resolver_query_logging_config_associations

Creates, updates, deletes or gets a resolver_query_logging_config_association resource or lists resolver_query_logging_config_associations in a region

Overview

Name	resolver_query_logging_config_associations
Type	Resource
Description	Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation.
Id	aws.route53resolver.resolver_query_logging_config_associations

Fields

Name	Datatype	Description
id	string	Id
resolver_query_log_config_id	string	ResolverQueryLogConfigId
resource_id	string	ResourceId
status	string	ResolverQueryLogConfigAssociationStatus
error	string	ResolverQueryLogConfigAssociationError
error_message	string	ResolverQueryLogConfigAssociationErrorMessage
creation_time	string	Rfc3339TimeString
region	string	AWS region.

Methods

Name	Accessible by	Required Params
create_resource	INSERT	region
delete_resource	DELETE	data__Identifier, region
list_resources	SELECT	region
get_resource	SELECT	data__Identifier, region

SELECT examples

Gets all resolver_query_logging_config_associations in a region.

SELECT
region,
id,
resolver_query_log_config_id,
resource_id,
status,
error,
error_message,
creation_time
FROM aws.route53resolver.resolver_query_logging_config_associations
WHERE region = 'us-east-1';

Gets all properties from an individual resolver_query_logging_config_association.

SELECT
region,
id,
resolver_query_log_config_id,
resource_id,
status,
error,
error_message,
creation_time
FROM aws.route53resolver.resolver_query_logging_config_associations
WHERE region = 'us-east-1' AND data__Identifier = '<Id>';

INSERT example

Use the following StackQL query and manifest file to create a new resolver_query_logging_config_association resource, using stack-deploy.

Required Properties

/*+ create */
INSERT INTO aws.route53resolver.resolver_query_logging_config_associations (
 ResolverQueryLogConfigId,
 ResourceId,
 region
)
SELECT 
'{{ ResolverQueryLogConfigId }}',
 '{{ ResourceId }}',
'{{ region }}';

All Properties

/*+ create */
INSERT INTO aws.route53resolver.resolver_query_logging_config_associations (
 ResolverQueryLogConfigId,
 ResourceId,
 region
)
SELECT 
 '{{ ResolverQueryLogConfigId }}',
 '{{ ResourceId }}',
 '{{ region }}';

Manifest

version: 1
name: stack name
description: stack description
providers:
  - aws
globals:
  - name: region
    value: '{{ vars.AWS_REGION }}'
resources:
  - name: resolver_query_logging_config_association
    props:
      - name: ResolverQueryLogConfigId
        value: '{{ ResolverQueryLogConfigId }}'
      - name: ResourceId
        value: '{{ ResourceId }}'

DELETE example

/*+ delete */
DELETE FROM aws.route53resolver.resolver_query_logging_config_associations
WHERE data__Identifier = '<Id>'
AND region = 'us-east-1';

Permissions

To operate on the resolver_query_logging_config_associations resource, the following permissions are required:

Create

resolverquerylogging:AssociateConfig,
resolverquerylogging:GetConfigAssociation,
route53resolver:AssociateResolverQueryLogConfig,
ec2:DescribeVpcs,
route53resolver:GetResolverQueryLogConfigAssociation

Read

resolverquerylogging:GetConfigAssociation,
route53resolver:GetResolverQueryLogConfigAssociation

Delete

resolverquerylogging:DisassociateConfig,
resolverquerylogging:ListConfigAssociation,
route53resolver:DisassociateResolverQueryLogConfig,
route53resolver:ListResolverQueryLogConfigAssociations,
route53resolver:GetResolverQueryLogConfigAssociation

List

resolverquerylogging:ListConfigAssociations,
route53resolver:ListResolverQueryLogConfigAssociations