-
Notifications
You must be signed in to change notification settings - Fork 597
/
api_op_CreateFlowLogs.go
234 lines (204 loc) · 8.84 KB
/
api_op_CreateFlowLogs.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
// Code generated by smithy-go-codegen DO NOT EDIT.
package ec2
import (
"context"
"fmt"
awsmiddleware "github.com/aws/aws-sdk-go-v2/aws/middleware"
"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
"github.com/aws/aws-sdk-go-v2/service/ec2/types"
"github.com/aws/smithy-go/middleware"
smithyhttp "github.com/aws/smithy-go/transport/http"
)
// Creates one or more flow logs to capture information about IP traffic for a
// specific network interface, subnet, or VPC. Flow log data for a monitored
// network interface is recorded as flow log records, which are log events
// consisting of fields that describe the traffic flow. For more information, see
// Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records)
// in the Amazon Virtual Private Cloud User Guide. When publishing to CloudWatch
// Logs, flow log records are published to a log group, and each network interface
// has a unique log stream in the log group. When publishing to Amazon S3, flow log
// records for all of the monitored network interfaces are published to a single
// log file object that is stored in the specified bucket. For more information,
// see VPC Flow Logs (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html)
// in the Amazon Virtual Private Cloud User Guide.
func (c *Client) CreateFlowLogs(ctx context.Context, params *CreateFlowLogsInput, optFns ...func(*Options)) (*CreateFlowLogsOutput, error) {
if params == nil {
params = &CreateFlowLogsInput{}
}
result, metadata, err := c.invokeOperation(ctx, "CreateFlowLogs", params, optFns, c.addOperationCreateFlowLogsMiddlewares)
if err != nil {
return nil, err
}
out := result.(*CreateFlowLogsOutput)
out.ResultMetadata = metadata
return out, nil
}
type CreateFlowLogsInput struct {
// The IDs of the resources to monitor. For example, if the resource type is VPC ,
// specify the IDs of the VPCs. Constraints: Maximum of 25 for transit gateway
// resource types. Maximum of 1000 for the other resource types.
//
// This member is required.
ResourceIds []string
// The type of resource to monitor.
//
// This member is required.
ResourceType types.FlowLogsResourceType
// Unique, case-sensitive identifier that you provide to ensure the idempotency of
// the request. For more information, see How to ensure idempotency (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html)
// .
ClientToken *string
// The ARN of the IAM role that allows Amazon EC2 to publish flow logs across
// accounts.
DeliverCrossAccountRole *string
// The ARN of the IAM role that allows Amazon EC2 to publish flow logs to a
// CloudWatch Logs log group in your account. This parameter is required if the
// destination type is cloud-watch-logs and unsupported otherwise.
DeliverLogsPermissionArn *string
// The destination options.
DestinationOptions *types.DestinationOptionsRequest
// Checks whether you have the required permissions for the action, without
// actually making the request, and provides an error response. If you have the
// required permissions, the error response is DryRunOperation . Otherwise, it is
// UnauthorizedOperation .
DryRun *bool
// The destination for the flow log data. The meaning of this parameter depends on
// the destination type.
// - If the destination type is cloud-watch-logs , specify the ARN of a
// CloudWatch Logs log group. For example:
// arn:aws:logs:region:account_id:log-group:my_group Alternatively, use the
// LogGroupName parameter.
// - If the destination type is s3 , specify the ARN of an S3 bucket. For
// example: arn:aws:s3:::my_bucket/my_subfolder/ The subfolder is optional. Note
// that you can't use AWSLogs as a subfolder name.
// - If the destination type is kinesis-data-firehose , specify the ARN of a
// Kinesis Data Firehose delivery stream. For example:
// arn:aws:firehose:region:account_id:deliverystream:my_stream
LogDestination *string
// The type of destination for the flow log data. Default: cloud-watch-logs
LogDestinationType types.LogDestinationType
// The fields to include in the flow log record. List the fields in the order in
// which they should appear. If you omit this parameter, the flow log is created
// using the default format. If you specify this parameter, you must include at
// least one field. For more information about the available fields, see Flow log
// records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records)
// in the Amazon VPC User Guide or Transit Gateway Flow Log records (https://docs.aws.amazon.com/vpc/latest/tgw/tgw-flow-logs.html#flow-log-records)
// in the Amazon Web Services Transit Gateway Guide. Specify the fields using the
// ${field-id} format, separated by spaces.
