aws.observabilityadmin.TelemetryRuleForOrganization

AWS v7.34.0, Jun 16 26

Viewing docs for AWS v7.34.0
published on Tuesday, Jun 16, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

Viewing docs for AWS v7.34.0
published on Tuesday, Jun 16, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

An organization-wide telemetry rule defines how telemetry data (logs, metrics, or traces) should be collected for AWS resources across the accounts in your organization. The rule can target one or more Regions and configure a destination (such as CloudWatch Logs or S3) along with source-specific parameters for VPC flow logs, WAF logs, CloudTrail events, ELB access logs, and more.

NOTE: Before using this resource, telemetry evaluation for organization must be enabled. Use the aws.observabilityadmin.TelemetryEvaluationForOrganization resource to enable it.

NOTE: This resource can only be used from the organization management account.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.observabilityadmin.TelemetryEvaluationForOrganization("example", {});
const exampleTelemetryRuleForOrganization = new aws.observabilityadmin.TelemetryRuleForOrganization("example", {
    ruleName: "example-org-telemetry-rule",
    rule: {
        telemetryType: "Logs",
        resourceType: "AWS::EC2::VPC",
    },
}, {
    dependsOn: [example],
});

import pulumi
import pulumi_aws as aws

example = aws.observabilityadmin.TelemetryEvaluationForOrganization("example")
example_telemetry_rule_for_organization = aws.observabilityadmin.TelemetryRuleForOrganization("example",
    rule_name="example-org-telemetry-rule",
    rule={
        "telemetry_type": "Logs",
        "resource_type": "AWS::EC2::VPC",
    },
    opts = pulumi.ResourceOptions(depends_on=[example]))

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := observabilityadmin.NewTelemetryEvaluationForOrganization(ctx, "example", nil)
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewTelemetryRuleForOrganization(ctx, "example", &observabilityadmin.TelemetryRuleForOrganizationArgs{
			RuleName: pulumi.String("example-org-telemetry-rule"),
			Rule: &observabilityadmin.TelemetryRuleForOrganizationRuleArgs{
				TelemetryType: pulumi.String("Logs"),
				ResourceType:  pulumi.String("AWS::EC2::VPC"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Observabilityadmin.TelemetryEvaluationForOrganization("example");

    var exampleTelemetryRuleForOrganization = new Aws.Observabilityadmin.TelemetryRuleForOrganization("example", new()
    {
        RuleName = "example-org-telemetry-rule",
        Rule = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleArgs
        {
            TelemetryType = "Logs",
            ResourceType = "AWS::EC2::VPC",
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.observabilityadmin.TelemetryEvaluationForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganizationArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TelemetryEvaluationForOrganization("example");

        var exampleTelemetryRuleForOrganization = new TelemetryRuleForOrganization("exampleTelemetryRuleForOrganization", TelemetryRuleForOrganizationArgs.builder()
            .ruleName("example-org-telemetry-rule")
            .rule(TelemetryRuleForOrganizationRuleArgs.builder()
                .telemetryType("Logs")
                .resourceType("AWS::EC2::VPC")
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());

    }
}

resources:
  example:
    type: aws:observabilityadmin:TelemetryEvaluationForOrganization
  exampleTelemetryRuleForOrganization:
    type: aws:observabilityadmin:TelemetryRuleForOrganization
    name: example
    properties:
      ruleName: example-org-telemetry-rule
      rule:
        telemetryType: Logs
        resourceType: AWS::EC2::VPC
    options:
      dependsOn:
        - ${example}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_observabilityadmin_telemetryevaluationfororganization" "example" {
}
resource "aws_observabilityadmin_telemetryrulefororganization" "example" {
  depends_on = [aws_observabilityadmin_telemetryevaluationfororganization.example]
  rule_name  = "example-org-telemetry-rule"
  rule = {
    telemetry_type = "Logs"
    resource_type  = "AWS::EC2::VPC"
  }
}

VPC Flow Logs to CloudWatch Logs

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.observabilityadmin.TelemetryEvaluationForOrganization("example", {});
const exampleTelemetryRuleForOrganization = new aws.observabilityadmin.TelemetryRuleForOrganization("example", {
    ruleName: "org-vpc-flow-logs-rule",
    rule: {
        telemetryType: "Logs",
        resourceType: "AWS::EC2::VPC",
        telemetrySourceTypes: ["VPC_FLOW_LOGS"],
        allRegions: true,
        allowFieldUpdates: true,
        destinationConfiguration: {
            destinationType: "cloud-watch-logs",
            destinationPattern: "/aws/vpcflowlogs/<resourceId>",
            retentionInDays: 30,
            vpcFlowLogParameters: {
                trafficType: "ALL",
                maxAggregationInterval: 60,
            },
        },
    },
}, {
    dependsOn: [example],
});

import pulumi
import pulumi_aws as aws

example = aws.observabilityadmin.TelemetryEvaluationForOrganization("example")
example_telemetry_rule_for_organization = aws.observabilityadmin.TelemetryRuleForOrganization("example",
    rule_name="org-vpc-flow-logs-rule",
    rule={
        "telemetry_type": "Logs",
        "resource_type": "AWS::EC2::VPC",
        "telemetry_source_types": ["VPC_FLOW_LOGS"],
        "all_regions": True,
        "allow_field_updates": True,
        "destination_configuration": {
            "destination_type": "cloud-watch-logs",
            "destination_pattern": "/aws/vpcflowlogs/<resourceId>",
            "retention_in_days": 30,
            "vpc_flow_log_parameters": {
                "traffic_type": "ALL",
                "max_aggregation_interval": 60,
            },
        },
    },
    opts = pulumi.ResourceOptions(depends_on=[example]))

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := observabilityadmin.NewTelemetryEvaluationForOrganization(ctx, "example", nil)
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewTelemetryRuleForOrganization(ctx, "example", &observabilityadmin.TelemetryRuleForOrganizationArgs{
			RuleName: pulumi.String("org-vpc-flow-logs-rule"),
			Rule: &observabilityadmin.TelemetryRuleForOrganizationRuleArgs{
				TelemetryType: pulumi.String("Logs"),
				ResourceType:  pulumi.String("AWS::EC2::VPC"),
				TelemetrySourceTypes: pulumi.StringArray{
					pulumi.String("VPC_FLOW_LOGS"),
				},
				AllRegions:        pulumi.Bool(true),
				AllowFieldUpdates: pulumi.Bool(true),
				DestinationConfiguration: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationArgs{
					DestinationType:    pulumi.String("cloud-watch-logs"),
					DestinationPattern: pulumi.String("/aws/vpcflowlogs/<resourceId>"),
					RetentionInDays:    pulumi.Int(30),
					VpcFlowLogParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs{
						TrafficType:            pulumi.String("ALL"),
						MaxAggregationInterval: pulumi.Int(60),
					},
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Observabilityadmin.TelemetryEvaluationForOrganization("example");

    var exampleTelemetryRuleForOrganization = new Aws.Observabilityadmin.TelemetryRuleForOrganization("example", new()
    {
        RuleName = "org-vpc-flow-logs-rule",
        Rule = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleArgs
        {
            TelemetryType = "Logs",
            ResourceType = "AWS::EC2::VPC",
            TelemetrySourceTypes = new[]
            {
                "VPC_FLOW_LOGS",
            },
            AllRegions = true,
            AllowFieldUpdates = true,
            DestinationConfiguration = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationArgs
            {
                DestinationType = "cloud-watch-logs",
                DestinationPattern = "/aws/vpcflowlogs/<resourceId>",
                RetentionInDays = 30,
                VpcFlowLogParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs
                {
                    TrafficType = "ALL",
                    MaxAggregationInterval = 60,
                },
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.observabilityadmin.TelemetryEvaluationForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganizationArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TelemetryEvaluationForOrganization("example");

        var exampleTelemetryRuleForOrganization = new TelemetryRuleForOrganization("exampleTelemetryRuleForOrganization", TelemetryRuleForOrganizationArgs.builder()
            .ruleName("org-vpc-flow-logs-rule")
            .rule(TelemetryRuleForOrganizationRuleArgs.builder()
                .telemetryType("Logs")
                .resourceType("AWS::EC2::VPC")
                .telemetrySourceTypes("VPC_FLOW_LOGS")
                .allRegions(true)
                .allowFieldUpdates(true)
                .destinationConfiguration(TelemetryRuleForOrganizationRuleDestinationConfigurationArgs.builder()
                    .destinationType("cloud-watch-logs")
                    .destinationPattern("/aws/vpcflowlogs/<resourceId>")
                    .retentionInDays(30)
                    .vpcFlowLogParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs.builder()
                        .trafficType("ALL")
                        .maxAggregationInterval(60)
                        .build())
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());

