ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
AWS
172
Mods
431
Resource Types
6,718
Policies
2,323
Controls
1,637
Quick Actions
528
IAM

Policy: AWS > VPC > VPC > Flow Logging > S3 > Bucket

The name of an S3 Bucket to which the VPC flow logs will be delivered. The S3 Bucket must already exist and the log delivery service (delivery.logs.amazonaws.com) must be granted the appropriate access. The bucket can reside in any account but must be in the same region as the VPC.

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Packs

This policy setting is used by the following policy packs:

Policy Specification

Schema Type
string
Default template
{{ $.bucketName }}
Default template input
- |
  {
    region {
      turbot {
        id
      }
    }
  }
- |
  {
    bucketName: policy(uri: "aws#/policy/types/loggingBucketDefault", resourceId: "{{ $.region.turbot.id }}")
  }

Category

In Your Workspace

Developers