Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. networkfirewall
  5. getLoggingConfiguration

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.networkfirewall.getLoggingConfiguration

Explore with Pulumi AI

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

    Resource type definition for AWS::NetworkFirewall::LoggingConfiguration

    Using getLoggingConfiguration

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getLoggingConfiguration(args: GetLoggingConfigurationArgs, opts?: InvokeOptions): Promise<GetLoggingConfigurationResult>
function getLoggingConfigurationOutput(args: GetLoggingConfigurationOutputArgs, opts?: InvokeOptions): Output<GetLoggingConfigurationResult>
    def get_logging_configuration(firewall_arn: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetLoggingConfigurationResult
def get_logging_configuration_output(firewall_arn: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetLoggingConfigurationResult]
    func LookupLoggingConfiguration(ctx *Context, args *LookupLoggingConfigurationArgs, opts ...InvokeOption) (*LookupLoggingConfigurationResult, error)
func LookupLoggingConfigurationOutput(ctx *Context, args *LookupLoggingConfigurationOutputArgs, opts ...InvokeOption) LookupLoggingConfigurationResultOutput

    > Note: This function is named LookupLoggingConfiguration in the Go SDK.

    public static class GetLoggingConfiguration 
{
    public static Task<GetLoggingConfigurationResult> InvokeAsync(GetLoggingConfigurationArgs args, InvokeOptions? opts = null)
    public static Output<GetLoggingConfigurationResult> Invoke(GetLoggingConfigurationInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)
public static Output<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)

    fn::invoke:
  function: aws-native:networkfirewall:getLoggingConfiguration
  arguments:
    # arguments dictionary

    The following arguments are supported:

    FirewallArn string
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
    FirewallArn string
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
    firewallArn String
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
    firewallArn string
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
    firewall_arn str
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
    firewallArn String
    The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.

    getLoggingConfiguration Result

    The following output properties are available:

    LoggingConfigurationValue Pulumi.AwsNative.NetworkFirewall.Outputs.LoggingConfiguration
    Defines how AWS Network Firewall performs logging for a Firewall .
    LoggingConfiguration LoggingConfigurationType
    Defines how AWS Network Firewall performs logging for a Firewall .
    loggingConfiguration LoggingConfiguration
    Defines how AWS Network Firewall performs logging for a Firewall .
    loggingConfiguration LoggingConfiguration
    Defines how AWS Network Firewall performs logging for a Firewall .
    logging_configuration LoggingConfiguration
    Defines how AWS Network Firewall performs logging for a Firewall .
    loggingConfiguration Property Map
    Defines how AWS Network Firewall performs logging for a Firewall .

    Supporting Types

    LoggingConfiguration

    LogDestinationConfigs List<Pulumi.AwsNative.NetworkFirewall.Inputs.LoggingConfigurationLogDestinationConfig>
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
    LogDestinationConfigs []LoggingConfigurationLogDestinationConfig
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
    logDestinationConfigs List<LoggingConfigurationLogDestinationConfig>
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
    logDestinationConfigs LoggingConfigurationLogDestinationConfig[]
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
    log_destination_configs Sequence[LoggingConfigurationLogDestinationConfig]
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
    logDestinationConfigs List<Property Map>
    Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.

    LoggingConfigurationLogDestinationConfig

    LogDestination Dictionary<string, string>
    A key-value pair to configure the logDestinations.
    LogDestinationType Pulumi.AwsNative.NetworkFirewall.LoggingConfigurationLogDestinationConfigLogDestinationType
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    LogType Pulumi.AwsNative.NetworkFirewall.LoggingConfigurationLogDestinationConfigLogType
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
    LogDestination map[string]string
    A key-value pair to configure the logDestinations.
    LogDestinationType LoggingConfigurationLogDestinationConfigLogDestinationType
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    LogType LoggingConfigurationLogDestinationConfigLogType
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
    logDestination Map<String,String>
    A key-value pair to configure the logDestinations.
    logDestinationType LoggingConfigurationLogDestinationConfigLogDestinationType
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    logType LoggingConfigurationLogDestinationConfigLogType
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
    logDestination {[key: string]: string}
    A key-value pair to configure the logDestinations.
    logDestinationType LoggingConfigurationLogDestinationConfigLogDestinationType
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    logType LoggingConfigurationLogDestinationConfigLogType
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
    log_destination Mapping[str, str]
    A key-value pair to configure the logDestinations.
    log_destination_type LoggingConfigurationLogDestinationConfigLogDestinationType
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    log_type LoggingConfigurationLogDestinationConfigLogType
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
    logDestination Map<String>
    A key-value pair to configure the logDestinations.
    logDestinationType "S3" | "CloudWatchLogs" | "KinesisDataFirehose"
    The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
    logType "ALERT" | "FLOW" | "TLS"
    The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

    • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
    • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
    • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .

    LoggingConfigurationLogDestinationConfigLogDestinationType

    LoggingConfigurationLogDestinationConfigLogType

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
    pulumi/pulumi-aws-native