    }
}

resources:
  example:
    type: aws:observabilityadmin:TelemetryEvaluationForOrganization
  exampleTelemetryRuleForOrganization:
    type: aws:observabilityadmin:TelemetryRuleForOrganization
    name: example
    properties:
      ruleName: org-vpc-flow-logs-rule
      rule:
        telemetryType: Logs
        resourceType: AWS::EC2::VPC
        telemetrySourceTypes:
          - VPC_FLOW_LOGS
        allRegions: true
        allowFieldUpdates: true
        destinationConfiguration:
          destinationType: cloud-watch-logs
          destinationPattern: /aws/vpcflowlogs/<resourceId>
          retentionInDays: 30
          vpcFlowLogParameters:
            trafficType: ALL
            maxAggregationInterval: 60
    options:
      dependsOn:
        - ${example}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_observabilityadmin_telemetryevaluationfororganization" "example" {
}
resource "aws_observabilityadmin_telemetryrulefororganization" "example" {
  depends_on = [aws_observabilityadmin_telemetryevaluationfororganization.example]
  rule_name  = "org-vpc-flow-logs-rule"
  rule = {
    telemetry_type         = "Logs"
    resource_type          = "AWS::EC2::VPC"
    telemetry_source_types = ["VPC_FLOW_LOGS"]
    all_regions            = true
    allow_field_updates    = true
    destination_configuration = {
      destination_type    = "cloud-watch-logs"
      destination_pattern = "/aws/vpcflowlogs/<resourceId>"
      retention_in_days   = 30
      vpc_flow_log_parameters = {
        traffic_type             = "ALL"
        max_aggregation_interval = 60
      }
    }
  }
}

Scoped to Specific Organizational Units

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const current = aws.organizations.getOrganization({});
const example = new aws.observabilityadmin.TelemetryEvaluationForOrganization("example", {});
const exampleTelemetryRuleForOrganization = new aws.observabilityadmin.TelemetryRuleForOrganization("example", {
    ruleName: "org-scoped-rule",
    rule: {
        telemetryType: "Logs",
        resourceType: "AWS::EKS::Cluster",
        scope: current.then(current => `OrganizationId = '${current.id}'`),
        selectionCriteria: "ResourceTags.Environment = 'production'",
        regions: [
            "us-east-1",
            "us-west-2",
        ],
    },
}, {
    dependsOn: [example],
});

import pulumi
import pulumi_aws as aws

current = aws.organizations.get_organization()
example = aws.observabilityadmin.TelemetryEvaluationForOrganization("example")
example_telemetry_rule_for_organization = aws.observabilityadmin.TelemetryRuleForOrganization("example",
    rule_name="org-scoped-rule",
    rule={
        "telemetry_type": "Logs",
        "resource_type": "AWS::EKS::Cluster",
        "scope": f"OrganizationId = '{current.id}'",
        "selection_criteria": "ResourceTags.Environment = 'production'",
        "regions": [
            "us-east-1",
            "us-west-2",
        ],
    },
    opts = pulumi.ResourceOptions(depends_on=[example]))

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/organizations"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := organizations.LookupOrganization(ctx, &organizations.LookupOrganizationArgs{}, nil)
		if err != nil {
			return err
		}
		example, err := observabilityadmin.NewTelemetryEvaluationForOrganization(ctx, "example", nil)
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewTelemetryRuleForOrganization(ctx, "example", &observabilityadmin.TelemetryRuleForOrganizationArgs{
			RuleName: pulumi.String("org-scoped-rule"),
			Rule: &observabilityadmin.TelemetryRuleForOrganizationRuleArgs{
				TelemetryType:     pulumi.String("Logs"),
				ResourceType:      pulumi.String("AWS::EKS::Cluster"),
				Scope:             pulumi.Sprintf("OrganizationId = '%v'", current.Id),
				SelectionCriteria: pulumi.String("ResourceTags.Environment = 'production'"),
				Regions: pulumi.StringArray{
					pulumi.String("us-east-1"),
					pulumi.String("us-west-2"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var current = Aws.Organizations.GetOrganization.Invoke();

    var example = new Aws.Observabilityadmin.TelemetryEvaluationForOrganization("example");

    var exampleTelemetryRuleForOrganization = new Aws.Observabilityadmin.TelemetryRuleForOrganization("example", new()
    {
        RuleName = "org-scoped-rule",
        Rule = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleArgs
        {
            TelemetryType = "Logs",
            ResourceType = "AWS::EKS::Cluster",
            Scope = $"OrganizationId = '{current.Apply(getOrganizationResult => getOrganizationResult.Id)}'",
            SelectionCriteria = "ResourceTags.Environment = 'production'",
            Regions = new[]
            {
                "us-east-1",
                "us-west-2",
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.organizations.OrganizationsFunctions;
import com.pulumi.aws.organizations.inputs.GetOrganizationArgs;
import com.pulumi.aws.observabilityadmin.TelemetryEvaluationForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganizationArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var current = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()
            .build());

        var example = new TelemetryEvaluationForOrganization("example");

        var exampleTelemetryRuleForOrganization = new TelemetryRuleForOrganization("exampleTelemetryRuleForOrganization", TelemetryRuleForOrganizationArgs.builder()
            .ruleName("org-scoped-rule")
            .rule(TelemetryRuleForOrganizationRuleArgs.builder()
                .telemetryType("Logs")
                .resourceType("AWS::EKS::Cluster")
                .scope(String.format("OrganizationId = '%s'", current.id()))
                .selectionCriteria("ResourceTags.Environment = 'production'")
                .regions(                
                    "us-east-1",
                    "us-west-2")
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());

    }
}

resources:
  example:
    type: aws:observabilityadmin:TelemetryEvaluationForOrganization
  exampleTelemetryRuleForOrganization:
    type: aws:observabilityadmin:TelemetryRuleForOrganization
    name: example
    properties:
      ruleName: org-scoped-rule
      rule:
        telemetryType: Logs
        resourceType: AWS::EKS::Cluster
        scope: OrganizationId = '${current.id}'
        selectionCriteria: ResourceTags.Environment = 'production'
        regions:
          - us-east-1
          - us-west-2
    options:
      dependsOn:
        - ${example}
variables:
  current:
    fn::invoke:
      function: aws:organizations:getOrganization
      arguments: {}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_organizations_getorganization" "current" {
}

resource "aws_observabilityadmin_telemetryevaluationfororganization" "example" {
}
resource "aws_observabilityadmin_telemetryrulefororganization" "example" {
  depends_on = [aws_observabilityadmin_telemetryevaluationfororganization.example]
  rule_name  = "org-scoped-rule"
  rule = {
    telemetry_type     = "Logs"
    resource_type      = "AWS::EKS::Cluster"
    scope              ="OrganizationId = '${data.aws_organizations_getorganization.current.id}'"
    selection_criteria = "ResourceTags.Environment = 'production'"
    regions            = ["us-east-1", "us-west-2"]
  }
}

With Tags

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.observabilityadmin.TelemetryEvaluationForOrganization("example", {});
const exampleTelemetryRuleForOrganization = new aws.observabilityadmin.TelemetryRuleForOrganization("example", {
    ruleName: "org-tagged-rule",
    rule: {
        telemetryType: "Logs",
        resourceType: "AWS::EC2::VPC",
    },
    tags: {
        Environment: "production",
        Purpose: "organization-monitoring",
    },
}, {
    dependsOn: [example],
});

import pulumi
import pulumi_aws as aws

example = aws.observabilityadmin.TelemetryEvaluationForOrganization("example")
example_telemetry_rule_for_organization = aws.observabilityadmin.TelemetryRuleForOrganization("example",
    rule_name="org-tagged-rule",
    rule={
        "telemetry_type": "Logs",
        "resource_type": "AWS::EC2::VPC",
    },
    tags={
        "Environment": "production",
        "Purpose": "organization-monitoring",
    },
    opts = pulumi.ResourceOptions(depends_on=[example]))

