Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS
  3. API Docs
  4. cognito
  5. LogDeliveryConfiguration
AWS v7.4.0 published on Wednesday, Aug 13, 2025 by Pulumi
pulumi/pulumi-aws

aws.cognito.LogDeliveryConfiguration

Explore with Pulumi AI

aws logo
AWS v7.4.0 published on Wednesday, Aug 13, 2025 by Pulumi
pulumi/pulumi-aws

    Manages an AWS Cognito IDP (Identity Provider) Log Delivery Configuration.

    Example Usage

    Basic Usage with CloudWatch Logs

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cognito.UserPool("example", {name: "example"});
const exampleLogGroup = new aws.cloudwatch.LogGroup("example", {name: "example"});
const exampleLogDeliveryConfiguration = new aws.cognito.LogDeliveryConfiguration("example", {
    userPoolId: example.id,
    logConfigurations: [{
        eventSource: "userNotification",
        logLevel: "ERROR",
        cloudWatchLogsConfiguration: {
            logGroupArn: exampleLogGroup.arn,
        },
    }],
});

    import pulumi
import pulumi_aws as aws

example = aws.cognito.UserPool("example", name="example")
example_log_group = aws.cloudwatch.LogGroup("example", name="example")
example_log_delivery_configuration = aws.cognito.LogDeliveryConfiguration("example",
    user_pool_id=example.id,
    log_configurations=[{
        "event_source": "userNotification",
        "log_level": "ERROR",
        "cloud_watch_logs_configuration": {
            "log_group_arn": example_log_group.arn,
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cloudwatch"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cognito"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := cognito.NewUserPool(ctx, "example", &cognito.UserPoolArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleLogGroup, err := cloudwatch.NewLogGroup(ctx, "example", &cloudwatch.LogGroupArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		_, err = cognito.NewLogDeliveryConfiguration(ctx, "example", &cognito.LogDeliveryConfigurationArgs{
			UserPoolId: example.ID(),
			LogConfigurations: cognito.LogDeliveryConfigurationLogConfigurationArray{
				&cognito.LogDeliveryConfigurationLogConfigurationArgs{
					EventSource: pulumi.String("userNotification"),
					LogLevel:    pulumi.String("ERROR"),
					CloudWatchLogsConfiguration: &cognito.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs{
						LogGroupArn: exampleLogGroup.Arn,
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Cognito.UserPool("example", new()
    {
        Name = "example",
    });

    var exampleLogGroup = new Aws.CloudWatch.LogGroup("example", new()
    {
        Name = "example",
    });

    var exampleLogDeliveryConfiguration = new Aws.Cognito.LogDeliveryConfiguration("example", new()
    {
        UserPoolId = example.Id,
        LogConfigurations = new[]
        {
            new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationArgs
            {
                EventSource = "userNotification",
                LogLevel = "ERROR",
                CloudWatchLogsConfiguration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs
                {
                    LogGroupArn = exampleLogGroup.Arn,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cognito.UserPool;
import com.pulumi.aws.cognito.UserPoolArgs;
import com.pulumi.aws.cloudwatch.LogGroup;
import com.pulumi.aws.cloudwatch.LogGroupArgs;
import com.pulumi.aws.cognito.LogDeliveryConfiguration;
import com.pulumi.aws.cognito.LogDeliveryConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new UserPool("example", UserPoolArgs.builder()
            .name("example")
            .build());

        var exampleLogGroup = new LogGroup("exampleLogGroup", LogGroupArgs.builder()
            .name("example")
            .build());

        var exampleLogDeliveryConfiguration = new LogDeliveryConfiguration("exampleLogDeliveryConfiguration", LogDeliveryConfigurationArgs.builder()
            .userPoolId(example.id())
            .logConfigurations(LogDeliveryConfigurationLogConfigurationArgs.builder()
                .eventSource("userNotification")
                .logLevel("ERROR")
                .cloudWatchLogsConfiguration(LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs.builder()
                    .logGroupArn(exampleLogGroup.arn())
                    .build())
                .build())
            .build());

