AWS Directory Service Log Subscription

This page shows how to write Terraform for AWS Directory Service Log Subscription and write them securely.

aws_directory_service_log_subscription (Terraform)

The Log Subscription in AWS Directory Service can be configured in Terraform with the resource name aws_directory_service_log_subscription. The following sections describe 5 examples of how to use the resource and its parameters.

Example Usage from GitHub

aws_directory_service_log_subscription.example.tf#L1
resource "aws_directory_service_log_subscription" "example" {
  directory_id   = aws_directory_service_directory.ad.id
  log_group_name = aws_cloudwatch_log_group.examplea.name
}
directory_service_log_subscription.tf#L4
resource "aws_directory_service_log_subscription" "directory_service_log_subscription" {
  count = var.enable_directory_service_log_subscription ? 1 : 0

  directory_id   = var.directory_service_log_subscription_directory_id != "" ? var.directory_service_log_subscription_directory_id : element(aws_directory_service_directory.directory_service_directory.*.id, 0)
  log_group_name = var.directory_service_log_subscription_log_group_name

main.tf#L7
resource "aws_directory_service_log_subscription" "this" {
  directory_id   = var.directory_id
  log_group_name = var.log_group_name
}

directory_service_log_subscription.tf#L4
resource "aws_directory_service_log_subscription" "directory_service_log_subscription" {
  count = var.enable_directory_service_log_subscription ? 1 : 0

  directory_id   = var.directory_service_log_subscription_directory_id != "" ? var.directory_service_log_subscription_directory_id : element(aws_directory_service_directory.directory_service_directory.*.id, 0)
  log_group_name = var.directory_service_log_subscription_log_group_name

ds_logging.tf#L52
resource "aws_directory_service_log_subscription" "ds_logging" {
  count = var.create ? 1 : 0

  directory_id   = aws_directory_service_directory.ds[0].id
  log_group_name = coalesce(var.cloudwatch_log_group_name, aws_cloudwatch_log_group.ds_logging[0].name)
}

Review your Terraform file for AWS best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

Parameters

Explanation in Terraform Registry

Provides a Log subscription for AWS Directory Service that pushes logs to cloudwatch.

CloudFormation Example

CloudFormation code does not have the related resource.

Frequently asked questions

What is AWS Directory Service Log Subscription?

AWS Directory Service Log Subscription is a resource for Directory Service of Amazon Web Service. Settings can be wrote in Terraform.

Where can I find the example code for the AWS Directory Service Log Subscription?

For Terraform, the JamesWoolfenden/terraform-aws-ad, asrkata/SebastianUA-terraform and niveklabs/aws source code examples are useful. See the Terraform Example section for further details.

security-icon

Automate config file reviews on your commits

Fix issues in your infrastructure as code with auto-generated patches.