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := observabilityadmin.NewTelemetryEvaluationForOrganization(ctx, "example", nil)
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewTelemetryRuleForOrganization(ctx, "example", &observabilityadmin.TelemetryRuleForOrganizationArgs{
			RuleName: pulumi.String("org-tagged-rule"),
			Rule: &observabilityadmin.TelemetryRuleForOrganizationRuleArgs{
				TelemetryType: pulumi.String("Logs"),
				ResourceType:  pulumi.String("AWS::EC2::VPC"),
			},
			Tags: pulumi.StringMap{
				"Environment": pulumi.String("production"),
				"Purpose":     pulumi.String("organization-monitoring"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			example,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Observabilityadmin.TelemetryEvaluationForOrganization("example");

    var exampleTelemetryRuleForOrganization = new Aws.Observabilityadmin.TelemetryRuleForOrganization("example", new()
    {
        RuleName = "org-tagged-rule",
        Rule = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleArgs
        {
            TelemetryType = "Logs",
            ResourceType = "AWS::EC2::VPC",
        },
        Tags = 
        {
            { "Environment", "production" },
            { "Purpose", "organization-monitoring" },
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            example,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.observabilityadmin.TelemetryEvaluationForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganization;
import com.pulumi.aws.observabilityadmin.TelemetryRuleForOrganizationArgs;
import com.pulumi.aws.observabilityadmin.inputs.TelemetryRuleForOrganizationRuleArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new TelemetryEvaluationForOrganization("example");

        var exampleTelemetryRuleForOrganization = new TelemetryRuleForOrganization("exampleTelemetryRuleForOrganization", TelemetryRuleForOrganizationArgs.builder()
            .ruleName("org-tagged-rule")
            .rule(TelemetryRuleForOrganizationRuleArgs.builder()
                .telemetryType("Logs")
                .resourceType("AWS::EC2::VPC")
                .build())
            .tags(Map.ofEntries(
                Map.entry("Environment", "production"),
                Map.entry("Purpose", "organization-monitoring")
            ))
            .build(), CustomResourceOptions.builder()
                .dependsOn(example)
                .build());

    }
}

resources:
  example:
    type: aws:observabilityadmin:TelemetryEvaluationForOrganization
  exampleTelemetryRuleForOrganization:
    type: aws:observabilityadmin:TelemetryRuleForOrganization
    name: example
    properties:
      ruleName: org-tagged-rule
      rule:
        telemetryType: Logs
        resourceType: AWS::EC2::VPC
      tags:
        Environment: production
        Purpose: organization-monitoring
    options:
      dependsOn:
        - ${example}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_observabilityadmin_telemetryevaluationfororganization" "example" {
}
resource "aws_observabilityadmin_telemetryrulefororganization" "example" {
  depends_on = [aws_observabilityadmin_telemetryevaluationfororganization.example]
  rule_name  = "org-tagged-rule"
  rule = {
    telemetry_type = "Logs"
    resource_type  = "AWS::EC2::VPC"
  }
  tags = {
    "Environment" = "production"
    "Purpose"     = "organization-monitoring"
  }
}

Create TelemetryRuleForOrganization Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new TelemetryRuleForOrganization(name: string, args: TelemetryRuleForOrganizationArgs, opts?: CustomResourceOptions);

@overload
def TelemetryRuleForOrganization(resource_name: str,
                                 args: TelemetryRuleForOrganizationArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def TelemetryRuleForOrganization(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 rule: Optional[TelemetryRuleForOrganizationRuleArgs] = None,
                                 rule_name: Optional[str] = None,
                                 region: Optional[str] = None,
                                 tags: Optional[Mapping[str, str]] = None,
                                 timeouts: Optional[TelemetryRuleForOrganizationTimeoutsArgs] = None)

func NewTelemetryRuleForOrganization(ctx *Context, name string, args TelemetryRuleForOrganizationArgs, opts ...ResourceOption) (*TelemetryRuleForOrganization, error)

public TelemetryRuleForOrganization(string name, TelemetryRuleForOrganizationArgs args, CustomResourceOptions? opts = null)

public TelemetryRuleForOrganization(String name, TelemetryRuleForOrganizationArgs args)
public TelemetryRuleForOrganization(String name, TelemetryRuleForOrganizationArgs args, CustomResourceOptions options)

type: aws:observabilityadmin:TelemetryRuleForOrganization
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "aws_observabilityadmin_telemetryrulefororganization" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args TelemetryRuleForOrganizationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args TelemetryRuleForOrganizationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args TelemetryRuleForOrganizationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args TelemetryRuleForOrganizationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args TelemetryRuleForOrganizationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var telemetryRuleForOrganizationResource = new Aws.Observabilityadmin.TelemetryRuleForOrganization("telemetryRuleForOrganizationResource", new()
{
    Rule = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleArgs
    {
        TelemetryType = "string",
        AllRegions = false,
        AllowFieldUpdates = false,
        DestinationConfiguration = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationArgs
        {
            CloudtrailParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersArgs
            {
                AdvancedEventSelectors = new[]
                {
                    new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArgs
                    {
                        FieldSelectors = new[]
                        {
                            new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArgs
                            {
                                Field = "string",
                                EndsWiths = new[]
                                {
                                    "string",
                                },
                                Equals = new[]
                                {
                                    "string",
                                },
                                NotEndsWiths = new[]
                                {
                                    "string",
                                },
                                NotEquals = new[]
                                {
                                    "string",
                                },
                                NotStartsWiths = new[]
                                {
                                    "string",
                                },
                                StartsWiths = new[]
                                {
                                    "string",
                                },
                            },
                        },
                        Name = "string",
                    },
                },
            },
            DestinationPattern = "string",
            DestinationType = "string",
            ElbLoadBalancerLoggingParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParametersArgs
            {
                FieldDelimiter = "string",
                OutputFormat = "string",
            },
            LogDeliveryParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParametersArgs
            {
                LogTypes = new[]
                {
                    "string",
                },
            },
            MskMonitoringParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParametersArgs
            {
                EnhancedMonitoring = "string",
            },
            RetentionInDays = 0,
            VpcFlowLogParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs
            {
                LogFormat = "string",
                MaxAggregationInterval = 0,
                TrafficType = "string",
            },
            WafLoggingParameters = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersArgs
            {
                LogType = "string",
                LoggingFilter = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterArgs
                {
                    DefaultBehavior = "string",
                    Filters = new[]
                    {
                        new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArgs
                        {
                            Behavior = "string",
                            Conditions = new[]
                            {
                                new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArgs
                                {
                                    ActionCondition = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionConditionArgs
                                    {
                                        Action = "string",
                                    },
                                    LabelNameCondition = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameConditionArgs
                                    {
                                        LabelName = "string",
                                    },
                                },
                            },
                            Requirement = "string",
                        },
                    },
                },
                RedactedFields = new[]
                {
                    new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArgs
                    {
                        Method = "string",
                        QueryString = "string",
                        SingleHeader = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeaderArgs
                        {
                            Name = "string",
                        },
                        UriPath = "string",
                    },
                },
            },
        },
        Regions = new[]
        {
            "string",
        },
        ResourceType = "string",
        Scope = "string",
        SelectionCriteria = "string",
        TelemetrySourceTypes = new[]
        {
            "string",
        },
    },
    RuleName = "string",
    Region = "string",
    Tags = 
    {
        { "string", "string" },
    },
    Timeouts = new Aws.Observabilityadmin.Inputs.TelemetryRuleForOrganizationTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
});

