AWS Logs Log Group

This table represents the AWS Logs Log Group resource from Amazon Web Services.

aws.logs_log_group

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
arncorestringThe Amazon Resource Name (ARN) of the log group. This version of the ARN includes a trailing <code>:*</code> after the log group name. Use this version to refer to the ARN in IAM policies when specifying permissions for most API actions. The exception is when specifying permissions for <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_TagResource.html">TagResource</a>, <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UntagResource.html">UntagResource</a>, and <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html">ListTagsForResource</a>. The permissions for those three actions require the ARN version that doesn't include a trailing <code>:*</code>.
creation_timecoreint64The creation time of the log group, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.
data_protection_statuscorestringDisplays whether this log group has a protection policy, or whether it had one in the past. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDataProtectionPolicy.html">PutDataProtectionPolicy</a>.
inherited_propertiescorearray<string>Displays all the properties that this log group has inherited from account-level settings.
kms_key_idcorestringThe Amazon Resource Name (ARN) of the KMS key to use when encrypting log data.
log_group_arncorestringThe Amazon Resource Name (ARN) of the log group. This version of the ARN doesn't include a trailing <code>:*</code> after the log group name. Use this version to refer to the ARN in the following situations: <ul> <li> In the <code>logGroupIdentifier</code> input field in many CloudWatch Logs APIs. </li> <li> In the <code>resourceArn</code> field in tagging APIs </li> <li> In IAM policies, when specifying permissions for <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_TagResource.html">TagResource</a>, <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UntagResource.html">UntagResource</a>, and <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html">ListTagsForResource</a>. </li> </ul>
log_group_classcorestringThis specifies the log group class for this log group. There are three classes: <ul> <li> The <code>Standard</code> log class supports all CloudWatch Logs features. </li> <li> The <code>Infrequent Access</code> log class supports a subset of CloudWatch Logs features and incurs lower costs. </li> <li> Use the <code>Delivery</code> log class only for delivering Lambda logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't offer rich CloudWatch Logs capabilities such as CloudWatch Logs Insights queries. </li> </ul> For details about the features supported by the Standard and Infrequent Access classes, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html">Log classes</a>
log_group_namecorestringThe name of the log group.
metric_filter_countcoreint64The number of metric filters.
retention_in_dayscoreint64
stored_bytescoreint64The number of bytes stored.
subscription_filterscorejsonThe subscription filters.
tagscorehstore_csv