update_telemetry_pipeline
¶
update_telemetry_pipeline(
pipeline_identifier: TelemetryPipelineIdentifier,
configuration: TelemetryPipelineConfiguration,
*,
config_overrides: Optional[ObservabilityAdminClientConfig] = None,
) -> UpdateTelemetryPipelineOutput
Updates the configuration of an existing telemetry pipeline.
The following attributes cannot be updated after pipeline creation:
-
Pipeline name - The pipeline name is immutable
-
Pipeline ARN - The ARN is automatically generated and cannot be changed
-
Source type - Once a pipeline is created with a specific source type (such as S3, CloudWatch Logs, GitHub, or third-party sources), it cannot be changed to a different source type
Processors can be added, removed, or modified. However, some processors are not supported for third-party pipelines and cannot be added through updates.
Source-Specific Update Rules
- CloudWatch Logs Sources (Vended and Custom)
-
Updatable:
sts_role_arnFixed:
data_source_name,data_source_type, sink (must remain@original) - S3 Sources (Crowdstrike, Zscaler, SentinelOne, Custom)
-
Updatable: All SQS configuration parameters,
sts_role_arn, codec settings, compression type, bucket ownership settings, sink log groupFixed:
notification_type,aws.region - GitHub Audit Logs
-
Updatable: All Amazon Web Services Secrets Manager attributes,
scope(can switch between ORGANIZATION/ENTERPRISE),organizationorenterprisename,range, authentication credentials (PAT or GitHub App) - Microsoft Sources (Entra ID, Office365, Windows)
-
Updatable: All Amazon Web Services Secrets Manager attributes,
tenant_id,workspace_id(Windows only), OAuth2 credentials (client_id,client_secret) - Okta Sources (SSO, Auth0)
-
Updatable: All Amazon Web Services Secrets Manager attributes,
domain,range, OAuth2 credentials (client_id,client_secret) - Palo Alto Networks
-
Updatable: All Amazon Web Services Secrets Manager attributes,
hostname, basic authentication credentials (username,password) - ServiceNow CMDB
-
Updatable: All Amazon Web Services Secrets Manager attributes,
instance_url,range, OAuth2 credentials (client_id,client_secret) - Wiz CNAPP
-
Updatable: All Amazon Web Services Secrets Manager attributes,
region,range, OAuth2 credentials (client_id,client_secret)
Parameters:
-
pipeline_identifier(TelemetryPipelineIdentifier) –The ARN of the telemetry pipeline to update.
-
configuration(TelemetryPipelineConfiguration) –The new configuration for the telemetry pipeline, including updated sources, processors, and destinations.
Raises:
-
AccessDeniedException–Indicates you don't have permissions to perform the requested operation. The user or role that is making the request must have at least one IAM permissions policy attached that grants the required permissions. For more information, see Access management for Amazon Web Services resources in the IAM user guide.
-
InternalServerException–Indicates the request has failed to process because of an unknown server error, exception, or failure.
-
ResourceNotFoundException–The specified resource (such as a telemetry rule) could not be found.
-
TooManyRequestsException–The request throughput limit was exceeded.
-
ValidationException–Indicates input validation failed. Check your request parameters and retry the request.
-
UnknownServiceError–The service returned an error code this client does not model.