    }
}

    resources:
  example:
    type: aws:cognito:UserPool
    properties:
      name: example
  exampleLogGroup:
    type: aws:cloudwatch:LogGroup
    name: example
    properties:
      name: example
  exampleLogDeliveryConfiguration:
    type: aws:cognito:LogDeliveryConfiguration
    name: example
    properties:
      userPoolId: ${example.id}
      logConfigurations:
        - eventSource: userNotification
          logLevel: ERROR
          cloudWatchLogsConfiguration:
            logGroupArn: ${exampleLogGroup.arn}

    Multiple Log Configurations with Different Destinations

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cognito.UserPool("example", {name: "example"});
const exampleLogGroup = new aws.cloudwatch.LogGroup("example", {name: "example"});
const exampleBucket = new aws.s3.Bucket("example", {
    bucket: "example-bucket",
    forceDestroy: true,
});
const firehose = new aws.iam.Role("firehose", {
    name: "firehose-role",
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Effect: "Allow",
            Principal: {
                Service: "firehose.amazonaws.com",
            },
        }],
    }),
});
const firehoseRolePolicy = new aws.iam.RolePolicy("firehose", {
    name: "firehose-policy",
    role: firehose.id,
    policy: pulumi.jsonStringify({
        Version: "2012-10-17",
        Statement: [{
            Effect: "Allow",
            Action: [
                "s3:AbortMultipartUpload",
                "s3:GetBucketLocation",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads",
                "s3:PutObject",
            ],
            Resource: [
                exampleBucket.arn,
                pulumi.interpolate`${exampleBucket.arn}/*`,
            ],
        }],
    }),
});
const exampleFirehoseDeliveryStream = new aws.kinesis.FirehoseDeliveryStream("example", {
    name: "example-stream",
    destination: "extended_s3",
    extendedS3Configuration: {
        roleArn: firehose.arn,
        bucketArn: exampleBucket.arn,
    },
});
const exampleLogDeliveryConfiguration = new aws.cognito.LogDeliveryConfiguration("example", {
    userPoolId: example.id,
    logConfigurations: [
        {
            eventSource: "userNotification",
            logLevel: "INFO",
            cloudWatchLogsConfiguration: {
                logGroupArn: exampleLogGroup.arn,
            },
        },
        {
            eventSource: "userAuthEvents",
            logLevel: "ERROR",
            firehoseConfiguration: {
                streamArn: exampleFirehoseDeliveryStream.arn,
            },
        },
    ],
});

    import pulumi
import json
import pulumi_aws as aws

example = aws.cognito.UserPool("example", name="example")
example_log_group = aws.cloudwatch.LogGroup("example", name="example")
example_bucket = aws.s3.Bucket("example",
    bucket="example-bucket",
    force_destroy=True)
firehose = aws.iam.Role("firehose",
    name="firehose-role",
    assume_role_policy=json.dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Action": "sts:AssumeRole",
            "Effect": "Allow",
            "Principal": {
                "Service": "firehose.amazonaws.com",
            },
        }],
    }))
firehose_role_policy = aws.iam.RolePolicy("firehose",
    name="firehose-policy",
    role=firehose.id,
    policy=pulumi.Output.json_dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Effect": "Allow",
            "Action": [
                "s3:AbortMultipartUpload",
                "s3:GetBucketLocation",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads",
                "s3:PutObject",
            ],
            "Resource": [
                example_bucket.arn,
                example_bucket.arn.apply(lambda arn: f"{arn}/*"),
            ],
        }],
    }))
example_firehose_delivery_stream = aws.kinesis.FirehoseDeliveryStream("example",
    name="example-stream",
    destination="extended_s3",
    extended_s3_configuration={
        "role_arn": firehose.arn,
        "bucket_arn": example_bucket.arn,
    })
example_log_delivery_configuration = aws.cognito.LogDeliveryConfiguration("example",
    user_pool_id=example.id,
    log_configurations=[
        {
            "event_source": "userNotification",
            "log_level": "INFO",
            "cloud_watch_logs_configuration": {
                "log_group_arn": example_log_group.arn,
            },
        },
        {
            "event_source": "userAuthEvents",
            "log_level": "ERROR",
            "firehose_configuration": {
                "stream_arn": example_firehose_delivery_stream.arn,
            },
        },
    ])

    package main

import (
	"encoding/json"
	"fmt"

