Skip to content

PutDestinationPolicyRequest

Source code in docs_src/capo_cloudwatch_logs/types/put_destination_policy_request.py
class PutDestinationPolicyRequest(TypedDict, closed=True):
    destination_name: "capo_cloudwatch_logs.types.destination_name.DestinationName"
    """<p>A name for an existing destination.</p>"""
    access_policy: "capo_cloudwatch_logs.types.access_policy.AccessPolicy"
    """<p>An IAM policy document that authorizes cross-account users to deliver their log events to the associated destination. This can be up to 5120 bytes.</p>"""
    force_update: NotRequired["capo_cloudwatch_logs.types.force_update.ForceUpdate"]
    """<p>Specify true if you are updating an existing destination policy to grant permission to an organization ID instead of granting permission to individual Amazon Web Services accounts. Before you update a destination policy this way, you must first update the subscription filters in the accounts that send logs to this destination. If you do not, the subscription filters might stop working. By specifying <code>true</code> for <code>forceUpdate</code>, you are affirming that you have already updated the subscription filters. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Cross-Account-Log_Subscription-Update.html"> Updating an existing cross-account subscription</a> </p> <p>If you omit this parameter, the default of <code>false</code> is used.</p>"""

access_policy instance-attribute

access_policy: AccessPolicy

An IAM policy document that authorizes cross-account users to deliver their log events to the associated destination. This can be up to 5120 bytes.

destination_name instance-attribute

destination_name: DestinationName

A name for an existing destination.

force_update instance-attribute

force_update: NotRequired[ForceUpdate]

Specify true if you are updating an existing destination policy to grant permission to an organization ID instead of granting permission to individual Amazon Web Services accounts. Before you update a destination policy this way, you must first update the subscription filters in the accounts that send logs to this destination. If you do not, the subscription filters might stop working. By specifying true for forceUpdate, you are affirming that you have already updated the subscription filters. For more information, see Updating an existing cross-account subscription

If you omit this parameter, the default of false is used.