AWS::NetworkFirewall::LoggingConfigurationUse the logging configuration to define the destinations and logging options for an firewall. You must change the logging configuration by changing one `LogDestinationConfig` setting at a time in your `LogDestinationConfigs` . You can make only one of the following changes to your logging configuration resource: - Create a new log destination object by adding a single `LogDestinationConfig` array element to `LogDestinationConfigs` . - Delete a log destination object by removing a single `LogDestinationConfig` array element from `LogDestinationConfigs` . - Change the `LogDestination` setting in a single `LogDestinationConfig` array element. You can't change the `LogDestinationType` or `LogType` in a `LogDestinationConfig` . To change these settings, delete the existing `LogDestinationConfig` object and create a new one, in two separate modifications.
import { CfnLoggingConfiguration } from 'aws-cdk-lib/aws-networkfirewall';Or use the module namespace:
import * as networkfirewall from 'aws-cdk-lib/aws-networkfirewall';
// networkfirewall.CfnLoggingConfigurationConfiguration passed to the constructor as CfnLoggingConfigurationProps.
firewallArnRequiredstring | IFirewallRefThe Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
loggingConfigurationRequiredIResolvable | LoggingConfigurationPropertyDefines how AWS Network Firewall performs logging for a firewall.
enableMonitoringDashboardOptionalboolean | IResolvablefirewallNameOptionalstringThe name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.
This L1 construct maps directly to the following CloudFormation resource type.
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletteraws-networkfirewallAWS::NetworkFirewall::LoggingConfiguration