example, err := observabilityadmin.NewTelemetryRuleForOrganization(ctx, "telemetryRuleForOrganizationResource", &observabilityadmin.TelemetryRuleForOrganizationArgs{
	Rule: &observabilityadmin.TelemetryRuleForOrganizationRuleArgs{
		TelemetryType:     pulumi.String("string"),
		AllRegions:        pulumi.Bool(false),
		AllowFieldUpdates: pulumi.Bool(false),
		DestinationConfiguration: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationArgs{
			CloudtrailParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersArgs{
				AdvancedEventSelectors: observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArray{
					&observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArgs{
						FieldSelectors: observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArray{
							&observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArgs{
								Field: pulumi.String("string"),
								EndsWiths: pulumi.StringArray{
									pulumi.String("string"),
								},
								Equals: pulumi.StringArray{
									pulumi.String("string"),
								},
								NotEndsWiths: pulumi.StringArray{
									pulumi.String("string"),
								},
								NotEquals: pulumi.StringArray{
									pulumi.String("string"),
								},
								NotStartsWiths: pulumi.StringArray{
									pulumi.String("string"),
								},
								StartsWiths: pulumi.StringArray{
									pulumi.String("string"),
								},
							},
						},
						Name: pulumi.String("string"),
					},
				},
			},
			DestinationPattern: pulumi.String("string"),
			DestinationType:    pulumi.String("string"),
			ElbLoadBalancerLoggingParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParametersArgs{
				FieldDelimiter: pulumi.String("string"),
				OutputFormat:   pulumi.String("string"),
			},
			LogDeliveryParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParametersArgs{
				LogTypes: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			MskMonitoringParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParametersArgs{
				EnhancedMonitoring: pulumi.String("string"),
			},
			RetentionInDays: pulumi.Int(0),
			VpcFlowLogParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs{
				LogFormat:              pulumi.String("string"),
				MaxAggregationInterval: pulumi.Int(0),
				TrafficType:            pulumi.String("string"),
			},
			WafLoggingParameters: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersArgs{
				LogType: pulumi.String("string"),
				LoggingFilter: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterArgs{
					DefaultBehavior: pulumi.String("string"),
					Filters: observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArray{
						&observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArgs{
							Behavior: pulumi.String("string"),
							Conditions: observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArray{
								&observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArgs{
									ActionCondition: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionConditionArgs{
										Action: pulumi.String("string"),
									},
									LabelNameCondition: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameConditionArgs{
										LabelName: pulumi.String("string"),
									},
								},
							},
							Requirement: pulumi.String("string"),
						},
					},
				},
				RedactedFields: observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArray{
					&observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArgs{
						Method:      pulumi.String("string"),
						QueryString: pulumi.String("string"),
						SingleHeader: &observabilityadmin.TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeaderArgs{
							Name: pulumi.String("string"),
						},
						UriPath: pulumi.String("string"),
					},
				},
			},
		},
		Regions: pulumi.StringArray{
			pulumi.String("string"),
		},
		ResourceType:      pulumi.String("string"),
		Scope:             pulumi.String("string"),
		SelectionCriteria: pulumi.String("string"),
		TelemetrySourceTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	RuleName: pulumi.String("string"),
	Region:   pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Timeouts: &observabilityadmin.TelemetryRuleForOrganizationTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

resource "aws_observabilityadmin_telemetryrulefororganization" "telemetryRuleForOrganizationResource" {
  rule = {
    telemetry_type      = "string"
    all_regions         = false
    allow_field_updates = false
    destination_configuration = {
      cloudtrail_parameters = {
        advanced_event_selectors = [{
          "fieldSelectors" = [{
            "field"          = "string"
            "endsWiths"      = ["string"]
            "equals"         = ["string"]
            "notEndsWiths"   = ["string"]
            "notEquals"      = ["string"]
            "notStartsWiths" = ["string"]
            "startsWiths"    = ["string"]
          }]
          "name" = "string"
        }]
      }
      destination_pattern = "string"
      destination_type    = "string"
      elb_load_balancer_logging_parameters = {
        field_delimiter = "string"
        output_format   = "string"
      }
      log_delivery_parameters = {
        log_types = ["string"]
      }
      msk_monitoring_parameters = {
        enhanced_monitoring = "string"
      }
      retention_in_days = 0
      vpc_flow_log_parameters = {
        log_format               = "string"
        max_aggregation_interval = 0
        traffic_type             = "string"
      }
      waf_logging_parameters = {
        log_type = "string"
        logging_filter = {
          default_behavior = "string"
          filters = [{
            "behavior" = "string"
            "conditions" = [{
              "actionCondition" = {
                "action" = "string"
              }
              "labelNameCondition" = {
                "labelName" = "string"
              }
            }]
            "requirement" = "string"
          }]
        }
        redacted_fields = [{
          "method"      = "string"
          "queryString" = "string"
          "singleHeader" = {
            "name" = "string"
          }
          "uriPath" = "string"
        }]
      }
    }
    regions                = ["string"]
    resource_type          = "string"
    scope                  = "string"
    selection_criteria     = "string"
    telemetry_source_types = ["string"]
  }
  rule_name = "string"
  region    = "string"
  tags = {
    "string" = "string"
  }
  timeouts = {
    create = "string"
    delete = "string"
    update = "string"
  }
}

var telemetryRuleForOrganizationResource = new TelemetryRuleForOrganization("telemetryRuleForOrganizationResource", TelemetryRuleForOrganizationArgs.builder()
    .rule(TelemetryRuleForOrganizationRuleArgs.builder()
        .telemetryType("string")
        .allRegions(false)
        .allowFieldUpdates(false)
        .destinationConfiguration(TelemetryRuleForOrganizationRuleDestinationConfigurationArgs.builder()
            .cloudtrailParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersArgs.builder()
                .advancedEventSelectors(TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArgs.builder()
                    .fieldSelectors(TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArgs.builder()
                        .field("string")
                        .endsWiths("string")
                        .equals("string")
                        .notEndsWiths("string")
                        .notEquals("string")
                        .notStartsWiths("string")
                        .startsWiths("string")
                        .build())
                    .name("string")
                    .build())
                .build())
            .destinationPattern("string")
            .destinationType("string")
            .elbLoadBalancerLoggingParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParametersArgs.builder()
                .fieldDelimiter("string")
                .outputFormat("string")
                .build())
            .logDeliveryParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParametersArgs.builder()
                .logTypes("string")
                .build())
            .mskMonitoringParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParametersArgs.builder()
                .enhancedMonitoring("string")
                .build())
            .retentionInDays(0)
            .vpcFlowLogParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs.builder()
                .logFormat("string")
                .maxAggregationInterval(0)
                .trafficType("string")
                .build())
            .wafLoggingParameters(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersArgs.builder()
                .logType("string")
                .loggingFilter(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterArgs.builder()
                    .defaultBehavior("string")
                    .filters(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArgs.builder()
                        .behavior("string")
                        .conditions(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArgs.builder()
                            .actionCondition(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionConditionArgs.builder()
                                .action("string")
                                .build())
                            .labelNameCondition(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameConditionArgs.builder()
                                .labelName("string")
                                .build())
                            .build())
                        .requirement("string")
                        .build())
                    .build())
                .redactedFields(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArgs.builder()
                    .method("string")
                    .queryString("string")
                    .singleHeader(TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeaderArgs.builder()
                        .name("string")
                        .build())
                    .uriPath("string")
                    .build())
                .build())
            .build())
        .regions("string")
        .resourceType("string")
        .scope("string")
        .selectionCriteria("string")
        .telemetrySourceTypes("string")
        .build())
    .ruleName("string")
    .region("string")
    .tags(Map.of("string", "string"))
    .timeouts(TelemetryRuleForOrganizationTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .build());

telemetry_rule_for_organization_resource = aws.observabilityadmin.TelemetryRuleForOrganization("telemetryRuleForOrganizationResource",
    rule={
        "telemetry_type": "string",
        "all_regions": False,
        "allow_field_updates": False,
        "destination_configuration": {
            "cloudtrail_parameters": {
                "advanced_event_selectors": [{
                    "field_selectors": [{
                        "field": "string",
                        "ends_withs": ["string"],
                        "equals": ["string"],
                        "not_ends_withs": ["string"],
                        "not_equals": ["string"],
                        "not_starts_withs": ["string"],
                        "starts_withs": ["string"],
                    }],
                    "name": "string",
                }],
            },
            "destination_pattern": "string",
            "destination_type": "string",
            "elb_load_balancer_logging_parameters": {
                "field_delimiter": "string",
                "output_format": "string",
            },
            "log_delivery_parameters": {
                "log_types": ["string"],
            },
            "msk_monitoring_parameters": {
                "enhanced_monitoring": "string",
            },
            "retention_in_days": 0,
            "vpc_flow_log_parameters": {
                "log_format": "string",
                "max_aggregation_interval": 0,
                "traffic_type": "string",
            },
            "waf_logging_parameters": {
                "log_type": "string",
                "logging_filter": {
                    "default_behavior": "string",
                    "filters": [{
                        "behavior": "string",
                        "conditions": [{
                            "action_condition": {
                                "action": "string",
                            },
                            "label_name_condition": {
                                "label_name": "string",
                            },
                        }],
                        "requirement": "string",
                    }],
                },
                "redacted_fields": [{
                    "method": "string",
                    "query_string": "string",
                    "single_header": {
                        "name": "string",
                    },
                    "uri_path": "string",
                }],
            },
        },
        "regions": ["string"],
        "resource_type": "string",
        "scope": "string",
        "selection_criteria": "string",
        "telemetry_source_types": ["string"],
    },
    rule_name="string",
    region="string",
    tags={
        "string": "string",
    },
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    })

