lambda-function-system-log-level-check - AWS Config
AWS CloudFormation template

lambda-function-system-log-level-check

Checks if AWS Lambda functions with JSON structured logs are configured with a specified system log level. The rule is NON_COMPLIANT if configuration.loggingConfig.systemLogLevel is not a value specified in the required rule parameter.

Identifier: LAMBDA_FUNCTION_SYSTEM_LOG_LEVEL_CHECK

Resource Types: AWS::Lambda::Function

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Asia Pacific (New Zealand), China (Beijing), AWS GovCloud (US-East), AWS GovCloud (US-West), China (Ningxia) Region

Parameters:

logLevel
Type: String

The minimum system log level for the rule to check. The rule is NON_COMPLIANT if configuration.loggingConfig.systemLogLevel is configured with a value not specified in this parameter. Valid values include: 'DEBUG', 'INFO', and 'WARN'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.