policyName: string`

Optional policy name used as the Pulumi logical identity source when provided.

Remarks

Must be a synchronous plain non-empty string available at preview time.

`region: Input<string | undefined>`

Inherited from region

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

`resourceArn: string`

Optional log-group ARN or name used as the Pulumi logical identity source when policyName is omitted.

Remarks

Must be a synchronous plain non-empty string available at preview time. The logical identity source is selected as policyName first, otherwise resourceArn.