const telemetryRuleForOrganizationResource = new aws.observabilityadmin.TelemetryRuleForOrganization("telemetryRuleForOrganizationResource", {
    rule: {
        telemetryType: "string",
        allRegions: false,
        allowFieldUpdates: false,
        destinationConfiguration: {
            cloudtrailParameters: {
                advancedEventSelectors: [{
                    fieldSelectors: [{
                        field: "string",
                        endsWiths: ["string"],
                        equals: ["string"],
                        notEndsWiths: ["string"],
                        notEquals: ["string"],
                        notStartsWiths: ["string"],
                        startsWiths: ["string"],
                    }],
                    name: "string",
                }],
            },
            destinationPattern: "string",
            destinationType: "string",
            elbLoadBalancerLoggingParameters: {
                fieldDelimiter: "string",
                outputFormat: "string",
            },
            logDeliveryParameters: {
                logTypes: ["string"],
            },
            mskMonitoringParameters: {
                enhancedMonitoring: "string",
            },
            retentionInDays: 0,
            vpcFlowLogParameters: {
                logFormat: "string",
                maxAggregationInterval: 0,
                trafficType: "string",
            },
            wafLoggingParameters: {
                logType: "string",
                loggingFilter: {
                    defaultBehavior: "string",
                    filters: [{
                        behavior: "string",
                        conditions: [{
                            actionCondition: {
                                action: "string",
                            },
                            labelNameCondition: {
                                labelName: "string",
                            },
                        }],
                        requirement: "string",
                    }],
                },
                redactedFields: [{
                    method: "string",
                    queryString: "string",
                    singleHeader: {
                        name: "string",
                    },
                    uriPath: "string",
                }],
            },
        },
        regions: ["string"],
        resourceType: "string",
        scope: "string",
        selectionCriteria: "string",
        telemetrySourceTypes: ["string"],
    },
    ruleName: "string",
    region: "string",
    tags: {
        string: "string",
    },
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
});

type: aws:observabilityadmin:TelemetryRuleForOrganization
properties:
    region: string
    rule:
        allRegions: false
        allowFieldUpdates: false
        destinationConfiguration:
            cloudtrailParameters:
                advancedEventSelectors:
                    - fieldSelectors:
                        - endsWiths:
                            - string
                          equals:
                            - string
                          field: string
                          notEndsWiths:
                            - string
                          notEquals:
                            - string
                          notStartsWiths:
                            - string
                          startsWiths:
                            - string
                      name: string
            destinationPattern: string
            destinationType: string
            elbLoadBalancerLoggingParameters:
                fieldDelimiter: string
                outputFormat: string
            logDeliveryParameters:
                logTypes:
                    - string
            mskMonitoringParameters:
                enhancedMonitoring: string
            retentionInDays: 0
            vpcFlowLogParameters:
                logFormat: string
                maxAggregationInterval: 0
                trafficType: string
            wafLoggingParameters:
                logType: string
                loggingFilter:
                    defaultBehavior: string
                    filters:
                        - behavior: string
                          conditions:
                            - actionCondition:
                                action: string
                              labelNameCondition:
                                labelName: string
                          requirement: string
                redactedFields:
                    - method: string
                      queryString: string
                      singleHeader:
                        name: string
                      uriPath: string
        regions:
            - string
        resourceType: string
        scope: string
        selectionCriteria: string
        telemetrySourceTypes:
            - string
        telemetryType: string
    ruleName: string
    tags:
        string: string
    timeouts:
        create: string
        delete: string
        update: string

TelemetryRuleForOrganization Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The TelemetryRuleForOrganization resource accepts the following input properties:

Rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

RuleName string

Name of the organization telemetry rule. Must be between 1 and 100 characters and contain only alphanumeric characters, hyphens, underscores, periods, hash symbols, and forward slashes. Changing this argument forces a new resource to be created.

The following arguments are optional:

Region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

Tags Dictionary<string, string>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Timeouts TelemetryRuleForOrganizationTimeouts

Rule TelemetryRuleForOrganizationRuleArgs

Configuration block for the organization telemetry rule. See rule below.

RuleName string

The following arguments are optional:

Region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

Tags map[string]string

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Timeouts TelemetryRuleForOrganizationTimeoutsArgs

rule object

Configuration block for the organization telemetry rule. See rule below.

rule_name string

The following arguments are optional:

region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

tags map(string)

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

timeouts object

rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

ruleName String

The following arguments are optional:

region String

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

tags Map<String,String>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

timeouts TelemetryRuleForOrganizationTimeouts

rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

ruleName string

The following arguments are optional:

region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

tags {[key: string]: string}

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

timeouts TelemetryRuleForOrganizationTimeouts

rule TelemetryRuleForOrganizationRuleArgs

Configuration block for the organization telemetry rule. See rule below.

rule_name str

The following arguments are optional:

region str

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

tags Mapping[str, str]

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

timeouts TelemetryRuleForOrganizationTimeoutsArgs

rule Property Map

Configuration block for the organization telemetry rule. See rule below.

ruleName String

The following arguments are optional:

region String

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

tags Map<String>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

timeouts Property Map

Outputs

All input properties are implicitly available as output properties. Additionally, the TelemetryRuleForOrganization resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
RuleArn string: ARN of the organization telemetry rule.
TagsAll Dictionary<string, string>: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

Id string: The provider-assigned unique ID for this managed resource.
RuleArn string: ARN of the organization telemetry rule.
TagsAll map[string]string: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

id string: The provider-assigned unique ID for this managed resource.
rule_arn string: ARN of the organization telemetry rule.
tags_all map(string): Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

id String: The provider-assigned unique ID for this managed resource.
ruleArn String: ARN of the organization telemetry rule.
tagsAll Map<String,String>: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

id string: The provider-assigned unique ID for this managed resource.
ruleArn string: ARN of the organization telemetry rule.
tagsAll {[key: string]: string}: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

id str: The provider-assigned unique ID for this managed resource.
rule_arn str: ARN of the organization telemetry rule.
tags_all Mapping[str, str]: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

id String: The provider-assigned unique ID for this managed resource.
ruleArn String: ARN of the organization telemetry rule.
tagsAll Map<String>: Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

Look up Existing TelemetryRuleForOrganization Resource

Get an existing TelemetryRuleForOrganization resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: TelemetryRuleForOrganizationState, opts?: CustomResourceOptions): TelemetryRuleForOrganization

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        region: Optional[str] = None,
        rule: Optional[TelemetryRuleForOrganizationRuleArgs] = None,
        rule_arn: Optional[str] = None,
        rule_name: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        timeouts: Optional[TelemetryRuleForOrganizationTimeoutsArgs] = None) -> TelemetryRuleForOrganization

func GetTelemetryRuleForOrganization(ctx *Context, name string, id IDInput, state *TelemetryRuleForOrganizationState, opts ...ResourceOption) (*TelemetryRuleForOrganization, error)

public static TelemetryRuleForOrganization Get(string name, Input<string> id, TelemetryRuleForOrganizationState? state, CustomResourceOptions? opts = null)

public static TelemetryRuleForOrganization get(String name, Output<String> id, TelemetryRuleForOrganizationState state, CustomResourceOptions options)

resources:  _:    type: aws:observabilityadmin:TelemetryRuleForOrganization    get:      id: ${id}

import {
  to = aws_observabilityadmin_telemetryrulefororganization.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

Rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

RuleArn string

ARN of the organization telemetry rule.

RuleName string

The following arguments are optional:

Tags Dictionary<string, string>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

TagsAll Dictionary<string, string>

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

Timeouts TelemetryRuleForOrganizationTimeouts

Region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

Rule TelemetryRuleForOrganizationRuleArgs

Configuration block for the organization telemetry rule. See rule below.

RuleArn string

ARN of the organization telemetry rule.

