Package com.pulumi.aws.cloudwatch

Class LogAccountPolicy

java.lang.Object

com.pulumi.resources.Resource

com.pulumi.resources.CustomResource

com.pulumi.aws.cloudwatch.LogAccountPolicy

public class LogAccountPolicy
extends com.pulumi.resources.CustomResource

Provides a CloudWatch Log Account Policy resource. ## Example Usage ### Account Data Protection Policy

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.cloudwatch.LogAccountPolicy;
 import com.pulumi.aws.cloudwatch.LogAccountPolicyArgs;
 import static com.pulumi.codegen.internal.Serialization.*;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var dataProtection = new LogAccountPolicy("dataProtection", LogAccountPolicyArgs.builder()
             .policyName("data-protection")
             .policyType("DATA_PROTECTION_POLICY")
             .policyDocument(serializeJson(
                 jsonObject(
                     jsonProperty("Name", "DataProtection"),
                     jsonProperty("Version", "2021-06-01"),
                     jsonProperty("Statement", jsonArray(
                         jsonObject(
                             jsonProperty("Sid", "Audit"),
                             jsonProperty("DataIdentifier", jsonArray("arn:aws:dataprotection::aws:data-identifier/EmailAddress")),
                             jsonProperty("Operation", jsonObject(
                                 jsonProperty("Audit", jsonObject(
                                     jsonProperty("FindingsDestination", jsonObject(
 
                                     ))
                                 ))
                             ))
                         ), 
                         jsonObject(
                             jsonProperty("Sid", "Redact"),
                             jsonProperty("DataIdentifier", jsonArray("arn:aws:dataprotection::aws:data-identifier/EmailAddress")),
                             jsonProperty("Operation", jsonObject(
                                 jsonProperty("Deidentify", jsonObject(
                                     jsonProperty("MaskConfig", jsonObject(
 
                                     ))
                                 ))
                             ))
                         )
                     ))
                 )))
             .build());
 
     }
 }
 
 

### Subscription Filter Policy

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.cloudwatch.LogAccountPolicy;
 import com.pulumi.aws.cloudwatch.LogAccountPolicyArgs;
 import static com.pulumi.codegen.internal.Serialization.*;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var subscriptionFilter = new LogAccountPolicy("subscriptionFilter", LogAccountPolicyArgs.builder()
             .policyName("subscription-filter")
             .policyType("SUBSCRIPTION_FILTER_POLICY")
             .policyDocument(serializeJson(
                 jsonObject(
                     jsonProperty("DestinationArn", test.arn()),
                     jsonProperty("FilterPattern", "test")
                 )))
             .selectionCriteria("LogGroupName NOT IN [\"excluded_log_group_name\"]")
             .build());
 
     }
 }
 
 

### Field Index Policy

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.cloudwatch.LogAccountPolicy;
 import com.pulumi.aws.cloudwatch.LogAccountPolicyArgs;
 import static com.pulumi.codegen.internal.Serialization.*;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var fieldIndex = new LogAccountPolicy("fieldIndex", LogAccountPolicyArgs.builder()
             .policyName("field-index")
             .policyType("FIELD_INDEX_POLICY")
             .policyDocument(serializeJson(
                 jsonObject(
                     jsonProperty("Fields", jsonArray(
                         "field1", 
                         "field2"
                     ))
                 )))
             .build());
 
     }
 }
 
 

## Import ### Identity Schema #### Required * `policyName` (String) Name of the account policy. * `policyType` (String) Type of account policy. #### Optional * `accountId` (String) AWS Account where this resource is managed. * `region` (String) Region where this resource is managed. Using `pulumi import`, import Account Policies using `policyName` and `policyType` separated by a colon (`:`). For example: ```sh $ pulumi import aws:cloudwatch/logAccountPolicy:LogAccountPolicy example "my-account-policy:SUBSCRIPTION_FILTER_POLICY" ```

Nested Class Summary

Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

com.pulumi.resources.CustomResource.CustomResourceInternal

Nested classes/interfaces inherited from class com.pulumi.resources.Resource

com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

Field Summary

Fields inherited from class com.pulumi.resources.Resource

childResources, remote

Constructor Summary

Constructors

Constructor	Description
LogAccountPolicy(java.lang.String name)
LogAccountPolicy(java.lang.String name, LogAccountPolicyArgs args)
LogAccountPolicy(java.lang.String name, LogAccountPolicyArgs args, com.pulumi.resources.CustomResourceOptions options)

Method Summary

Modifier and Type	Method	Description
static LogAccountPolicy	get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, LogAccountPolicyState state, com.pulumi.resources.CustomResourceOptions options)	Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
com.pulumi.core.Output<java.lang.String>	policyDocument()
com.pulumi.core.Output<java.lang.String>	policyName()
com.pulumi.core.Output<java.lang.String>	policyType()
com.pulumi.core.Output<java.lang.String>	region()
com.pulumi.core.Output<java.util.Optional<java.lang.String>>	scope()
com.pulumi.core.Output<java.util.Optional<java.lang.String>>	selectionCriteria()

Methods inherited from class com.pulumi.resources.CustomResource

getId, id, idFuture

Methods inherited from class com.pulumi.resources.Resource

getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LogAccountPolicy

public LogAccountPolicy(java.lang.String name)

Parameters:

name - The _unique_ name of the resulting resource.

LogAccountPolicy

public LogAccountPolicy(java.lang.String name,
                        LogAccountPolicyArgs args)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

LogAccountPolicy

public LogAccountPolicy(java.lang.String name,
                        LogAccountPolicyArgs args,
                        @Nullable
                        com.pulumi.resources.CustomResourceOptions options)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

options - A bag of options that control this resource's behavior.

Method Detail

policyDocument

public com.pulumi.core.Output<java.lang.String> policyDocument()

Returns:

Text of the account policy. Refer to the [AWS docs](https://docs.aws.amazon.com/cli/latest/reference/logs/put-account-policy.html) for more information.

policyName

public com.pulumi.core.Output<java.lang.String> policyName()

Returns:

Name of the account policy.

policyType

public com.pulumi.core.Output<java.lang.String> policyType()

Returns:

Type of account policy. One of `DATA_PROTECTION_POLICY`, `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY` or `TRANSFORMER_POLICY`. You can have one account policy per type in an account.

region

public com.pulumi.core.Output<java.lang.String> region()

Returns:

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

scope

public com.pulumi.core.Output<java.util.Optional<java.lang.String>> scope()

Returns:

Currently defaults to and only accepts the value: `ALL`.

selectionCriteria

public com.pulumi.core.Output<java.util.Optional<java.lang.String>> selectionCriteria()

Returns:

Criteria for applying a subscription filter policy to a selection of log groups. The only allowable criteria selector is `LogGroupName NOT IN []`.

get

public static LogAccountPolicy get(java.lang.String name,
                                   com.pulumi.core.Output<java.lang.String> id,
                                   @Nullable
                                   LogAccountPolicyState state,
                                   @Nullable
                                   com.pulumi.resources.CustomResourceOptions options)

Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.

Parameters:

name - The _unique_ name of the resulting resource.

id - The _unique_ provider ID of the resource to lookup.

state -

options - Optional settings to control the behavior of the CustomResource.