Package com.pulumi.aws.observabilityadmin

Class CentralizationRuleForOrganization

java.lang.Object

com.pulumi.resources.Resource

com.pulumi.resources.CustomResource

com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganization

public class CentralizationRuleForOrganization
extends com.pulumi.resources.CustomResource

Manages an AWS CloudWatch Observability Admin Centralization Rule For Organization. Centralization rules enable you to centralize log data from multiple AWS accounts and regions within your organization to a single destination account and region. This helps with log management, compliance, and cost optimization by consolidating logs in a central location. This requires an AWS account within an organization with at least [delegated administrator permissions](https://docs.aws.amazon.com/organizations/latest/APIReference/API_RegisterDelegatedAdministrator.html). ## Example Usage ### Basic Centralization Rule

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetCallerIdentityArgs;
 import com.pulumi.aws.organizations.OrganizationsFunctions;
 import com.pulumi.aws.organizations.inputs.GetOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganization;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var current = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder()
             .build());
 
         final var currentGetOrganization = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()
             .build());
 
         var example = new CentralizationRuleForOrganization("example", CentralizationRuleForOrganizationArgs.builder()
             .rule(CentralizationRuleForOrganizationRuleArgs.builder()
                 .destination(CentralizationRuleForOrganizationRuleDestinationArgs.builder()
                     .region("eu-west-1")
                     .account(current.accountId())
                     .build())
                 .source(CentralizationRuleForOrganizationRuleSourceArgs.builder()
                     .sourceLogsConfiguration(CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs.builder()
                         .encryptedLogGroupStrategy("SKIP")
                         .logGroupSelectionCriteria("*")
                         .build())
                     .regions("ap-southeast-1")
                     .scope(String.format("OrganizationId = '%s'", currentGetOrganization.id()))
                     .build())
                 .build())
             .ruleName("example-centralization-rule")
             .tags(Map.ofEntries(
                 Map.entry("Name", "example-centralization-rule"),
                 Map.entry("Environment", "production")
             ))
             .build());
 
     }
 }
 
 

### Advanced Configuration with Encryption, Backup and Log Group Name Configuration

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetCallerIdentityArgs;
 import com.pulumi.aws.organizations.OrganizationsFunctions;
 import com.pulumi.aws.organizations.inputs.GetOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganization;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogsEncryptionConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationBackupConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogGroupNameConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var current = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder()
             .build());
 
         final var currentGetOrganization = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()
             .build());
 
         var advanced = new CentralizationRuleForOrganization("advanced", CentralizationRuleForOrganizationArgs.builder()
             .rule(CentralizationRuleForOrganizationRuleArgs.builder()
                 .destination(CentralizationRuleForOrganizationRuleDestinationArgs.builder()
                     .destinationLogsConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationArgs.builder()
                         .logsEncryptionConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogsEncryptionConfigurationArgs.builder()
                             .encryptionStrategy("AWS_OWNED")
                             .build())
                         .backupConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationBackupConfigurationArgs.builder()
                             .region("us-west-1")
                             .build())
                         .logGroupNameConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogGroupNameConfigurationArgs.builder()
                             .logGroupNamePattern("/centralized-logs/${source.accountId}/${source.region}/${source.logGroup}")
                             .build())
                         .build())
                     .region("eu-west-1")
                     .account(current.accountId())
                     .build())
                 .source(CentralizationRuleForOrganizationRuleSourceArgs.builder()
                     .sourceLogsConfiguration(CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs.builder()
                         .encryptedLogGroupStrategy("ALLOW")
                         .logGroupSelectionCriteria("*")
                         .build())
                     .regions(                    
                         "ap-southeast-1",
                         "us-east-1")
                     .scope(String.format("OrganizationId = '%s'", currentGetOrganization.id()))
                     .build())
                 .build())
             .ruleName("advanced-centralization-rule")
             .tags(Map.ofEntries(
                 Map.entry("Name", "advanced-centralization-rule"),
                 Map.entry("Environment", "production"),
                 Map.entry("Team", "observability")
             ))
             .build());
 