RuleName string

The following arguments are optional:

Tags map[string]string

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

TagsAll map[string]string

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

Timeouts TelemetryRuleForOrganizationTimeoutsArgs

region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

rule object

Configuration block for the organization telemetry rule. See rule below.

rule_arn string

ARN of the organization telemetry rule.

rule_name string

The following arguments are optional:

tags map(string)

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tags_all map(string)

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

timeouts object

region String

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

ruleArn String

ARN of the organization telemetry rule.

ruleName String

The following arguments are optional:

tags Map<String,String>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tagsAll Map<String,String>

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

timeouts TelemetryRuleForOrganizationTimeouts

region string

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

rule TelemetryRuleForOrganizationRule

Configuration block for the organization telemetry rule. See rule below.

ruleArn string

ARN of the organization telemetry rule.

ruleName string

The following arguments are optional:

tags {[key: string]: string}

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tagsAll {[key: string]: string}

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

timeouts TelemetryRuleForOrganizationTimeouts

region str

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

rule TelemetryRuleForOrganizationRuleArgs

Configuration block for the organization telemetry rule. See rule below.

rule_arn str

ARN of the organization telemetry rule.

rule_name str

The following arguments are optional:

tags Mapping[str, str]

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tags_all Mapping[str, str]

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

timeouts TelemetryRuleForOrganizationTimeoutsArgs

region String

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

rule Property Map

Configuration block for the organization telemetry rule. See rule below.

ruleArn String

ARN of the organization telemetry rule.

ruleName String

The following arguments are optional:

tags Map<String>

Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

tagsAll Map<String>

Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

timeouts Property Map

Supporting Types

TelemetryRuleForOrganizationRule, TelemetryRuleForOrganizationRuleArgs

TelemetryType string: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
AllRegions bool: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
AllowFieldUpdates bool: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
DestinationConfiguration TelemetryRuleForOrganizationRuleDestinationConfiguration: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
Regions List<string>: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
ResourceType string: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
Scope string: Organizational scope to which the rule applies, specified using accounts or organizational units.
SelectionCriteria string: Criteria for selecting which resources the rule applies to, such as resource tags.
TelemetrySourceTypes List<string>: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

TelemetryType string: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
AllRegions bool: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
AllowFieldUpdates bool: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
DestinationConfiguration TelemetryRuleForOrganizationRuleDestinationConfiguration: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
Regions []string: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
ResourceType string: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
Scope string: Organizational scope to which the rule applies, specified using accounts or organizational units.
SelectionCriteria string: Criteria for selecting which resources the rule applies to, such as resource tags.
TelemetrySourceTypes []string: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

telemetry_type string: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
all_regions bool: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
allow_field_updates bool: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
destination_configuration object: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
regions list(string): Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
resource_type string: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
scope string: Organizational scope to which the rule applies, specified using accounts or organizational units.
selection_criteria string: Criteria for selecting which resources the rule applies to, such as resource tags.
telemetry_source_types list(string): List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

telemetryType String: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
allRegions Boolean: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
allowFieldUpdates Boolean: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
destinationConfiguration TelemetryRuleForOrganizationRuleDestinationConfiguration: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
regions List<String>: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
resourceType String: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
scope String: Organizational scope to which the rule applies, specified using accounts or organizational units.
selectionCriteria String: Criteria for selecting which resources the rule applies to, such as resource tags.
telemetrySourceTypes List<String>: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

telemetryType string: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
allRegions boolean: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
allowFieldUpdates boolean: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
destinationConfiguration TelemetryRuleForOrganizationRuleDestinationConfiguration: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
regions string[]: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
resourceType string: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
scope string: Organizational scope to which the rule applies, specified using accounts or organizational units.
selectionCriteria string: Criteria for selecting which resources the rule applies to, such as resource tags.
telemetrySourceTypes string[]: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

telemetry_type str: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
all_regions bool: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
allow_field_updates bool: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
destination_configuration TelemetryRuleForOrganizationRuleDestinationConfiguration: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
regions Sequence[str]: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
resource_type str: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
scope str: Organizational scope to which the rule applies, specified using accounts or organizational units.
selection_criteria str: Criteria for selecting which resources the rule applies to, such as resource tags.
telemetry_source_types Sequence[str]: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

telemetryType String: Type of telemetry data to collect. Valid values: Logs, Metrics, Traces.
allRegions Boolean: Whether to replicate the rule to every Region in the partition where CloudWatch Observability Admin is available. Mutually exclusive with regions.
allowFieldUpdates Boolean: Whether CloudWatch Observability Admin should detect and remediate configuration drift in managed telemetry resources. Currently supported for AWS::EC2::VPC resources (VPC flow logs).
destinationConfiguration Property Map: Configuration block specifying where and how the telemetry data is delivered. See destinationConfiguration below.
regions List<String>: Set of Regions to replicate the rule to. Mutually exclusive with allRegions. Order is not preserved.
resourceType String: AWS resource type to apply the rule to (for example AWS::EC2::VPC, AWS::EKS::Cluster, AWS::WAFv2::WebACL).
scope String: Organizational scope to which the rule applies, specified using accounts or organizational units.
selectionCriteria String: Criteria for selecting which resources the rule applies to, such as resource tags.
telemetrySourceTypes List<String>: List of telemetry source types to configure for the resource (for example VPC_FLOW_LOGS, EKS_AUDIT_LOGS). Must correlate with the chosen resourceType. If not provided, the API may default this value based on resourceType (for example VPC_FLOW_LOGS for AWS::EC2::VPC).

TelemetryRuleForOrganizationRuleDestinationConfiguration, TelemetryRuleForOrganizationRuleDestinationConfigurationArgs

CloudtrailParameters TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
DestinationPattern string: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
DestinationType string: Destination type for the telemetry data (for example cloud-watch-logs).
ElbLoadBalancerLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
LogDeliveryParameters TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
MskMonitoringParameters TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
RetentionInDays int: Number of days to retain the telemetry data in the destination.
VpcFlowLogParameters TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
WafLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

CloudtrailParameters TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
DestinationPattern string: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
DestinationType string: Destination type for the telemetry data (for example cloud-watch-logs).
ElbLoadBalancerLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
LogDeliveryParameters TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
MskMonitoringParameters TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
RetentionInDays int: Number of days to retain the telemetry data in the destination.
VpcFlowLogParameters TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
WafLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

cloudtrail_parameters object: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
destination_pattern string: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
destination_type string: Destination type for the telemetry data (for example cloud-watch-logs).
elb_load_balancer_logging_parameters object: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
log_delivery_parameters object: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
msk_monitoring_parameters object: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
retention_in_days number: Number of days to retain the telemetry data in the destination.
vpc_flow_log_parameters object: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
waf_logging_parameters object: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

cloudtrailParameters TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
destinationPattern String: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
destinationType String: Destination type for the telemetry data (for example cloud-watch-logs).
elbLoadBalancerLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
logDeliveryParameters TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
mskMonitoringParameters TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
retentionInDays Integer: Number of days to retain the telemetry data in the destination.
vpcFlowLogParameters TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
wafLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

cloudtrailParameters TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
destinationPattern string: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
destinationType string: Destination type for the telemetry data (for example cloud-watch-logs).
elbLoadBalancerLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
logDeliveryParameters TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
mskMonitoringParameters TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
retentionInDays number: Number of days to retain the telemetry data in the destination.
vpcFlowLogParameters TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
wafLoggingParameters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

cloudtrail_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
destination_pattern str: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
destination_type str: Destination type for the telemetry data (for example cloud-watch-logs).
elb_load_balancer_logging_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
log_delivery_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
msk_monitoring_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
retention_in_days int: Number of days to retain the telemetry data in the destination.
vpc_flow_log_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
waf_logging_parameters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

cloudtrailParameters Property Map: CloudTrail-specific parameters when CloudTrail is the source. See cloudtrailParameters below.
destinationPattern String: Pattern used to generate the destination path or name. May contain alphanumeric characters, the macros <accountId> and <resourceId>, and the symbols _, /, -.
destinationType String: Destination type for the telemetry data (for example cloud-watch-logs).
elbLoadBalancerLoggingParameters Property Map: ELB load balancer logging parameters when the resource is an ELB. See elbLoadBalancerLoggingParameters below.
logDeliveryParameters Property Map: Amazon Bedrock AgentCore log delivery parameters. See logDeliveryParameters below.
mskMonitoringParameters Property Map: Amazon MSK cluster monitoring parameters. See mskMonitoringParameters below.
retentionInDays Number: Number of days to retain the telemetry data in the destination.
vpcFlowLogParameters Property Map: VPC Flow Logs-specific parameters when the resource is AWS::EC2::VPC. See vpcFlowLogParameters below.
wafLoggingParameters Property Map: WAF logging parameters when the resource is AWS::WAFv2::WebACL. See wafLoggingParameters below.

