Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. networkfirewall
  5. getLoggingConfiguration

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.networkfirewall.getLoggingConfiguration

Explore with Pulumi AI

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

Resource type definition for AWS::NetworkFirewall::LoggingConfiguration

Using getLoggingConfiguration

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getLoggingConfiguration(args: GetLoggingConfigurationArgs, opts?: InvokeOptions): Promise<GetLoggingConfigurationResult>
function getLoggingConfigurationOutput(args: GetLoggingConfigurationOutputArgs, opts?: InvokeOptions): Output<GetLoggingConfigurationResult>
Copy
def get_logging_configuration(firewall_arn: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetLoggingConfigurationResult
def get_logging_configuration_output(firewall_arn: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetLoggingConfigurationResult]
Copy
func LookupLoggingConfiguration(ctx *Context, args *LookupLoggingConfigurationArgs, opts ...InvokeOption) (*LookupLoggingConfigurationResult, error)
func LookupLoggingConfigurationOutput(ctx *Context, args *LookupLoggingConfigurationOutputArgs, opts ...InvokeOption) LookupLoggingConfigurationResultOutput
Copy

> Note: This function is named LookupLoggingConfiguration in the Go SDK.

public static class GetLoggingConfiguration 
{
    public static Task<GetLoggingConfigurationResult> InvokeAsync(GetLoggingConfigurationArgs args, InvokeOptions? opts = null)
    public static Output<GetLoggingConfigurationResult> Invoke(GetLoggingConfigurationInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)
public static Output<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: aws-native:networkfirewall:getLoggingConfiguration
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

FirewallArn This property is required. string
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
FirewallArn This property is required. string
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
firewallArn This property is required. String
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
firewallArn This property is required. string
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
firewall_arn This property is required. str
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
firewallArn This property is required. String
The Amazon Resource Name (ARN) of the Firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.

getLoggingConfiguration Result

The following output properties are available:

LoggingConfigurationValue Pulumi.AwsNative.NetworkFirewall.Outputs.LoggingConfiguration
Defines how AWS Network Firewall performs logging for a Firewall .
LoggingConfiguration LoggingConfigurationType
Defines how AWS Network Firewall performs logging for a Firewall .
loggingConfiguration LoggingConfiguration
Defines how AWS Network Firewall performs logging for a Firewall .
loggingConfiguration LoggingConfiguration
Defines how AWS Network Firewall performs logging for a Firewall .
logging_configuration LoggingConfiguration
Defines how AWS Network Firewall performs logging for a Firewall .
loggingConfiguration Property Map
Defines how AWS Network Firewall performs logging for a Firewall .

Supporting Types

LoggingConfiguration

LogDestinationConfigs This property is required. List<Pulumi.AwsNative.NetworkFirewall.Inputs.LoggingConfigurationLogDestinationConfig>
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
LogDestinationConfigs This property is required. []LoggingConfigurationLogDestinationConfig
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
logDestinationConfigs This property is required. List<LoggingConfigurationLogDestinationConfig>
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
logDestinationConfigs This property is required. LoggingConfigurationLogDestinationConfig[]
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
log_destination_configs This property is required. Sequence[LoggingConfigurationLogDestinationConfig]
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.
logDestinationConfigs This property is required. List<Property Map>
Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups.

LoggingConfigurationLogDestinationConfig

LogDestination This property is required. Dictionary<string, string>
A key-value pair to configure the logDestinations.
LogDestinationType This property is required. Pulumi.AwsNative.NetworkFirewall.LoggingConfigurationLogDestinationConfigLogDestinationType
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
LogType This property is required. Pulumi.AwsNative.NetworkFirewall.LoggingConfigurationLogDestinationConfigLogType
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
LogDestination This property is required. map[string]string
A key-value pair to configure the logDestinations.
LogDestinationType This property is required. LoggingConfigurationLogDestinationConfigLogDestinationType
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
LogType This property is required. LoggingConfigurationLogDestinationConfigLogType
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
logDestination This property is required. Map<String,String>
A key-value pair to configure the logDestinations.
logDestinationType This property is required. LoggingConfigurationLogDestinationConfigLogDestinationType
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
logType This property is required. LoggingConfigurationLogDestinationConfigLogType
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
logDestination This property is required. {[key: string]: string}
A key-value pair to configure the logDestinations.
logDestinationType This property is required. LoggingConfigurationLogDestinationConfigLogDestinationType
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
logType This property is required. LoggingConfigurationLogDestinationConfigLogType
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
log_destination This property is required. Mapping[str, str]
A key-value pair to configure the logDestinations.
log_destination_type This property is required. LoggingConfigurationLogDestinationConfigLogDestinationType
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
log_type This property is required. LoggingConfigurationLogDestinationConfigLogType
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .
logDestination This property is required. Map<String>
A key-value pair to configure the logDestinations.
logDestinationType This property is required. "S3" | "CloudWatchLogs" | "KinesisDataFirehose"
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
logType This property is required. "ALERT" | "FLOW" | "TLS"
The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.

  • ALERT - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the StatefulRule property.
  • FLOW - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
  • TLS - Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide .

LoggingConfigurationLogDestinationConfigLogDestinationType

LoggingConfigurationLogDestinationConfigLogType

Package Details

Repository
AWS Native pulumi/pulumi-aws-native
License
Apache-2.0

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native