Resource: awsCloudwatchEventTarget

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleConsole =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "console", {
    description: "Capture all EC2 scaling events",
    eventPattern:
      '${jsonencode({\n    source = [\n      "aws.autoscaling"\n    ]\n\n    detail-type = [\n      "EC2 Instance Launch Successful",\n      "EC2 Instance Terminate Successful",\n      "EC2 Instance Launch Unsuccessful",\n      "EC2 Instance Terminate Unsuccessful"\n    ]\n  })}',
    name: "capture-ec2-scaling-events",
  });
const awsKinesisStreamTestStream = new aws.kinesisStream.KinesisStream(
  this,
  "test_stream",
  {
    name: "terraform-kinesis-test",
    shardCount: 1,
  }
);
new aws.cloudwatchEventTarget.CloudwatchEventTarget(this, "yada", {
  arn: awsKinesisStreamTestStream.arn,
  rule: awsCloudwatchEventRuleConsole.name,
  runCommandTargets: [
    {
      key: "tag:Name",
      values: ["FooBar"],
    },
    {
      key: "InstanceIds",
      values: ["i-162058cd308bffec2"],
    },
  ],
  targetId: "Yada",
});

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleStopInstances =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "stop_instances", {
    description: "Stop instances nightly",
    name: "StopInstance",
    scheduleExpression: "cron(0 0 * * ? *)",
  });
const awsSsmDocumentStopInstance = new aws.ssmDocument.SsmDocument(
  this,
  "stop_instance",
  {
    content:
      '${jsonencode({\n    schemaVersion = "1.2"\n    description   = "Stop an instance"\n    parameters    = {}\n    runtimeConfig = {\n      "aws:runShellScript" = {\n        properties = [\n          {\n            id         = "0.aws:runShellScript"\n            runCommand = ["halt"]\n          }\n        ]\n      }\n    }\n  })}',
    documentType: "Command",
    name: "stop_instance",
  }
);
const dataAwsIamPolicyDocumentSsmLifecycle =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "ssm_lifecycle",
    {
      statement: [
        {
          actions: ["ssm:SendCommand"],
          condition: [
            {
              test: "StringEquals",
              values: ["*"],
              variable: "ec2:ResourceTag/Terminate",
            },
          ],
          effect: "Allow",
          resources: ["arn:aws:ec2:eu-west-1:1234567890:instance/*"],
        },
        {
          actions: ["ssm:SendCommand"],
          effect: "Allow",
          resources: [awsSsmDocumentStopInstance.arn],
        },
      ],
    }
  );
const dataAwsIamPolicyDocumentSsmLifecycleTrust =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "ssm_lifecycle_trust",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          principals: [
            {
              identifiers: ["events.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const awsIamPolicySsmLifecycle = new aws.iamPolicy.IamPolicy(
  this,
  "ssm_lifecycle_4",
  {
    name: "SSMLifecycle",
    policy: dataAwsIamPolicyDocumentSsmLifecycle.json,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamPolicySsmLifecycle.overrideLogicalId("ssm_lifecycle");
const awsIamRoleSsmLifecycle = new aws.iamRole.IamRole(
  this,
  "ssm_lifecycle_5",
  {
    assumeRolePolicy: dataAwsIamPolicyDocumentSsmLifecycleTrust.json,
    name: "SSMLifecycle",
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRoleSsmLifecycle.overrideLogicalId("ssm_lifecycle");
const awsIamRolePolicyAttachmentSsmLifecycle =
  new aws.iamRolePolicyAttachment.IamRolePolicyAttachment(
    this,
    "ssm_lifecycle_6",
    {
      policyArn: awsIamPolicySsmLifecycle.arn,
      role: awsIamRoleSsmLifecycle.name,
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyAttachmentSsmLifecycle.overrideLogicalId("ssm_lifecycle");
const awsCloudwatchEventTargetStopInstances =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(
    this,
    "stop_instances_7",
    {
      arn: awsSsmDocumentStopInstance.arn,
      roleArn: awsIamRoleSsmLifecycle.arn,
      rule: awsCloudwatchEventRuleStopInstances.name,
      runCommandTargets: [
        {
          key: "tag:Terminate",
          values: ["midnight"],
        },
      ],
      targetId: "StopInstance",
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetStopInstances.overrideLogicalId("stop_instances");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleStopInstances =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "stop_instances", {
    description: "Stop instances nightly",
    name: "StopInstance",
    scheduleExpression: "cron(0 0 * * ? *)",
  });
const awsCloudwatchEventTargetStopInstances =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(
    this,
    "stop_instances_1",
    {
      arn: "arn:aws:ssm:${var.aws_region}::document/AWS-RunShellScript",
      input: '{"commands":["halt"]}',
      roleArn: "${aws_iam_role.ssm_lifecycle.arn}",
      rule: awsCloudwatchEventRuleStopInstances.name,
      runCommandTargets: [
        {
          key: "tag:Terminate",
          values: ["midnight"],
        },
      ],
      targetId: "StopInstance",
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetStopInstances.overrideLogicalId("stop_instances");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const dataAwsIamPolicyDocumentAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["events.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const dataAwsIamPolicyDocumentEcsEventsRunTaskWithAnyRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "ecs_events_run_task_with_any_role",
    {
      statement: [
        {
          actions: ["iam:PassRole"],
          effect: "Allow",
          resources: ["*"],
        },
        {
          actions: ["ecs:RunTask"],
          effect: "Allow",
          resources: [
            '${replace(aws_ecs_task_definition.task_name.arn, "/:\\\\d+$/", ":*")}',
          ],
        },
      ],
    }
  );
const awsIamRoleEcsEvents = new aws.iamRole.IamRole(this, "ecs_events", {
  assumeRolePolicy: dataAwsIamPolicyDocumentAssumeRole.json,
  name: "ecs_events",
});
const awsIamRolePolicyEcsEventsRunTaskWithAnyRole =
  new aws.iamRolePolicy.IamRolePolicy(
    this,
    "ecs_events_run_task_with_any_role_3",
    {
      name: "ecs_events_run_task_with_any_role",
      policy: dataAwsIamPolicyDocumentEcsEventsRunTaskWithAnyRole.json,
      role: awsIamRoleEcsEvents.id,
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyEcsEventsRunTaskWithAnyRole.overrideLogicalId(
  "ecs_events_run_task_with_any_role"
);
new aws.cloudwatchEventTarget.CloudwatchEventTarget(
  this,
  "ecs_scheduled_task",
  {
    arn: "${aws_ecs_cluster.cluster_name.arn}",
    ecsTarget: {
      taskCount: 1,
      taskDefinitionArn: "${aws_ecs_task_definition.task_name.arn}",
    },
    input:
      '${jsonencode({\n    containerOverrides = [\n      {\n        name = "name-of-container-to-override",\n        command = [\n          "bin/console",\n          "scheduled-task"\n        ]\n      }\n    ]\n  })}',
    roleArn: awsIamRoleEcsEvents.arn,
    rule: "${aws_cloudwatch_event_rule.every_hour.name}",
    targetId: "run-scheduled-task-every-hour",
  }
);