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersArgs

AdvancedEventSelectors List<TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector>: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

AdvancedEventSelectors []TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

advanced_event_selectors list(object): List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

advancedEventSelectors List<TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector>: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

advancedEventSelectors TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector[]: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

advanced_event_selectors Sequence[TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector]: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

advancedEventSelectors List<Property Map>: List of advanced event selectors used to filter CloudTrail events. See advancedEventSelectors below.

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArgs

FieldSelectors List<TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector>: List of field selectors that compose the selector statement. See fieldSelectors below.
Name string: Descriptive name for the advanced event selector.

FieldSelectors []TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector: List of field selectors that compose the selector statement. See fieldSelectors below.
Name string: Descriptive name for the advanced event selector.

field_selectors list(object): List of field selectors that compose the selector statement. See fieldSelectors below.
name string: Descriptive name for the advanced event selector.

fieldSelectors List<TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector>: List of field selectors that compose the selector statement. See fieldSelectors below.
name String: Descriptive name for the advanced event selector.

fieldSelectors TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector[]: List of field selectors that compose the selector statement. See fieldSelectors below.
name string: Descriptive name for the advanced event selector.

field_selectors Sequence[TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector]: List of field selectors that compose the selector statement. See fieldSelectors below.
name str: Descriptive name for the advanced event selector.

fieldSelectors List<Property Map>: List of field selectors that compose the selector statement. See fieldSelectors below.
name String: Descriptive name for the advanced event selector.

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArgs

Field string: Name of the field to use for selection.
EndsWiths List<string>: Match if the field value ends with one of the specified values.
Equals List<string>: Match if the field value equals one of the specified values.
NotEndsWiths List<string>: Match if the field value does not end with one of the specified values.
NotEquals List<string>: Match if the field value does not equal any of the specified values.
NotStartsWiths List<string>: Match if the field value does not start with any of the specified values.
StartsWiths List<string>: Match if the field value starts with one of the specified values.

Field string: Name of the field to use for selection.
EndsWiths []string: Match if the field value ends with one of the specified values.
Equals []string: Match if the field value equals one of the specified values.
NotEndsWiths []string: Match if the field value does not end with one of the specified values.
NotEquals []string: Match if the field value does not equal any of the specified values.
NotStartsWiths []string: Match if the field value does not start with any of the specified values.
StartsWiths []string: Match if the field value starts with one of the specified values.

field string: Name of the field to use for selection.
ends_withs list(string): Match if the field value ends with one of the specified values.
equals list(string): Match if the field value equals one of the specified values.
not_ends_withs list(string): Match if the field value does not end with one of the specified values.
not_equals list(string): Match if the field value does not equal any of the specified values.
not_starts_withs list(string): Match if the field value does not start with any of the specified values.
starts_withs list(string): Match if the field value starts with one of the specified values.

field String: Name of the field to use for selection.
endsWiths List<String>: Match if the field value ends with one of the specified values.
equals_ List<String>: Match if the field value equals one of the specified values.
notEndsWiths List<String>: Match if the field value does not end with one of the specified values.
notEquals List<String>: Match if the field value does not equal any of the specified values.
notStartsWiths List<String>: Match if the field value does not start with any of the specified values.
startsWiths List<String>: Match if the field value starts with one of the specified values.

field string: Name of the field to use for selection.
endsWiths string[]: Match if the field value ends with one of the specified values.
equals string[]: Match if the field value equals one of the specified values.
notEndsWiths string[]: Match if the field value does not end with one of the specified values.
notEquals string[]: Match if the field value does not equal any of the specified values.
notStartsWiths string[]: Match if the field value does not start with any of the specified values.
startsWiths string[]: Match if the field value starts with one of the specified values.

field str: Name of the field to use for selection.
ends_withs Sequence[str]: Match if the field value ends with one of the specified values.
equals Sequence[str]: Match if the field value equals one of the specified values.
not_ends_withs Sequence[str]: Match if the field value does not end with one of the specified values.
not_equals Sequence[str]: Match if the field value does not equal any of the specified values.
not_starts_withs Sequence[str]: Match if the field value does not start with any of the specified values.
starts_withs Sequence[str]: Match if the field value starts with one of the specified values.

field String: Name of the field to use for selection.
endsWiths List<String>: Match if the field value ends with one of the specified values.
equals List<String>: Match if the field value equals one of the specified values.
notEndsWiths List<String>: Match if the field value does not end with one of the specified values.
notEquals List<String>: Match if the field value does not equal any of the specified values.
notStartsWiths List<String>: Match if the field value does not start with any of the specified values.
startsWiths List<String>: Match if the field value starts with one of the specified values.

TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParametersArgs

FieldDelimiter string: Delimiter character used to separate fields in ELB access log entries when using plain text format.
OutputFormat string: Format for ELB access log entries. Valid values: plain-text, json.

FieldDelimiter string: Delimiter character used to separate fields in ELB access log entries when using plain text format.
OutputFormat string: Format for ELB access log entries. Valid values: plain-text, json.

field_delimiter string: Delimiter character used to separate fields in ELB access log entries when using plain text format.
output_format string: Format for ELB access log entries. Valid values: plain-text, json.

fieldDelimiter String: Delimiter character used to separate fields in ELB access log entries when using plain text format.
outputFormat String: Format for ELB access log entries. Valid values: plain-text, json.

fieldDelimiter string: Delimiter character used to separate fields in ELB access log entries when using plain text format.
outputFormat string: Format for ELB access log entries. Valid values: plain-text, json.

field_delimiter str: Delimiter character used to separate fields in ELB access log entries when using plain text format.
output_format str: Format for ELB access log entries. Valid values: plain-text, json.

fieldDelimiter String: Delimiter character used to separate fields in ELB access log entries when using plain text format.
outputFormat String: Format for ELB access log entries. Valid values: plain-text, json.

TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParametersArgs

LogTypes List<string>: List of log types that the source is sending.

LogTypes []string: List of log types that the source is sending.

log_types list(string): List of log types that the source is sending.

logTypes List<String>: List of log types that the source is sending.

logTypes string[]: List of log types that the source is sending.

log_types Sequence[str]: List of log types that the source is sending.

logTypes List<String>: List of log types that the source is sending.

TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParametersArgs

EnhancedMonitoring string: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

EnhancedMonitoring string: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

enhanced_monitoring string: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

enhancedMonitoring String: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

enhancedMonitoring string: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

enhanced_monitoring str: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

enhancedMonitoring String: Level of enhanced monitoring for the MSK cluster. Valid values: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION.

TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs

LogFormat string: Format string for VPC Flow Log entries.
MaxAggregationInterval int: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
TrafficType string: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

LogFormat string: Format string for VPC Flow Log entries.
MaxAggregationInterval int: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
TrafficType string: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

log_format string: Format string for VPC Flow Log entries.
max_aggregation_interval number: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
traffic_type string: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

logFormat String: Format string for VPC Flow Log entries.
maxAggregationInterval Integer: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
trafficType String: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

logFormat string: Format string for VPC Flow Log entries.
maxAggregationInterval number: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
trafficType string: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

log_format str: Format string for VPC Flow Log entries.
max_aggregation_interval int: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
traffic_type str: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

logFormat String: Format string for VPC Flow Log entries.
maxAggregationInterval Number: Maximum interval (in seconds) between the capture of flow log records. Valid values: 60, 600.
trafficType String: Type of traffic to log. Valid values: ACCEPT, REJECT, ALL.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersArgs

LogType string: Type of WAF logs to collect (currently WAF_LOGS).
LoggingFilter TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
RedactedFields List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField>: List of fields to redact from WAF logs. See redactedFields below.

