alicloud_config_delivery

Provides a Config Delivery resource.

Delivery channel of current account.

For information about Config Delivery and how to use it, see What is Delivery.

-> NOTE: Available since v1.171.0.

Example Usage

Basic Usage

variable "name" {
  default = "tf-example-sls"
}
data "alicloud_account" "this" {}
data "alicloud_regions" "this" {
  current = true
}

resource "alicloud_log_project" "default" {
  project_name = var.name
}
resource "alicloud_log_store" "default" {
  logstore_name = var.name
  project_name  = alicloud_log_project.default.project_name
}

resource "alicloud_config_delivery" "default" {
  configuration_item_change_notification = true
  non_compliant_notification             = true
  delivery_channel_name                  = var.name
  delivery_channel_target_arn            = "acs:log:${data.alicloud_regions.this.ids.0}:${data.alicloud_account.this.id}:project/${alicloud_log_project.default.project_name}/logstore/${alicloud_log_store.default.logstore_name}"
  delivery_channel_type                  = "SLS"
  description                            = var.name
}

Argument Reference

The following arguments are supported:

• configuration_item_change_notification - (Optional) Indicates whether the specified destination receives resource change logs. If the value of this parameter is true, Cloud Config delivers the resource change logs to OSS, Log Service, or MNS when the configurations of the resources change. Valid values:

  • true: The specified destination receives resource change logs.
  • false: The specified destination does not receive resource change logs.

• configuration_snapshot - (Optional) Indicates whether the specified destination receives scheduled resource snapshots. Cloud Config delivers scheduled resource snapshots at 04:00Z and 16:00Z to OSS, MNS, or Log Service every day. The time is displayed in UTC. Valid values:

  • true: The specified destination receives scheduled resource snapshots.
  • false: The specified destination does not receive scheduled resource snapshots.

• delivery_channel_condition - (Optional) The rule that is attached to the delivery channel.

  This parameter is available when you deliver data of all types to MNS or deliver snapshots to Log Service.

  If you specify the risk level or resource types for subscription events, this is as follows:

  The lowest risk level of the events to which you want to subscribe is in the following format: {"filterType":"RuleRiskLevel","value":"1","multiple":false}, The value field indicates the risk level of the events to which you want to subscribe. Valid values: 1, 2, and 3. The value 1 indicates the high risk level, the value 2 indicates the medium risk level, and the value 3 indicates the low risk level.

  The setting of the resource types of the events to which you want to subscribe is in the following format: {"filterType":"ResourceType","values":["ACS::ACK::Cluster","ACS::ActionTrail::Trail","ACS::CBWP::CommonBandwidthPackage"],"multiple":true}, The values field indicates the resource types of the events to which you want to subscribe. The value of the field is a JSON array.

  Examples:[{"filterType":"ResourceType","values":["ACS::ActionTrail::Trail","ACS::CBWP::CommonBandwidthPackage","ACS::CDN::Domain","ACS::CEN::CenBandwidthPackage","ACS::CEN::CenInstance","ACS::CEN::Flowlog","ACS::DdosCoo::Instance"],"multiple":true}].

• delivery_channel_name - (Optional) The name of the delivery channel.

• delivery_channel_target_arn - (Required) The ARN of the delivery destination.

  • If the value of the DeliveryChannelType parameter is OSS, the value of this parameter is the ARN of the destination OSS bucket.
  • If the value of the DeliveryChannelType parameter is MNS, the value of this parameter is the ARN of the destination MNS topic.
  • If the value of the DeliveryChannelType parameter is SLS, the value of this parameter is the ARN of the destination Log Service Logstore.

• delivery_channel_type - (Required, ForceNew) The type of the delivery channel. Valid values:

  • OSS: Object Storage Service (OSS)
  • MNS: Message Service (MNS)
  • SLS: Log Service

• description - (Optional) The description of the delivery channel.

• non_compliant_notification - (Optional) Indicates whether the specified destination receives resource non-compliance events. If the value of this parameter is true, Cloud Config delivers resource non-compliance events to Log Service or MNS when resources are evaluated as non-compliant. Valid values:

  • true: The specified destination receives resource non-compliance events.
  • false: The specified destination does not receive resource non-compliance events.

• oversized_data_oss_target_arn - (Optional) The oss ARN of the delivery channel when the value data oversized limit. The value must be in one of the following formats: acs:oss:{RegionId}:{Aliuid}:{bucketName} if your delivery destination is an Object Storage Service (OSS) bucket.

• status - (Optional, Computed) The status of the delivery channel. Valid values:

  • 0: The delivery channel is disabled.
  • 1: The delivery channel is enabled.

Attributes Reference

The following attributes are exported:

• id - The ID of the resource supplied above.

Timeouts

The timeouts block allows you to specify timeouts for certain actions:

• create - (Defaults to 5 mins) Used when create the Delivery.
• delete - (Defaults to 5 mins) Used when delete the Delivery.
• update - (Defaults to 5 mins) Used when update the Delivery.

Import

Config Delivery can be imported using the id, e.g.

$ terraform import alicloud_config_delivery.example <id>