AwsCloudwatchManagedSubscriptionFilterArgs
interface AwsCloudwatchManagedSubscriptionFilterArgs extends AwsCloudwatchSubscriptionFilterBaseArgs {
applyOnTransformedLogs?: Input<boolean | undefined>;
createLambdaInvokePermission?: boolean;
destinationArn?: undefined;
distribution?: Input<string | undefined>;
emitSystemFields?: Input<Input<string>[] | undefined>;
filterPattern: Input<string>;
lambdaFunction: AwsCloudwatchLambdaFunctionReference;
logGroup: AwsCloudwatchLogGroupReference;
name: string;
region?: Input<string | undefined>;
roleArn?: Input<string | undefined>;
}Managed Lambda subscription destination with automatic permission creation.
Hierarchy
AwsCloudwatchSubscriptionFilterBaseArgsAwsCloudwatchManagedSubscriptionFilterArgs
Properties
applyOnTransformedLogs: Input<boolean | undefined>
Inherited from applyOnTransformedLogs
Boolean to indicate whether to apply the subscription filter on the transformed version of the log events instead of the original ingested log events. Defaults to false. Valid only for log groups that have an active log transformer.
createLambdaInvokePermission: boolean
Whether to create the required Lambda resource-policy permission. Defaults to true for lambdaFunction.
destinationArn: undefined
distribution: Input<string | undefined>
Inherited from distribution
Method used to distribute log data to the destination. By default log data is grouped by log stream, but the grouping can be set to random for a more even distribution. This property is only applicable when the destination is an Amazon Kinesis stream. Valid values are "Random" and "ByLogStream".
emitSystemFields: Input<Input<string>[] | undefined>
Inherited from emitSystemFields
List of system fields to include in the log events sent to the subscription destination. These fields provide source information for centralized log data in the forwarded payload. Valid values: "@aws.account", "@aws.region", "@source.log". To remove this argument after it has been set, specify an empty list [] explicitly to avoid perpetual differences.
filterPattern: Input<string>
Inherited from filterPattern
Valid CloudWatch Logs filter pattern for subscribing to a filtered stream of log events. Use empty string "" to match everything. For more information, see the Amazon CloudWatch Logs User Guide.
lambdaFunction: AwsCloudwatchLambdaFunctionReference
Managed Lambda destination reference.
logGroup: AwsCloudwatchLogGroupReference
Inherited from logGroup
Log group input or reference exposing a log-group name.
name: string
Inherited from name
Required subscription-filter purpose name used as the Pulumi logical identity source.
Remarks
Must be a synchronous plain string available at preview time. The AWS provider subscription-filter name is derived separately from this value using the AWS naming style.
region: Input<string | undefined>
Inherited from region
Region where this resource will be managed. Defaults to the Region set in the provider configuration.
roleArn: Input<string | undefined>
Inherited from roleArn
ARN of an IAM role that grants CloudWatch Logs permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery. If you use Lambda as a destination, you should skip this argument and use aws.lambda.Permission resource for granting access from CloudWatch logs to the destination Lambda function.