LogType string: Type of WAF logs to collect (currently WAF_LOGS).
LoggingFilter TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
RedactedFields []TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField: List of fields to redact from WAF logs. See redactedFields below.

log_type string: Type of WAF logs to collect (currently WAF_LOGS).
logging_filter object: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
redacted_fields list(object): List of fields to redact from WAF logs. See redactedFields below.

logType String: Type of WAF logs to collect (currently WAF_LOGS).
loggingFilter TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
redactedFields List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField>: List of fields to redact from WAF logs. See redactedFields below.

logType string: Type of WAF logs to collect (currently WAF_LOGS).
loggingFilter TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
redactedFields TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField[]: List of fields to redact from WAF logs. See redactedFields below.

log_type str: Type of WAF logs to collect (currently WAF_LOGS).
logging_filter TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
redacted_fields Sequence[TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField]: List of fields to redact from WAF logs. See redactedFields below.

logType String: Type of WAF logs to collect (currently WAF_LOGS).
loggingFilter Property Map: Filter configuration that determines which WAF log records to include or exclude. See loggingFilter below.
redactedFields List<Property Map>: List of fields to redact from WAF logs. See redactedFields below.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterArgs

DefaultBehavior string: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
Filters List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter>: List of filter configurations. See filters below.

DefaultBehavior string: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
Filters []TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter: List of filter configurations. See filters below.

default_behavior string: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
filters list(object): List of filter configurations. See filters below.

defaultBehavior String: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
filters List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter>: List of filter configurations. See filters below.

defaultBehavior string: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
filters TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter[]: List of filter configurations. See filters below.

default_behavior str: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
filters Sequence[TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter]: List of filter configurations. See filters below.

defaultBehavior String: Default action for log records that do not match any filter. Valid values: KEEP, DROP.
filters List<Property Map>: List of filter configurations. See filters below.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArgs

Behavior string: Action to take for matching log records. Valid values: KEEP, DROP.
Conditions List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition>: Conditions that determine if a log record matches this filter. See conditions below.
Requirement string: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

Behavior string: Action to take for matching log records. Valid values: KEEP, DROP.
Conditions []TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition: Conditions that determine if a log record matches this filter. See conditions below.
Requirement string: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

behavior string: Action to take for matching log records. Valid values: KEEP, DROP.
conditions list(object): Conditions that determine if a log record matches this filter. See conditions below.
requirement string: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

behavior String: Action to take for matching log records. Valid values: KEEP, DROP.
conditions List<TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition>: Conditions that determine if a log record matches this filter. See conditions below.
requirement String: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

behavior string: Action to take for matching log records. Valid values: KEEP, DROP.
conditions TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition[]: Conditions that determine if a log record matches this filter. See conditions below.
requirement string: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

behavior str: Action to take for matching log records. Valid values: KEEP, DROP.
conditions Sequence[TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition]: Conditions that determine if a log record matches this filter. See conditions below.
requirement str: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

behavior String: Action to take for matching log records. Valid values: KEEP, DROP.
conditions List<Property Map>: Conditions that determine if a log record matches this filter. See conditions below.
requirement String: Whether the log record must meet all conditions or any condition. Valid values: MEETS_ALL, MEETS_ANY.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArgs

ActionCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition: Condition that matches based on the WAF action. See actionCondition below.
LabelNameCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition: Condition that matches based on WAF rule labels. See labelNameCondition below.

ActionCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition: Condition that matches based on the WAF action. See actionCondition below.
LabelNameCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition: Condition that matches based on WAF rule labels. See labelNameCondition below.

action_condition object: Condition that matches based on the WAF action. See actionCondition below.
label_name_condition object: Condition that matches based on WAF rule labels. See labelNameCondition below.

actionCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition: Condition that matches based on the WAF action. See actionCondition below.
labelNameCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition: Condition that matches based on WAF rule labels. See labelNameCondition below.

actionCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition: Condition that matches based on the WAF action. See actionCondition below.
labelNameCondition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition: Condition that matches based on WAF rule labels. See labelNameCondition below.

action_condition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition: Condition that matches based on the WAF action. See actionCondition below.
label_name_condition TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition: Condition that matches based on WAF rule labels. See labelNameCondition below.

actionCondition Property Map: Condition that matches based on the WAF action. See actionCondition below.
labelNameCondition Property Map: Condition that matches based on WAF rule labels. See labelNameCondition below.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionConditionArgs

Action string: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

Action string: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

action string: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

action String: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

action string: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

action str: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

action String: WAF action to match against. Valid values: ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameConditionArgs

LabelName string: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

LabelName string: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

label_name string: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

labelName String: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

labelName string: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

label_name str: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

labelName String: Label name to match (alphanumeric, underscores, hyphens, and colons; up to 1024 characters).

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArgs

Method string: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
QueryString string: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
SingleHeader TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader: Redact a specific header by name from WAF logs. See singleHeader below.
UriPath string: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

Method string: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
QueryString string: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
SingleHeader TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader: Redact a specific header by name from WAF logs. See singleHeader below.
UriPath string: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

method string: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
query_string string: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
single_header object: Redact a specific header by name from WAF logs. See singleHeader below.
uri_path string: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

method String: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
queryString String: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
singleHeader TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader: Redact a specific header by name from WAF logs. See singleHeader below.
uriPath String: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

method string: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
queryString string: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
singleHeader TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader: Redact a specific header by name from WAF logs. See singleHeader below.
uriPath string: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

method str: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
query_string str: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
single_header TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader: Redact a specific header by name from WAF logs. See singleHeader below.
uri_path str: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

method String: Redact the HTTP method from WAF logs. Set to an empty string to enable redaction.
queryString String: Redact the entire query string from WAF logs. Set to an empty string to enable redaction.
singleHeader Property Map: Redact a specific header by name from WAF logs. See singleHeader below.
uriPath String: Redact the URI path from WAF logs. Set to an empty string to enable redaction.

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeaderArgs

Name string: Header name to redact (up to 64 characters).

Name string: Header name to redact (up to 64 characters).

name string: Header name to redact (up to 64 characters).

name String: Header name to redact (up to 64 characters).

name string: Header name to redact (up to 64 characters).

name str: Header name to redact (up to 64 characters).

name String: Header name to redact (up to 64 characters).

TelemetryRuleForOrganizationTimeouts, TelemetryRuleForOrganizationTimeoutsArgs

Create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
Update string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

Create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
Update string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
update string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

create String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
update String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
update string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

create str: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete str: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
update str: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

create String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
update String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

Import

Identity Schema

Required

ruleName (String) Name of the telemetry rule.

Optional

accountId (String) AWS Account where this resource is managed.
region (String) Region where this resource is managed.

Using pulumi import, import CloudWatch Observability Admin Telemetry Rules for Organization using ruleName. For example:

$ pulumi import aws:observabilityadmin/telemetryRuleForOrganization:TelemetryRuleForOrganization example example-org-telemetry-rule

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: AWS Classic pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.

Viewing docs for AWS v7.34.0
published on Tuesday, Jun 16, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

aws.observabilityadmin.TelemetryRuleForOrganization

On this page

On this page

Example Usage

Basic Usage

VPC Flow Logs to CloudWatch Logs

Scoped to Specific Organizational Units

With Tags

Create TelemetryRuleForOrganization Resource

Constructor syntax

Parameters

Constructor example

TelemetryRuleForOrganization Resource Properties

Inputs

Outputs

Look up Existing TelemetryRuleForOrganization Resource

Supporting Types

TelemetryRuleForOrganizationRule, TelemetryRuleForOrganizationRuleArgs

TelemetryRuleForOrganizationRuleDestinationConfiguration, TelemetryRuleForOrganizationRuleDestinationConfigurationArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelector, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelector, TelemetryRuleForOrganizationRuleDestinationConfigurationCloudtrailParametersAdvancedEventSelectorFieldSelectorArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationElbLoadBalancerLoggingParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationLogDeliveryParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationMskMonitoringParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationVpcFlowLogParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParameters, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilter, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilter, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionActionConditionArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameCondition, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersLoggingFilterFilterConditionLabelNameConditionArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedField, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldArgs

TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeader, TelemetryRuleForOrganizationRuleDestinationConfigurationWafLoggingParametersRedactedFieldSingleHeaderArgs

TelemetryRuleForOrganizationTimeouts, TelemetryRuleForOrganizationTimeoutsArgs

Import

Identity Schema

Required

Optional

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.