azurermSentinelDataConnectorAwsS3
Manages a AWS S3 Data Connector.
Example Usage
/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as azurerm from "./.gen/providers/azurerm";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: azurerm.
For a more precise conversion please use the --provider flag in convert.*/
const azurermResourceGroupExample = new azurerm.resourceGroup.ResourceGroup(
this,
"example",
{
location: "West Europe",
name: "example-rg",
}
);
const azurermLogAnalyticsWorkspaceExample =
new azurerm.logAnalyticsWorkspace.LogAnalyticsWorkspace(this, "example_1", {
location: azurermResourceGroupExample.location,
name: "example-workspace",
resource_group_name: azurermResourceGroupExample.name,
sku: "PerGB2018",
});
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
azurermLogAnalyticsWorkspaceExample.overrideLogicalId("example");
const azurermSentinelLogAnalyticsWorkspaceOnboardingExample =
new azurerm.sentinelLogAnalyticsWorkspaceOnboarding.SentinelLogAnalyticsWorkspaceOnboarding(
this,
"example_2",
{
workspace_id: azurermLogAnalyticsWorkspaceExample.id,
}
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
azurermSentinelLogAnalyticsWorkspaceOnboardingExample.overrideLogicalId(
"example"
);
const azurermSentinelDataConnectorAwsS3Example =
new azurerm.sentinelDataConnectorAwsS3.SentinelDataConnectorAwsS3(
this,
"example_3",
{
aws_role_arn: "arn:aws:iam::000000000000:role/role1",
destination_table: "AWSGuardDuty",
log_analytics_workspace_id:
azurermSentinelLogAnalyticsWorkspaceOnboardingExample.workspaceId,
name: "example",
sqs_urls: ["https://sqs.us-east-1.amazonaws.com/000000000000/example"],
}
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
azurermSentinelDataConnectorAwsS3Example.overrideLogicalId("example");
Arguments Reference
The following arguments are supported:
-
name
- (Required) The name which should be used for this AWS S3 Data Connector. Changing this forces a new AWS S3 Data Connector to be created. -
logAnalyticsWorkspaceId
- (Required) The ID of the Log Analytics Workspace that this AWS S3 Data Connector resides in. Changing this forces a new AWS S3 Data Connector to be created. -
awsRoleArn
- (Required) The ARN of the AWS role, which is connected to this AWS CloudTrail Data Connector. See the Azure document for details. -
destinationTable
- (Required) The name of the Log Analytics table that will store the ingested data. -
sqsUrls
- (Required) Specifies a list of AWS SQS urls for the AWS S3 Data Connector.
Attributes Reference
In addition to the Arguments listed above - the following Attributes are exported:
id
- The ID of the AWS S3 Data Connector.
Timeouts
The timeouts
block allows you to specify timeouts for certain actions:
create
- (Defaults to 30 minutes) Used when creating the AWS S3 Data Connector.read
- (Defaults to 5 minutes) Used when retrieving the AWS S3 Data Connector.update
- (Defaults to 30 minutes) Used when updating the AWS S3 Data Connector.delete
- (Defaults to 30 minutes) Used when deleting the AWS S3 Data Connector.
Import
AWS S3 Data Connectors can be imported using the resourceId
, e.g.