Resource Type definition for AWS::Oam::Sink
Sample sink to connect that permits links to all accounts in an organization
data "aws_organizations_organization" "example" {}
resource "awscc_oam_sink" "example" {
name = "SampleSink"
policy = jsonencode({
Version = "2012-10-17"
Statement = [{
Effect = "Allow"
Principal = "*"
Resource = "*"
Action = ["oam:CreateLink", "oam:UpdateLink"]
Condition = {
StringEquals = {
"aws:PrincipalOrgID" = data.aws_organizations_organization.example.id
}
"ForAllValues:StringEquals" = {
"oam:ResourceTypes" = [
"AWS::CloudWatch::Metric",
"AWS::Logs::LogGroup"
]
}
}
}]
})
}
Sample sink that permits a link to an individual account
resource "awscc_oam_sink" "example" {
name = "SampleSink"
policy = jsonencode({
Version = "2012-10-17"
Statement = [{
Effect = "Allow"
Resource = "*"
Action = [
"oam:CreateLink",
"oam:UpdateLink"
]
Principal = {
AWS = ["1111111111111"]
}
Condition = {
"ForAllValues:StringEquals" : {
"oam:ResourceTypes" : [
"AWS::CloudWatch::Metric",
"AWS::Logs::LogGroup",
"AWS::XRay::Trace"
]
}
}
}]
})
}
name
(String) The name of the ObservabilityAccessManager Sink.policy
(String) The policy of this ObservabilityAccessManager Sink.tags
(Map of String) Tags to apply to the sinkarn
(String) The Amazon resource name (ARN) of the ObservabilityAccessManager Sinkid
(String) Uniquely identifies the resource.Import is supported using the following syntax:
$ terraform import awscc_oam_sink.example <resource ID>