mirror of https://github.com/opentffoundation/opentf.git synced 2026-03-28 14:00:49 -04:00

Files

Paul Forman 9cec40ea3c Add missing error-checks from code review

Some error-checking was omitted.

Specifically, the cloudTrailSetLogging call in the Create function was
ignoring the return and cloudTrailGetLoggingStatus could crash on a
nil-dereference during the return.  Fixed both.

Fixed some needless casting in cloudTrailGetLoggingStatus.
Clarified error message in acceptance tests.
Removed needless option from example in docs.

2015-11-22 12:54:11 -07:00

2.3 KiB

Raw Blame History

layout, page_title, sidebar_current, description

layout	page_title	sidebar_current	description
aws	AWS: cloudtrail	docs-aws-resource-cloudtrail	Provides a CloudTrail resource.

aws_cloudtrail

Provides a CloudTrail resource.

Example Usage

resource "aws_cloudtrail" "foobar" {
    name = "tf-trail-foobar"
    s3_bucket_name = "${aws_s3_bucket.foo.id}"
    s3_key_prefix = "/prefix"
    include_global_service_events = false
}

resource "aws_s3_bucket" "foo" {
    bucket = "tf-test-trail"
    force_destroy = true
    policy = <<POLICY
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AWSCloudTrailAclCheck",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetBucketAcl",
            "Resource": "arn:aws:s3:::tf-test-trail"
        },
        {
            "Sid": "AWSCloudTrailWrite",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:PutObject",
            "Resource": "arn:aws:s3:::tf-test-trail/*",
            "Condition": {
                "StringEquals": {
                    "s3:x-amz-acl": "bucket-owner-full-control"
                }
            }
        }
    ]
}
POLICY
}

Argument Reference

The following arguments are supported:

name - (Required) Specifies the name of the trail.
s3_bucket_name - (Required) Specifies the name of the S3 bucket designated for publishing log files.
s3_key_prefix - (Optional) Specifies the S3 key prefix that precedes the name of the bucket you have designated for log file delivery.
cloud_watch_logs_role_arn - (Optional) Specifies the role for the CloudWatch Logs endpoint to assume to write to a user’s log group.
cloud_watch_logs_group_arn - (Optional) Specifies a log group name using an Amazon Resource Name (ARN), that represents the log group to which CloudTrail logs will be delivered.
enable_logging - (Optional) Enables logging for the trail. Defaults to true. Setting this to false will pause logging.
include_global_service_events - (Optional) Specifies whether the trail is publishing events from global services such as IAM to the log files. Defaults to true.
sns_topic_name - (Optional) Specifies the name of the Amazon SNS topic defined for notification of log file delivery.

Attribute Reference

The following attributes are exported:

id - The name of the trail.

2.3 KiB Raw Blame History Unescape Escape

aws_cloudtrail

Example Usage

Argument Reference

Attribute Reference

2.3 KiB

Raw Blame History