Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. wafv2
  5. getLoggingConfiguration

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.27.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.wafv2.getLoggingConfiguration

Explore with Pulumi AI

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.27.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-aws-native

A WAFv2 Logging Configuration Resource Provider

Using getLoggingConfiguration

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getLoggingConfiguration(args: GetLoggingConfigurationArgs, opts?: InvokeOptions): Promise<GetLoggingConfigurationResult>
function getLoggingConfigurationOutput(args: GetLoggingConfigurationOutputArgs, opts?: InvokeOptions): Output<GetLoggingConfigurationResult>
Copy
def get_logging_configuration(resource_arn: Optional[str] = None,
                              opts: Optional[InvokeOptions] = None) -> GetLoggingConfigurationResult
def get_logging_configuration_output(resource_arn: Optional[pulumi.Input[str]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetLoggingConfigurationResult]
Copy
func LookupLoggingConfiguration(ctx *Context, args *LookupLoggingConfigurationArgs, opts ...InvokeOption) (*LookupLoggingConfigurationResult, error)
func LookupLoggingConfigurationOutput(ctx *Context, args *LookupLoggingConfigurationOutputArgs, opts ...InvokeOption) LookupLoggingConfigurationResultOutput
Copy

> Note: This function is named LookupLoggingConfiguration in the Go SDK.

public static class GetLoggingConfiguration 
{
    public static Task<GetLoggingConfigurationResult> InvokeAsync(GetLoggingConfigurationArgs args, InvokeOptions? opts = null)
    public static Output<GetLoggingConfigurationResult> Invoke(GetLoggingConfigurationInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)
public static Output<GetLoggingConfigurationResult> getLoggingConfiguration(GetLoggingConfigurationArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: aws-native:wafv2:getLoggingConfiguration
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

ResourceArn This property is required. string
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
ResourceArn This property is required. string
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
resourceArn This property is required. String
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
resourceArn This property is required. string
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
resource_arn This property is required. str
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.
resourceArn This property is required. String
The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.

getLoggingConfiguration Result

The following output properties are available:

LogDestinationConfigs List<string>
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
LoggingFilter Pulumi.AwsNative.WaFv2.Outputs.LoggingFilterProperties
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
ManagedByFirewallManager bool
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
RedactedFields List<Pulumi.AwsNative.WaFv2.Outputs.LoggingConfigurationFieldToMatch>
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
LogDestinationConfigs []string
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
LoggingFilter LoggingFilterProperties
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
ManagedByFirewallManager bool
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
RedactedFields []LoggingConfigurationFieldToMatch
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
logDestinationConfigs List<String>
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
loggingFilter LoggingFilterProperties
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
managedByFirewallManager Boolean
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
redactedFields List<LoggingConfigurationFieldToMatch>
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
logDestinationConfigs string[]
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
loggingFilter LoggingFilterProperties
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
managedByFirewallManager boolean
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
redactedFields LoggingConfigurationFieldToMatch[]
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
log_destination_configs Sequence[str]
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
logging_filter LoggingFilterProperties
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
managed_by_firewall_manager bool
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
redacted_fields Sequence[LoggingConfigurationFieldToMatch]
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.
logDestinationConfigs List<String>
The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.
loggingFilter Property Map
Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.
managedByFirewallManager Boolean
Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.
redactedFields List<Property Map>
The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.

Supporting Types

LoggingConfigurationCondition

actionCondition Property Map
A single action condition.
labelNameCondition Property Map
A single label name condition.

LoggingConfigurationConditionActionConditionProperties

Action This property is required. Pulumi.AwsNative.WaFv2.LoggingConfigurationConditionActionConditionPropertiesAction
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
Action This property is required. LoggingConfigurationConditionActionConditionPropertiesAction
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
action This property is required. LoggingConfigurationConditionActionConditionPropertiesAction
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
action This property is required. LoggingConfigurationConditionActionConditionPropertiesAction
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
action This property is required. LoggingConfigurationConditionActionConditionPropertiesAction
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
action This property is required. "ALLOW" | "BLOCK" | "COUNT" | "CAPTCHA" | "CHALLENGE" | "EXCLUDED_AS_COUNT"
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

LoggingConfigurationConditionActionConditionPropertiesAction

LoggingConfigurationConditionLabelNameConditionProperties

LabelName This property is required. string
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
LabelName This property is required. string
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
labelName This property is required. String
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
labelName This property is required. string
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
label_name This property is required. str
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.
labelName This property is required. String
The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label.

