@pulumi/awsx
Version:
[](https://github.com/pulumi/pulumi-awsx/actions) [](https://slack.pulumi.com) [;
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || (function () {
var ownKeys = function(o) {
ownKeys = Object.getOwnPropertyNames || function (o) {
var ar = [];
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
return ar;
};
return ownKeys(o);
};
return function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
__setModuleDefault(result, mod);
return result;
};
})();
Object.defineProperty(exports, "__esModule", { value: true });
exports.Trail = void 0;
const aws = __importStar(require("@pulumi/aws"));
const pulumi = __importStar(require("@pulumi/pulumi"));
class Trail extends pulumi.ComponentResource {
/**
* The managed CloudWatch Log Group.
*/
logGroup;
/**
* The managed S3 Bucket where the Trail will place its logs.
*/
bucket;
/**
* The CloudTrail Trail.
*/
trail;
/**
* Create a Trail resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name, args, opts) {
super("aws:cloudtrail:x:Trail", name, {}, opts);
let bucketName;
if (args.s3BucketName !== undefined) {
bucketName = pulumi.output(args.s3BucketName);
}
else {
this.bucket = bucketWithCloudTrailPolicy(name, this);
bucketName = this.bucket.id;
}
let cloudWatchLogGroupArn = undefined;
if (args.sendToCloudWatchLogs) {
this.logGroup = new aws.cloudwatch.LogGroup(name, args.cloudWatchLogGroupArgs, { parent: this });
cloudWatchLogGroupArn = pulumi.interpolate `${this.logGroup.arn}:*`;
}
const trailArgs = {
s3BucketName: bucketName,
cloudWatchLogGroupArn: cloudWatchLogGroupArn,
...args,
};
this.trail = new aws.cloudtrail.Trail(name, trailArgs, { parent: this });
}
}
exports.Trail = Trail;
function bucketWithCloudTrailPolicy(name, parent) {
const bucket = new aws.s3.Bucket(name, {}, { parent: parent });
const policy = new aws.s3.BucketPolicy(name, {
bucket: bucket.id,
policy: {
Version: "2012-10-17",
Statement: [{
Sid: "AWSCloudTrailAclCheck",
Effect: "Allow",
Principal: aws.iam.Principals.CloudtrailPrincipal,
Action: ["s3:GetBucketAcl"],
Resource: [bucket.arn],
}, {
Sid: "AWSCloudTrailWrite",
Effect: "Allow",
Principal: { Service: "cloudtrail.amazonaws.com" },
Action: ["s3:PutObject"],
Resource: [pulumi.interpolate `${bucket.arn}/*`],
Condition: { StringEquals: { "s3:x-amz-acl": "bucket-owner-full-control" } },
}],
},
}, { parent: parent });
return bucket;
}
//# sourceMappingURL=trail.js.map