google_logging_folder_settings

Default resource settings control whether CMEK is required for new log buckets. These settings also determine the storage location for the _Default and _Required log buckets, and whether the _Default sink is enabled or disabled.

To get more information about FolderSettings, see:

Example Usage - Logging Folder Settings All

resource "google_logging_folder_settings" "example" {
  disable_default_sink = true
  folder               = google_folder.my_folder.folder_id
  kms_key_name         = "kms-key"
  storage_location     = "us-central1"
  depends_on           = [ google_kms_crypto_key_iam_member.iam ]
}

resource "google_folder" "my_folder" {
  display_name = "folder-name"
  parent       = "organizations/123456789"
}

data "google_logging_folder_settings" "settings" {
  folder = google_folder.my_folder.folder_id
}

resource "google_kms_crypto_key_iam_member" "iam" {
  crypto_key_id = "kms-key"
  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
  member        = "serviceAccount:${data.google_logging_folder_settings.settings.kms_service_account_id}"
}

Argument Reference

The following arguments are supported:


Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

Timeouts

This resource provides the following Timeouts configuration options:

Import

FolderSettings can be imported using any of these accepted formats:

In Terraform v1.5.0 and later, use an import block to import FolderSettings using one of the formats above. For example:

import {
  id = "folders/{{folder}}/settings"
  to = google_logging_folder_settings.default
}

When using the terraform import command, FolderSettings can be imported using one of the formats above. For example:

$ terraform import google_logging_folder_settings.default folders/{{folder}}/settings
$ terraform import google_logging_folder_settings.default {{folder}}