LoggingConfigurationFieldToMatch

Method object
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
QueryString object
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
SingleHeader Pulumi.AwsNative.WaFv2.Inputs.LoggingConfigurationFieldToMatchSingleHeaderProperties
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
UriPath object
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
Method interface{}
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
QueryString interface{}
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
SingleHeader LoggingConfigurationFieldToMatchSingleHeaderProperties
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
UriPath interface{}
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
method Object
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
queryString Object
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
singleHeader LoggingConfigurationFieldToMatchSingleHeaderProperties
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
uriPath Object
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
method any
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
queryString any
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
singleHeader LoggingConfigurationFieldToMatchSingleHeaderProperties
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
uriPath any
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
method Any
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
query_string Any
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
single_header LoggingConfigurationFieldToMatchSingleHeaderProperties
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
uri_path Any
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
method Any
Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
queryString Any
Inspect the query string. This is the part of a URL that appears after a ? character, if any.
singleHeader Property Map
Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.
uriPath Any
Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.

LoggingConfigurationFieldToMatchSingleHeaderProperties

Name This property is required. string
The name of the query header to inspect.
Name This property is required. string
The name of the query header to inspect.
name This property is required. String
The name of the query header to inspect.
name This property is required. string
The name of the query header to inspect.
name This property is required. str
The name of the query header to inspect.
name This property is required. String
The name of the query header to inspect.

LoggingConfigurationFilter

Behavior This property is required. Pulumi.AwsNative.WaFv2.LoggingConfigurationFilterBehavior
How to handle logs that satisfy the filter's conditions and requirement.
Conditions This property is required. List<Pulumi.AwsNative.WaFv2.Inputs.LoggingConfigurationCondition>
Match conditions for the filter.
Requirement This property is required. Pulumi.AwsNative.WaFv2.LoggingConfigurationFilterRequirement
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
Behavior This property is required. LoggingConfigurationFilterBehavior
How to handle logs that satisfy the filter's conditions and requirement.
Conditions This property is required. []LoggingConfigurationCondition
Match conditions for the filter.
Requirement This property is required. LoggingConfigurationFilterRequirement
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
behavior This property is required. LoggingConfigurationFilterBehavior
How to handle logs that satisfy the filter's conditions and requirement.
conditions This property is required. List<LoggingConfigurationCondition>
Match conditions for the filter.
requirement This property is required. LoggingConfigurationFilterRequirement
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
behavior This property is required. LoggingConfigurationFilterBehavior
How to handle logs that satisfy the filter's conditions and requirement.
conditions This property is required. LoggingConfigurationCondition[]
Match conditions for the filter.
requirement This property is required. LoggingConfigurationFilterRequirement
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
behavior This property is required. LoggingConfigurationFilterBehavior
How to handle logs that satisfy the filter's conditions and requirement.
conditions This property is required. Sequence[LoggingConfigurationCondition]
Match conditions for the filter.
requirement This property is required. LoggingConfigurationFilterRequirement
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.
behavior This property is required. "KEEP" | "DROP"
How to handle logs that satisfy the filter's conditions and requirement.
conditions This property is required. List<Property Map>
Match conditions for the filter.
requirement This property is required. "MEETS_ALL" | "MEETS_ANY"
Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.

LoggingConfigurationFilterBehavior

LoggingConfigurationFilterRequirement

LoggingConfigurationLoggingFilterPropertiesDefaultBehavior

LoggingFilterProperties

DefaultBehavior This property is required. Pulumi.AwsNative.WaFv2.LoggingConfigurationLoggingFilterPropertiesDefaultBehavior
Default handling for logs that don't match any of the specified filtering conditions.
Filters This property is required. List<Pulumi.AwsNative.WaFv2.Inputs.LoggingConfigurationFilter>
The filters that you want to apply to the logs.
DefaultBehavior This property is required. LoggingConfigurationLoggingFilterPropertiesDefaultBehavior
Default handling for logs that don't match any of the specified filtering conditions.
Filters This property is required. []LoggingConfigurationFilter
The filters that you want to apply to the logs.
defaultBehavior This property is required. LoggingConfigurationLoggingFilterPropertiesDefaultBehavior
Default handling for logs that don't match any of the specified filtering conditions.
filters This property is required. List<LoggingConfigurationFilter>
The filters that you want to apply to the logs.
defaultBehavior This property is required. LoggingConfigurationLoggingFilterPropertiesDefaultBehavior
Default handling for logs that don't match any of the specified filtering conditions.
filters This property is required. LoggingConfigurationFilter[]
The filters that you want to apply to the logs.
default_behavior This property is required. LoggingConfigurationLoggingFilterPropertiesDefaultBehavior
Default handling for logs that don't match any of the specified filtering conditions.
filters This property is required. Sequence[LoggingConfigurationFilter]
The filters that you want to apply to the logs.
defaultBehavior This property is required. "KEEP" | "DROP"
Default handling for logs that don't match any of the specified filtering conditions.
filters This property is required. List<Property Map>
The filters that you want to apply to the logs.

Package Details

Repository
AWS Native pulumi/pulumi-aws-native
License
Apache-2.0

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.27.0 published on Monday, Apr 14, 2025 by Pulumi
pulumi/pulumi-aws-native