	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cloudwatch"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cognito"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/kinesis"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/s3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := cognito.NewUserPool(ctx, "example", &cognito.UserPoolArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleLogGroup, err := cloudwatch.NewLogGroup(ctx, "example", &cloudwatch.LogGroupArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleBucket, err := s3.NewBucket(ctx, "example", &s3.BucketArgs{
			Bucket:       pulumi.String("example-bucket"),
			ForceDestroy: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": "sts:AssumeRole",
					"Effect": "Allow",
					"Principal": map[string]interface{}{
						"Service": "firehose.amazonaws.com",
					},
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		firehose, err := iam.NewRole(ctx, "firehose", &iam.RoleArgs{
			Name:             pulumi.String("firehose-role"),
			AssumeRolePolicy: pulumi.String(json0),
		})
		if err != nil {
			return err
		}
		_, err = iam.NewRolePolicy(ctx, "firehose", &iam.RolePolicyArgs{
			Name: pulumi.String("firehose-policy"),
			Role: firehose.ID(),
			Policy: pulumi.All(exampleBucket.Arn, exampleBucket.Arn).ApplyT(func(_args []interface{}) (string, error) {
				exampleBucketArn := _args[0].(string)
				exampleBucketArn1 := _args[1].(string)
				var _zero string
				tmpJSON1, err := json.Marshal(map[string]interface{}{
					"Version": "2012-10-17",
					"Statement": []map[string]interface{}{
						map[string]interface{}{
							"Effect": "Allow",
							"Action": []string{
								"s3:AbortMultipartUpload",
								"s3:GetBucketLocation",
								"s3:GetObject",
								"s3:ListBucket",
								"s3:ListBucketMultipartUploads",
								"s3:PutObject",
							},
							"Resource": []string{
								exampleBucketArn,
								fmt.Sprintf("%v/*", exampleBucketArn1),
							},
						},
					},
				})
				if err != nil {
					return _zero, err
				}
				json1 := string(tmpJSON1)
				return json1, nil
			}).(pulumi.StringOutput),
		})
		if err != nil {
			return err
		}
		exampleFirehoseDeliveryStream, err := kinesis.NewFirehoseDeliveryStream(ctx, "example", &kinesis.FirehoseDeliveryStreamArgs{
			Name:        pulumi.String("example-stream"),
			Destination: pulumi.String("extended_s3"),
			ExtendedS3Configuration: &kinesis.FirehoseDeliveryStreamExtendedS3ConfigurationArgs{
				RoleArn:   firehose.Arn,
				BucketArn: exampleBucket.Arn,
			},
		})
		if err != nil {
			return err
		}
		_, err = cognito.NewLogDeliveryConfiguration(ctx, "example", &cognito.LogDeliveryConfigurationArgs{
			UserPoolId: example.ID(),
			LogConfigurations: cognito.LogDeliveryConfigurationLogConfigurationArray{
				&cognito.LogDeliveryConfigurationLogConfigurationArgs{
					EventSource: pulumi.String("userNotification"),
					LogLevel:    pulumi.String("INFO"),
					CloudWatchLogsConfiguration: &cognito.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs{
						LogGroupArn: exampleLogGroup.Arn,
					},
				},
				&cognito.LogDeliveryConfigurationLogConfigurationArgs{
					EventSource: pulumi.String("userAuthEvents"),
					LogLevel:    pulumi.String("ERROR"),
					FirehoseConfiguration: &cognito.LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs{
						StreamArn: exampleFirehoseDeliveryStream.Arn,
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Cognito.UserPool("example", new()
    {
        Name = "example",
    });