LogFormat *string
// The name of a new or existing CloudWatch Logs log group where Amazon EC2
// publishes your flow logs. This parameter is valid only if the destination type
// is cloud-watch-logs .
LogGroupName *string
// The maximum interval of time during which a flow of packets is captured and
// aggregated into a flow log record. The possible values are 60 seconds (1 minute)
// or 600 seconds (10 minutes). This parameter must be 60 seconds for transit
// gateway resource types. When a network interface is attached to a Nitro-based
// instance (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances)
// , the aggregation interval is always 60 seconds or less, regardless of the value
// that you specify. Default: 600
MaxAggregationInterval *int32
// The tags to apply to the flow logs.
TagSpecifications []types.TagSpecification
// The type of traffic to monitor (accepted traffic, rejected traffic, or all
// traffic). This parameter is not supported for transit gateway resource types. It
// is required for the other resource types.
TrafficType types.TrafficType
noSmithyDocumentSerde
}
type CreateFlowLogsOutput struct {
// Unique, case-sensitive identifier that you provide to ensure the idempotency of
// the request.
ClientToken *string
// The IDs of the flow logs.
FlowLogIds []string
// Information about the flow logs that could not be created successfully.
Unsuccessful []types.UnsuccessfulItem
// Metadata pertaining to the operation's result.
ResultMetadata middleware.Metadata
noSmithyDocumentSerde
}
func (c *Client) addOperationCreateFlowLogsMiddlewares(stack *middleware.Stack, options Options) (err error) {
if err := stack.Serialize.Add(&setOperationInputMiddleware{}, middleware.After); err != nil {
return err
}
err = stack.Serialize.Add(&awsEc2query_serializeOpCreateFlowLogs{}, middleware.After)
if err != nil {
return err
}
err = stack.Deserialize.Add(&awsEc2query_deserializeOpCreateFlowLogs{}, middleware.After)
if err != nil {
return err
}
if err := addProtocolFinalizerMiddlewares(stack, options, "CreateFlowLogs"); err != nil {
return fmt.Errorf("add protocol finalizers: %v", err)
}
if err = addlegacyEndpointContextSetter(stack, options); err != nil {
return err
}
if err = addSetLoggerMiddleware(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddClientRequestIDMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddComputeContentLengthMiddleware(stack); err != nil {
return err
}
if err = addResolveEndpointMiddleware(stack, options); err != nil {
return err
}
if err = v4.AddComputePayloadSHA256Middleware(stack); err != nil {
return err
}
if err = addRetryMiddlewares(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddRawResponseToMetadata(stack); err != nil {
return err
}
if err = awsmiddleware.AddRecordResponseTiming(stack); err != nil {
return err
}
if err = addClientUserAgent(stack, options); err != nil {
return err
}
if err = smithyhttp.AddErrorCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = addSetLegacyContextSigningOptionsMiddleware(stack); err != nil {
return err
}
if err = addOpCreateFlowLogsValidationMiddleware(stack); err != nil {
return err
}
if err = stack.Initialize.Add(newServiceMetadataMiddleware_opCreateFlowLogs(options.Region), middleware.Before); err != nil {
return err
}
if err = awsmiddleware.AddRecursionDetection(stack); err != nil {
return err
}
if err = addRequestIDRetrieverMiddleware(stack); err != nil {
return err
}
if err = addResponseErrorMiddleware(stack); err != nil {
return err
}
if err = addRequestResponseLogging(stack, options); err != nil {
return err
}
if err = addDisableHTTPSMiddleware(stack, options); err != nil {
return err
}
return nil
}
func newServiceMetadataMiddleware_opCreateFlowLogs(region string) *awsmiddleware.RegisterServiceMetadata {
return &awsmiddleware.RegisterServiceMetadata{
Region: region,
ServiceID: ServiceID,
OperationName: "CreateFlowLogs",
}
}