Resource: awsCloudwatchMetricStream

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsS3BucketBucket = new aws.s3Bucket.S3Bucket(this, "bucket", {
  bucket: "metric-stream-test-bucket",
});
new aws.s3BucketAcl.S3BucketAcl(this, "bucket_acl", {
  acl: "private",
  bucket: awsS3BucketBucket.id,
});
const dataAwsIamPolicyDocumentFirehoseAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "firehose_assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["firehose.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const dataAwsIamPolicyDocumentFirehoseToS3 =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "firehose_to_s3",
    {
      statement: [
        {
          actions: [
            "s3:AbortMultipartUpload",
            "s3:GetBucketLocation",
            "s3:GetObject",
            "s3:ListBucket",
            "s3:ListBucketMultipartUploads",
            "s3:PutObject",
          ],
          effect: "Allow",
          resources: [awsS3BucketBucket.arn, `\${${awsS3BucketBucket.arn}}/*`],
        },
      ],
    }
  );
const dataAwsIamPolicyDocumentStreamsAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "streams_assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["streams.metrics.cloudwatch.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
const awsIamRoleFirehoseToS3 = new aws.iamRole.IamRole(
  this,
  "firehose_to_s3_5",
  {
    assumeRolePolicy: dataAwsIamPolicyDocumentFirehoseAssumeRole.json,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRoleFirehoseToS3.overrideLogicalId("firehose_to_s3");
const awsIamRoleMetricStreamToFirehose = new aws.iamRole.IamRole(
  this,
  "metric_stream_to_firehose",
  {
    assumeRolePolicy: dataAwsIamPolicyDocumentStreamsAssumeRole.json,
    name: "metric_stream_to_firehose_role",
  }
);
const awsIamRolePolicyFirehoseToS3 = new aws.iamRolePolicy.IamRolePolicy(
  this,
  "firehose_to_s3_7",
  {
    name: "default",
    policy: dataAwsIamPolicyDocumentFirehoseToS3.json,
    role: awsIamRoleFirehoseToS3.id,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyFirehoseToS3.overrideLogicalId("firehose_to_s3");
const awsKinesisFirehoseDeliveryStreamS3Stream =
  new aws.kinesisFirehoseDeliveryStream.KinesisFirehoseDeliveryStream(
    this,
    "s3_stream",
    {
      destination: "s3",
      name: "metric-stream-test-stream",
      s3Configuration: {
        bucketArn: awsS3BucketBucket.arn,
        roleArn: awsIamRoleFirehoseToS3.arn,
      },
    }
  );
const dataAwsIamPolicyDocumentMetricStreamToFirehose =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "metric_stream_to_firehose_9",
    {
      statement: [
        {
          actions: ["firehose:PutRecord", "firehose:PutRecordBatch"],
          effect: "Allow",
          resources: [awsKinesisFirehoseDeliveryStreamS3Stream.arn],
        },
      ],
    }
  );
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
dataAwsIamPolicyDocumentMetricStreamToFirehose.overrideLogicalId(
  "metric_stream_to_firehose"
);
new aws.cloudwatchMetricStream.CloudwatchMetricStream(this, "main", {
  firehoseArn: awsKinesisFirehoseDeliveryStreamS3Stream.arn,
  includeFilter: [
    {
      namespace: "AWS/EC2",
    },
    {
      namespace: "AWS/EBS",
    },
  ],
  name: "my-metric-stream",
  outputFormat: "json",
  roleArn: awsIamRoleMetricStreamToFirehose.arn,
});
const awsIamRolePolicyMetricStreamToFirehose =
  new aws.iamRolePolicy.IamRolePolicy(this, "metric_stream_to_firehose_11", {
    name: "default",
    policy: dataAwsIamPolicyDocumentMetricStreamToFirehose.json,
    role: awsIamRoleMetricStreamToFirehose.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyMetricStreamToFirehose.overrideLogicalId(
  "metric_stream_to_firehose"
);

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
new aws.cloudwatchMetricStream.CloudwatchMetricStream(this, "main", {
  firehoseArn: "${aws_kinesis_firehose_delivery_stream.s3_stream.arn}",
  name: "my-metric-stream",
  outputFormat: "json",
  roleArn: "${aws_iam_role.metric_stream_to_firehose.arn}",
  statisticsConfiguration: [
    {
      additionalStatistics: ["p1", "tm99"],
      includeMetric: [
        {
          metricName: "CPUUtilization",
          namespace: "AWS/EC2",
        },
      ],
    },
    {
      additionalStatistics: ["TS(50.5:)"],
      includeMetric: [
        {
          metricName: "CPUUtilization",
          namespace: "AWS/EC2",
        },
      ],
    },
  ],
});

$ terraform import aws_cloudwatch_metric_stream.sample sample-stream-name