     }
 }
 
 

### Selective Log Group Filtering

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetCallerIdentityArgs;
 import com.pulumi.aws.organizations.OrganizationsFunctions;
 import com.pulumi.aws.organizations.inputs.GetOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganization;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var current = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder()
             .build());
 
         final var currentGetOrganization = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()
             .build());
 
         var filtered = new CentralizationRuleForOrganization("filtered", CentralizationRuleForOrganizationArgs.builder()
             .rule(CentralizationRuleForOrganizationRuleArgs.builder()
                 .destination(CentralizationRuleForOrganizationRuleDestinationArgs.builder()
                     .region("eu-west-1")
                     .account(current.accountId())
                     .build())
                 .source(CentralizationRuleForOrganizationRuleSourceArgs.builder()
                     .sourceLogsConfiguration(CentralizationRuleForOrganizationRuleSourceSourceLogsConfigurationArgs.builder()
                         .encryptedLogGroupStrategy("ALLOW")
                         .logGroupSelectionCriteria("LogGroupName LIKE '/aws/lambda%'")
                         .build())
                     .regions(                    
                         "ap-southeast-1",
                         "us-east-1")
                     .scope(String.format("OrganizationId = '%s'", currentGetOrganization.id()))
                     .build())
                 .build())
             .ruleName("filtered-centralization-rule")
             .tags(Map.ofEntries(
                 Map.entry("Name", "filtered-centralization-rule"),
                 Map.entry("Filter", "lambda-logs")
             ))
             .build());
 
     }
 }
 
 

### Metrics Centralization with Backup

 
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetCallerIdentityArgs;
 import com.pulumi.aws.organizations.OrganizationsFunctions;
 import com.pulumi.aws.organizations.inputs.GetOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganization;
 import com.pulumi.aws.observabilityadmin.CentralizationRuleForOrganizationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationBackupConfigurationArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceArgs;
 import com.pulumi.aws.observabilityadmin.inputs.CentralizationRuleForOrganizationRuleSourceSourceMetricsConfigurationArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var current = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder()
             .build());
 
         final var currentGetOrganization = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()
             .build());
 
         var metrics = new CentralizationRuleForOrganization("metrics", CentralizationRuleForOrganizationArgs.builder()
             .rule(CentralizationRuleForOrganizationRuleArgs.builder()
                 .destination(CentralizationRuleForOrganizationRuleDestinationArgs.builder()
                     .destinationMetricsConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationArgs.builder()
                         .backupConfiguration(CentralizationRuleForOrganizationRuleDestinationDestinationMetricsConfigurationBackupConfigurationArgs.builder()
                             .region("us-west-1")
                             .build())
                         .build())
                     .region("eu-west-1")
                     .account(current.accountId())
                     .build())
                 .source(CentralizationRuleForOrganizationRuleSourceArgs.builder()
                     .sourceMetricsConfiguration(CentralizationRuleForOrganizationRuleSourceSourceMetricsConfigurationArgs.builder()
                         .metricsSelectionCriteria("*")
                         .build())
                     .regions(                    
                         "ap-southeast-1",
                         "us-east-1")
                     .scope(String.format("OrganizationId = '%s'", currentGetOrganization.id()))
                     .build())
                 .build())
             .ruleName("metrics-centralization-rule")
             .build());
 
     }
 }
 
 

## Import Using `pulumi import`, import CloudWatch Observability Admin Centralization Rule For Organization using the `ruleName`. For example: ```sh $ pulumi import aws:observabilityadmin/centralizationRuleForOrganization:CentralizationRuleForOrganization example example-centralization-rule ```

