destination

Gets an individual destination resource

Overview

Name	destination
Type	Resource
Description	destination
Id	awscc.logs.destination

Fields

Name	Datatype	Description
arn	string
destination_name	string	The name of the destination resource
destination_policy	string	An IAM policy document that governs which AWS accounts can create subscription filters against this destination.
role_arn	string	The ARN of an IAM role that permits CloudWatch Logs to send data to the specified AWS resource
target_arn	string	The ARN of the physical target where the log events are delivered (for example, a Kinesis stream)
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
arn,
destination_name,
destination_policy,
role_arn,
target_arn
FROM awscc.logs.destination
WHERE data__Identifier = '<DestinationName>';

Permissions

To operate on the destination resource, the following permissions are required:

Read

logs:DescribeDestinations

Update

logs:PutDestination,
logs:PutDestinationPolicy,
logs:DescribeDestinations,
iam:PassRole

Delete

logs:DeleteDestination