logging_configuration

Gets an individual logging_configuration resource

Overview

Name	logging_configuration
Type	Resource
Description	logging_configuration
Id	awscc.networkfirewall.logging_configuration

Fields

Name	Datatype	Description
firewall_name	string
firewall_arn	string
logging_configuration	object
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
firewall_name,
firewall_arn,
logging_configuration
FROM awscc.networkfirewall.logging_configuration
WHERE data__Identifier = '<FirewallArn>';

Permissions

To operate on the logging_configuration resource, the following permissions are required:

Read

logs:GetLogDelivery,
logs:ListLogDeliveries,
network-firewall:DescribeLoggingConfiguration

Update

logs:CreateLogDelivery,
logs:DeleteLogDelivery,
logs:GetLogDelivery,
logs:UpdateLogDelivery,
logs:ListLogDeliveries,
s3:PutBucketPolicy,
s3:GetBucketPolicy,
logs:PutResourcePolicy,
logs:DescribeResourcePolicies,
logs:DescribeLogGroups,
iam:CreateServiceLinkedRole,
firehose:TagDeliveryStream,
network-firewall:UpdateLoggingConfiguration,
network-firewall:DescribeLoggingConfiguration

Delete

logs:DeleteLogDelivery,
logs:ListLogDeliveries,
logs:GetLogDelivery,
network-firewall:UpdateLoggingConfiguration,
network-firewall:DescribeLoggingConfiguration