Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

aws.vpc | set-flow-log | DeliverLogsPermissionArn not required with DestinationType as s3 #4666

Closed
wants to merge 7 commits into from

Conversation

PratMis
Copy link
Collaborator

@PratMis PratMis commented Aug 23, 2019

Closes #4641

Earlier, DeliverLogsPermissionArn attribute was required when creating flow-log with any destination(cloud-watch-logs or s3). Looks like now they don't require DeliverLogsPermissionArn when LogDestinationType is S3.
Document: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ec2.html#EC2.Client.create_flow_logs

@PratMis PratMis changed the title DeliverLogsPermissionArn not required with destination as s3 aws.vpc.set-flow-log | DeliverLogsPermissionArn not required with destination as s3 Aug 23, 2019
@PratMis PratMis changed the title aws.vpc.set-flow-log | DeliverLogsPermissionArn not required with destination as s3 aws.vpc.set-flow-log | DeliverLogsPermissionArn not required with DestinationType as s3 Aug 23, 2019
@PratMis PratMis requested a review from kapilt August 23, 2019 18:29
@PratMis PratMis changed the title aws.vpc.set-flow-log | DeliverLogsPermissionArn not required with DestinationType as s3 aws.vpc | set-flow-log | DeliverLogsPermissionArn not required with DestinationType as s3 Aug 23, 2019
c7n/resources/vpc.py Outdated Show resolved Hide resolved
@kapilt
Copy link
Collaborator

kapilt commented Sep 11, 2019

closing this in favor of the refactoring in #4759 that also simplifies validation.

@kapilt kapilt closed this Sep 11, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

VPC set-flow-log PolicyValidationError When Sending to S3
2 participants