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsApiGatewayDeploymentExample =
  new aws.apiGatewayDeployment.ApiGatewayDeployment(this, "example", {
    restApiId: "${aws_api_gateway_rest_api.example.id}",
  });
const awsApiGatewayStageExample = new aws.apiGatewayStage.ApiGatewayStage(
  this,
  "example_1",
  {
    deploymentId: awsApiGatewayDeploymentExample.id,
    restApiId: "${aws_api_gateway_rest_api.example.id}",
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsApiGatewayStageExample.overrideLogicalId("example");
const awsCloudwatchEventRuleExample =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "example_2", {});
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventRuleExample.overrideLogicalId("example");
const awsCloudwatchEventTargetExample =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(this, "example_3", {
    arn: `\${${awsApiGatewayStageExample.executionArn}}/GET`,
    httpTarget: {
      headerParameters: {
        env: "Test",
      },
      queryStringParameters: {
        body: "$.detail.body",
      },
    },
    rule: awsCloudwatchEventRuleExample.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetExample.overrideLogicalId("example");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleStopInstances =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "stop_instances", {
    description: "Stop instances nightly",
    name: "StopInstance",
    scheduleExpression: "cron(0 0 * * ? *)",
  });
const dataAwsIamPolicyDocumentAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["events.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const dataAwsIamPolicyDocumentEventBusInvokeRemoteEventBus =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "event_bus_invoke_remote_event_bus",
    {
      statement: [
        {
          actions: ["events:PutEvents"],
          effect: "Allow",
          resources: [
            "arn:aws:events:eu-west-1:1234567890:event-bus/My-Event-Bus",
          ],
        },
      ],
    }
  );
const awsIamPolicyEventBusInvokeRemoteEventBus = new aws.iamPolicy.IamPolicy(
  this,
  "event_bus_invoke_remote_event_bus_3",
  {
    name: "event_bus_invoke_remote_event_bus",
    policy: dataAwsIamPolicyDocumentEventBusInvokeRemoteEventBus.json,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamPolicyEventBusInvokeRemoteEventBus.overrideLogicalId(
  "event_bus_invoke_remote_event_bus"
);
const awsIamRoleEventBusInvokeRemoteEventBus = new aws.iamRole.IamRole(
  this,
  "event_bus_invoke_remote_event_bus_4",
  {
    assumeRolePolicy: dataAwsIamPolicyDocumentAssumeRole.json,
    name: "event-bus-invoke-remote-event-bus",
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRoleEventBusInvokeRemoteEventBus.overrideLogicalId(
  "event_bus_invoke_remote_event_bus"
);
const awsIamRolePolicyAttachmentEventBusInvokeRemoteEventBus =
  new aws.iamRolePolicyAttachment.IamRolePolicyAttachment(
    this,
    "event_bus_invoke_remote_event_bus_5",
    {
      policyArn: awsIamPolicyEventBusInvokeRemoteEventBus.arn,
      role: awsIamRoleEventBusInvokeRemoteEventBus.name,
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyAttachmentEventBusInvokeRemoteEventBus.overrideLogicalId(
  "event_bus_invoke_remote_event_bus"
);
const awsCloudwatchEventTargetStopInstances =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(
    this,
    "stop_instances_6",
    {
      arn: "arn:aws:events:eu-west-1:1234567890:event-bus/My-Event-Bus",
      roleArn: awsIamRoleEventBusInvokeRemoteEventBus.arn,
      rule: awsCloudwatchEventRuleStopInstances.name,
      targetId: "StopInstance",
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetStopInstances.overrideLogicalId("stop_instances");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleExample =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "example", {});
const awsCloudwatchEventTargetExample =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(this, "example_1", {
    arn: "${aws_lambda_function.example.arn}",
    inputTransformer: {
      inputPaths: {
        instance: "$.detail.instance",
        status: "$.detail.status",
      },
      inputTemplate:
        '{\n  "instance_id": <instance>,\n  "instance_status": <status>\n}\n',
    },
    rule: awsCloudwatchEventRuleExample.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetExample.overrideLogicalId("example");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleExample =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "example", {});
const awsCloudwatchEventTargetExample =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(this, "example_1", {
    arn: "${aws_lambda_function.example.arn}",
    inputTransformer: {
      inputPaths: {
        instance: "$.detail.instance",
        status: "$.detail.status",
      },
      inputTemplate: '"<instance> is in state <status>"',
    },
    rule: awsCloudwatchEventRuleExample.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetExample.overrideLogicalId("example");

