subscription-filter resource

Description

SubscriptionFilterResource sends events from one CloudWatch Logs log group to a Lambda function, Kinesis stream, Firehose stream, or Logs destination. The log group, filter name, and destination are fixed once the filter is made; the pattern, distribution, system fields, role, and transformed-log flag are reconciled in place by PutSubscriptionFilter.

Source: internal/service/cloudwatchlogs/subscription_filter_rsrc.go:43

Example usage:

imports: {
  aws-cloudwatchlogs: 'github.com/cloudboss/unobin-library-aws//service/cloudwatchlogs'
}

resources: {
  example: aws-cloudwatchlogs.subscription-filter {
    # Set input fields here.
  }
}

Inputs

destination-arn

string

required

log-group-name

string

required

name

string

required

filter-pattern

string

required

distribution

string

default ByLogStream

emit-system-fields

optional(list(string))

field-selection-criteria

optional(string)

role-arn

optional(string)

apply-on-transformed-logs

optional(boolean)

Input Constraints

Distribution rules

distribution must be ByLogStream or Random.

Rule logic

Require

input.distribution == 'ByLogStream'
|| input.distribution == 'Random'

Emit system fields rules

emit-system-fields entries must be @aws.account or @aws.region.

Rule logic

For each

input.emit-system-fields ?? []

Require

@each.value == '@aws.account'
|| @each.value == '@aws.region'

Outputs

log-group-name

string

name

string

apply-on-transformed-logs

boolean

role-arn

optional(string)