resolver_query_logging_config_associations

Creates, updates, deletes or gets a resolver_query_logging_config_association resource or lists resolver_query_logging_config_associations in a region

Overview

Name	resolver_query_logging_config_associations
Type	Resource
Description	Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation.
Id	awscc.route53resolver.resolver_query_logging_config_associations

Fields

get (all properties)

Name	Datatype	Description
id	string	Id
resolver_query_log_config_id	string	ResolverQueryLogConfigId
resource_id	string	ResourceId
status	string	ResolverQueryLogConfigAssociationStatus
error	string	ResolverQueryLogConfigAssociationError
error_message	string	ResolverQueryLogConfigAssociationErrorMessage
creation_time	string	Rfc3339TimeString
region	string	AWS region.

list (identifiers only)

Name	Datatype	Description
id	string	Id
region	string	AWS region.

For more information, see AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation.

Methods

Name	Resource	Accessible by	Required Params
create_resource	resolver_query_logging_config_associations	INSERT	region
delete_resource	resolver_query_logging_config_associations	DELETE	Identifier, region
list_resources	resolver_query_logging_config_associations_list_only	SELECT	region
get_resource	resolver_query_logging_config_associations	SELECT	Identifier, region

SELECT examples

get (all properties)

Gets all properties from an individual resolver_query_logging_config_association.

SELECT
  region,
  id,
  resolver_query_log_config_id,
  resource_id,
  status,
  error,
  error_message,
  creation_time
FROM awscc.route53resolver.resolver_query_logging_config_associations
WHERE
  region = 'us-east-1' AND
  Identifier = '{{ id }}';

list (identifiers only)

Lists all resolver_query_logging_config_associations in a region.

SELECT
  region,
  id
FROM awscc.route53resolver.resolver_query_logging_config_associations_list_only
WHERE
  region = 'us-east-1';

INSERT example

Use the following StackQL query and manifest file to create a new resolver_query_logging_config_association resource, using stack-deploy.

Required Properties

/*+ create */
INSERT INTO awscc.route53resolver.resolver_query_logging_config_associations (
  ResolverQueryLogConfigId,
  ResourceId,
  region
)
SELECT
  '{{ resolver_query_log_config_id }}',
  '{{ resource_id }}',
  '{{ region }}';

All Properties

/*+ create */
INSERT INTO awscc.route53resolver.resolver_query_logging_config_associations (
  ResolverQueryLogConfigId,
  ResourceId,
  region
)
SELECT
  '{{ resolver_query_log_config_id }}',
  '{{ resource_id }}',
  '{{ region }}';

Manifest

version: 1
name: stack name
description: stack description
providers:
  - aws
globals:
  - name: region
    value: '{{ vars.AWS_REGION }}'
resources:
  - name: resolver_query_logging_config_association
    props:
      - name: resolver_query_log_config_id
        value: '{{ resolver_query_log_config_id }}'
      - name: resource_id
        value: '{{ resource_id }}'

DELETE example

/*+ delete */
DELETE FROM awscc.route53resolver.resolver_query_logging_config_associations
WHERE
  Identifier = '{{ id }}' AND
  region = 'us-east-1';

Permissions

To operate on the resolver_query_logging_config_associations resource, the following permissions are required:

Create

resolverquerylogging:AssociateConfig,
resolverquerylogging:GetConfigAssociation,
route53resolver:AssociateResolverQueryLogConfig,
ec2:DescribeVpcs,
route53resolver:GetResolverQueryLogConfigAssociation

Read

resolverquerylogging:GetConfigAssociation,
route53resolver:GetResolverQueryLogConfigAssociation

Delete

resolverquerylogging:DisassociateConfig,
resolverquerylogging:ListConfigAssociation,
route53resolver:DisassociateResolverQueryLogConfig,
route53resolver:ListResolverQueryLogConfigAssociations,
route53resolver:GetResolverQueryLogConfigAssociation

List

resolverquerylogging:ListConfigAssociations,
route53resolver:ListResolverQueryLogConfigAssociations