/
logResourcePolicy.ts
160 lines (151 loc) · 6.46 KB
/
logResourcePolicy.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
import * as pulumi from "@pulumi/pulumi";
import * as utilities from "../utilities";
/**
* Provides a resource to manage a CloudWatch log resource policy.
*
* ## Example Usage
* ### Elasticsearch Log Publishing
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as aws from "@pulumi/aws";
*
* const elasticsearch-log-publishing-policyPolicyDocument = aws.iam.getPolicyDocument({
* statements: [{
* actions: [
* "logs:CreateLogStream",
* "logs:PutLogEvents",
* "logs:PutLogEventsBatch",
* ],
* resources: ["arn:aws:logs:*"],
* principals: [{
* identifiers: ["es.amazonaws.com"],
* type: "Service",
* }],
* }],
* });
* const elasticsearch_log_publishing_policyLogResourcePolicy = new aws.cloudwatch.LogResourcePolicy("elasticsearch-log-publishing-policyLogResourcePolicy", {
* policyDocument: elasticsearch_log_publishing_policyPolicyDocument.then(elasticsearch_log_publishing_policyPolicyDocument => elasticsearch_log_publishing_policyPolicyDocument.json),
* policyName: "elasticsearch-log-publishing-policy",
* });
* ```
* ### Route53 Query Logging
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as aws from "@pulumi/aws";
*
* const route53-query-logging-policyPolicyDocument = aws.iam.getPolicyDocument({
* statements: [{
* actions: [
* "logs:CreateLogStream",
* "logs:PutLogEvents",
* ],
* resources: ["arn:aws:logs:*:*:log-group:/aws/route53/*"],
* principals: [{
* identifiers: ["route53.amazonaws.com"],
* type: "Service",
* }],
* }],
* });
* const route53_query_logging_policyLogResourcePolicy = new aws.cloudwatch.LogResourcePolicy("route53-query-logging-policyLogResourcePolicy", {
* policyDocument: route53_query_logging_policyPolicyDocument.then(route53_query_logging_policyPolicyDocument => route53_query_logging_policyPolicyDocument.json),
* policyName: "route53-query-logging-policy",
* });
* ```
*/
export class LogResourcePolicy extends pulumi.CustomResource {
/**
* Get an existing LogResourcePolicy resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: LogResourcePolicyState, opts?: pulumi.CustomResourceOptions): LogResourcePolicy {
return new LogResourcePolicy(name, <any>state, { ...opts, id: id });
}
/** @internal */
public static readonly __pulumiType = 'aws:cloudwatch/logResourcePolicy:LogResourcePolicy';
/**
* Returns true if the given object is an instance of LogResourcePolicy. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
public static isInstance(obj: any): obj is LogResourcePolicy {
if (obj === undefined || obj === null) {
return false;
}
return obj['__pulumiType'] === LogResourcePolicy.__pulumiType;
}
/**
* Details of the resource policy, including the identity of the principal that is enabled to put logs to this account. This is formatted as a JSON string. Maximum length of 5120 characters.
*/
public readonly policyDocument!: pulumi.Output<string>;
/**
* Name of the resource policy.
*/
public readonly policyName!: pulumi.Output<string>;
/**
* Create a LogResourcePolicy resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: LogResourcePolicyArgs, opts?: pulumi.CustomResourceOptions)
constructor(name: string, argsOrState?: LogResourcePolicyArgs | LogResourcePolicyState, opts?: pulumi.CustomResourceOptions) {
let inputs: pulumi.Inputs = {};
if (opts && opts.id) {
const state = argsOrState as LogResourcePolicyState | undefined;
inputs["policyDocument"] = state ? state.policyDocument : undefined;
inputs["policyName"] = state ? state.policyName : undefined;
} else {
const args = argsOrState as LogResourcePolicyArgs | undefined;
if (!args || args.policyDocument === undefined) {
throw new Error("Missing required property 'policyDocument'");
}
if (!args || args.policyName === undefined) {
throw new Error("Missing required property 'policyName'");
}
inputs["policyDocument"] = args ? args.policyDocument : undefined;
inputs["policyName"] = args ? args.policyName : undefined;
}
if (!opts) {
opts = {}
}
if (!opts.version) {
opts.version = utilities.getVersion();
}
super(LogResourcePolicy.__pulumiType, name, inputs, opts);
}
}
/**
* Input properties used for looking up and filtering LogResourcePolicy resources.
*/
export interface LogResourcePolicyState {
/**
* Details of the resource policy, including the identity of the principal that is enabled to put logs to this account. This is formatted as a JSON string. Maximum length of 5120 characters.
*/
readonly policyDocument?: pulumi.Input<string>;
/**
* Name of the resource policy.
*/
readonly policyName?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a LogResourcePolicy resource.
*/
export interface LogResourcePolicyArgs {
/**
* Details of the resource policy, including the identity of the principal that is enabled to put logs to this account. This is formatted as a JSON string. Maximum length of 5120 characters.
*/
readonly policyDocument: pulumi.Input<string>;
/**
* Name of the resource policy.
*/
readonly policyName: pulumi.Input<string>;
}