AWS::Cognito::LogDeliveryConfiguration CloudWatchLogsConfiguration - AWS CloudFormation
SyntaxProperties

AWS::Cognito::LogDeliveryConfiguration CloudWatchLogsConfiguration

The CloudWatch logging destination of a user pool detailed activity logging configuration.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "LogGroupArn" : String
}

YAML

  LogGroupArn: String

Properties

LogGroupArn

The Amazon Resource Name (arn) of a CloudWatch Logs log group where your user pool sends logs. The log group must not be encrypted with AWS Key Management Service and must be in the same AWS account as your user pool.

To send logs to log groups with a resource policy of a size greater than 5120 characters, configure a log group with a path that starts with /aws/vendedlogs. For more information, see Enabling logging from certain AWS services.

Required: No

Type: String

Pattern: arn:[\w+=/,.@-]+:[\w+=/,.@-]+:([\w+=/,.@-]*)?:[0-9]+:[\w+=/,.@-]+(:[\w+=/,.@-]+)?(:[\w+=/,.@-]+)?

Minimum: 20

Maximum: 2048

Update requires: No interruption