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsCloudwatchEventRuleExample =
  new aws.cloudwatchEventRule.CloudwatchEventRule(this, "example", {
    description: "GuardDuty Findings",
    eventPattern:
      '${jsonencode(\n    {\n      "source" : [\n        "aws.guardduty"\n      ]\n    }\n  )}',
    name: "guard-duty_event_rule",
    tags: {
      Environment: "example",
    },
  });
const awsCloudwatchLogGroupExample =
  new aws.cloudwatchLogGroup.CloudwatchLogGroup(this, "example_1", {
    name: "/aws/events/guardduty/logs",
    retentionInDays: 1,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchLogGroupExample.overrideLogicalId("example");
const dataAwsIamPolicyDocumentExampleLogPolicy =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "example_log_policy",
    {
      statement: [
        {
          actions: ["logs:CreateLogStream"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["events.amazonaws.com"],
              type: "Service",
            },
          ],
          resources: [`\${${awsCloudwatchLogGroupExample.arn}}:*`],
        },
        {
          actions: ["logs:PutLogEvents"],
          condition: [
            {
              test: "ArnEquals",
              values: [awsCloudwatchEventRuleExample.arn],
              variable: "aws:SourceArn",
            },
          ],
          effect: "Allow",
          principals: [
            {
              identifiers: ["events.amazonaws.com"],
              type: "Service",
            },
          ],
          resources: [`\${${awsCloudwatchLogGroupExample.arn}}:*:*`],
        },
      ],
    }
  );
const awsCloudwatchEventTargetExample =
  new aws.cloudwatchEventTarget.CloudwatchEventTarget(this, "example_3", {
    arn: awsCloudwatchLogGroupExample.arn,
    rule: awsCloudwatchEventRuleExample.name,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchEventTargetExample.overrideLogicalId("example");
const awsCloudwatchLogResourcePolicyExample =
  new aws.cloudwatchLogResourcePolicy.CloudwatchLogResourcePolicy(
    this,
    "example_4",
    {
      policyDocument: dataAwsIamPolicyDocumentExampleLogPolicy.json,
      policyName: "guardduty-log-publishing-policy",
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsCloudwatchLogResourcePolicyExample.overrideLogicalId("example");

$ terraform import aws_cloudwatch_event_target.test-event-target rule-name/target-id