Nested Class Summary

Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

com.pulumi.resources.CustomResource.CustomResourceInternal

Nested classes/interfaces inherited from class com.pulumi.resources.Resource

com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

Field Summary

Fields inherited from class com.pulumi.resources.Resource

childResources, remote

Constructor Summary

Constructors

Constructor	Description
CentralizationRuleForOrganization(java.lang.String name)
CentralizationRuleForOrganization(java.lang.String name, CentralizationRuleForOrganizationArgs args)
CentralizationRuleForOrganization(java.lang.String name, CentralizationRuleForOrganizationArgs args, com.pulumi.resources.CustomResourceOptions options)

Method Summary

Modifier and Type	Method	Description
static CentralizationRuleForOrganization	get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, CentralizationRuleForOrganizationState state, com.pulumi.resources.CustomResourceOptions options)	Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
com.pulumi.core.Output<java.lang.String>	region()
com.pulumi.core.Output<CentralizationRuleForOrganizationRule>	rule()
com.pulumi.core.Output<java.lang.String>	ruleArn()
com.pulumi.core.Output<java.lang.String>	ruleName()
com.pulumi.core.Output<java.lang.String>	tagPropagationFailureReason()
com.pulumi.core.Output<java.lang.String>	tagPropagationStatus()
com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>>	tags()
com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>>	tagsAll()
com.pulumi.core.Output<java.util.Optional<CentralizationRuleForOrganizationTimeouts>>	timeouts()

Methods inherited from class com.pulumi.resources.CustomResource

getId, id, idFuture

Methods inherited from class com.pulumi.resources.Resource

getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CentralizationRuleForOrganization

public CentralizationRuleForOrganization(java.lang.String name)

Parameters:

name - The _unique_ name of the resulting resource.

CentralizationRuleForOrganization

public CentralizationRuleForOrganization(java.lang.String name,
                                         CentralizationRuleForOrganizationArgs args)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

CentralizationRuleForOrganization

public CentralizationRuleForOrganization(java.lang.String name,
                                         CentralizationRuleForOrganizationArgs args,
                                         @Nullable
                                         com.pulumi.resources.CustomResourceOptions options)

Parameters:

name - The _unique_ name of the resulting resource.

args - The arguments to use to populate this resource's properties.

options - A bag of options that control this resource's behavior.

Method Detail

region

public com.pulumi.core.Output<java.lang.String> region()

Returns:

Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

rule

public com.pulumi.core.Output<CentralizationRuleForOrganizationRule> rule()

Returns:

Configuration block for the centralization rule. See `rule` below. The following arguments are optional:

ruleArn

public com.pulumi.core.Output<java.lang.String> ruleArn()

Returns:

ARN of the centralization rule.

ruleName

public com.pulumi.core.Output<java.lang.String> ruleName()

Returns:

Name of the centralization rule. Must be unique within the organization.

tagPropagationFailureReason

public com.pulumi.core.Output<java.lang.String> tagPropagationFailureReason()

Returns:

Reason tag propagation is unhealthy, when applicable (for example, `RoleNotAssumable` or `RoleLacksPermissions`).

tagPropagationStatus

public com.pulumi.core.Output<java.lang.String> tagPropagationStatus()

Returns:

Health status of tag propagation for the rule (for example, `Healthy` or `Unhealthy`). Independent of the overall rule health.

tags

public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>> tags()

Returns:

Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tagsAll

public com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>> tagsAll()

Returns:

Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

timeouts

public com.pulumi.core.Output<java.util.Optional<CentralizationRuleForOrganizationTimeouts>> timeouts()

get

public static CentralizationRuleForOrganization get(java.lang.String name,
                                                    com.pulumi.core.Output<java.lang.String> id,
                                                    @Nullable
                                                    CentralizationRuleForOrganizationState state,
                                                    @Nullable
                                                    com.pulumi.resources.CustomResourceOptions options)

Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.

Parameters:

name - The _unique_ name of the resulting resource.

id - The _unique_ provider ID of the resource to lookup.

state -

options - Optional settings to control the behavior of the CustomResource.