Struct aws_sdk_cloudwatchlogs::client::fluent_builders::PutDestinationPolicy

pub struct PutDestinationPolicy { /* private fields */ }

Fluent builder constructing a request to PutDestinationPolicy.

Creates or updates an access policy associated with an existing destination. An access policy is an IAM policy document that is used to authorize claims to register a subscription filter against a given destination.

If multiple Amazon Web Services accounts are sending logs to this destination, each sender account must be listed separately in the policy. The policy does not support specifying * as the Principal or the use of the aws:PrincipalOrgId global key.

Implementations

impl PutDestinationPolicy

pub async fn send(
    self
) -> Result<PutDestinationPolicyOutput, SdkError<PutDestinationPolicyError>>

Sends the request and returns the response.

If an error occurs, an SdkError will be returned with additional details that can be matched against.

By default, any retryable failures will be retried twice. Retry behavior is configurable with the RetryConfig, which can be set when configuring the client.

pub fn destination_name(self, input: impl Into<String>) -> Self

A name for an existing destination.

pub fn set_destination_name(self, input: Option<String>) -> Self

A name for an existing destination.

pub fn access_policy(self, input: impl Into<String>) -> Self

An IAM policy document that authorizes cross-account users to deliver their log events to the associated destination. This can be up to 5120 bytes.

pub fn set_access_policy(self, input: Option<String>) -> Self

An IAM policy document that authorizes cross-account users to deliver their log events to the associated destination. This can be up to 5120 bytes.

pub fn force_update(self, input: bool) -> Self

Specify true if you are updating an existing destination policy to grant permission to an organization ID instead of granting permission to individual AWS accounts. Before you update a destination policy this way, you must first update the subscription filters in the accounts that send logs to this destination. If you do not, the subscription filters might stop working. By specifying true for forceUpdate, you are affirming that you have already updated the subscription filters. For more information, see Updating an existing cross-account subscription

If you omit this parameter, the default of false is used.

pub fn set_force_update(self, input: Option<bool>) -> Self

Specify true if you are updating an existing destination policy to grant permission to an organization ID instead of granting permission to individual AWS accounts. Before you update a destination policy this way, you must first update the subscription filters in the accounts that send logs to this destination. If you do not, the subscription filters might stop working. By specifying true for forceUpdate, you are affirming that you have already updated the subscription filters. For more information, see Updating an existing cross-account subscription

If you omit this parameter, the default of false is used.

Trait Implementations

impl Clone for PutDestinationPolicy

fn clone(&self) -> PutDestinationPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PutDestinationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.