    var exampleLogGroup = new Aws.CloudWatch.LogGroup("example", new()
    {
        Name = "example",
    });

    var exampleBucket = new Aws.S3.Bucket("example", new()
    {
        BucketName = "example-bucket",
        ForceDestroy = true,
    });

    var firehose = new Aws.Iam.Role("firehose", new()
    {
        Name = "firehose-role",
        AssumeRolePolicy = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Action"] = "sts:AssumeRole",
                    ["Effect"] = "Allow",
                    ["Principal"] = new Dictionary<string, object?>
                    {
                        ["Service"] = "firehose.amazonaws.com",
                    },
                },
            },
        }),
    });

    var firehoseRolePolicy = new Aws.Iam.RolePolicy("firehose", new()
    {
        Name = "firehose-policy",
        Role = firehose.Id,
        Policy = Output.JsonSerialize(Output.Create(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Effect"] = "Allow",
                    ["Action"] = new[]
                    {
                        "s3:AbortMultipartUpload",
                        "s3:GetBucketLocation",
                        "s3:GetObject",
                        "s3:ListBucket",
                        "s3:ListBucketMultipartUploads",
                        "s3:PutObject",
                    },
                    ["Resource"] = new[]
                    {
                        exampleBucket.Arn,
                        exampleBucket.Arn.Apply(arn => $"{arn}/*"),
                    },
                },
            },
        })),
    });

    var exampleFirehoseDeliveryStream = new Aws.Kinesis.FirehoseDeliveryStream("example", new()
    {
        Name = "example-stream",
        Destination = "extended_s3",
        ExtendedS3Configuration = new Aws.Kinesis.Inputs.FirehoseDeliveryStreamExtendedS3ConfigurationArgs
        {
            RoleArn = firehose.Arn,
            BucketArn = exampleBucket.Arn,
        },
    });

    var exampleLogDeliveryConfiguration = new Aws.Cognito.LogDeliveryConfiguration("example", new()
    {
        UserPoolId = example.Id,
        LogConfigurations = new[]
        {
            new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationArgs
            {
                EventSource = "userNotification",
                LogLevel = "INFO",
                CloudWatchLogsConfiguration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs
                {
                    LogGroupArn = exampleLogGroup.Arn,
                },
            },
            new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationArgs
            {
                EventSource = "userAuthEvents",
                LogLevel = "ERROR",
                FirehoseConfiguration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs
                {
                    StreamArn = exampleFirehoseDeliveryStream.Arn,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cognito.UserPool;
import com.pulumi.aws.cognito.UserPoolArgs;
import com.pulumi.aws.cloudwatch.LogGroup;
import com.pulumi.aws.cloudwatch.LogGroupArgs;
import com.pulumi.aws.s3.Bucket;
import com.pulumi.aws.s3.BucketArgs;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.iam.RolePolicy;
import com.pulumi.aws.iam.RolePolicyArgs;
import com.pulumi.aws.kinesis.FirehoseDeliveryStream;
import com.pulumi.aws.kinesis.FirehoseDeliveryStreamArgs;
import com.pulumi.aws.kinesis.inputs.FirehoseDeliveryStreamExtendedS3ConfigurationArgs;
import com.pulumi.aws.cognito.LogDeliveryConfiguration;
import com.pulumi.aws.cognito.LogDeliveryConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new UserPool("example", UserPoolArgs.builder()
            .name("example")
            .build());

        var exampleLogGroup = new LogGroup("exampleLogGroup", LogGroupArgs.builder()
            .name("example")
            .build());

        var exampleBucket = new Bucket("exampleBucket", BucketArgs.builder()
            .bucket("example-bucket")
            .forceDestroy(true)
            .build());

        var firehose = new Role("firehose", RoleArgs.builder()
            .name("firehose-role")
            .assumeRolePolicy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Action", "sts:AssumeRole"),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("Service", "firehose.amazonaws.com")
                        ))
                    )))
                )))
            .build());

        var firehoseRolePolicy = new RolePolicy("firehoseRolePolicy", RolePolicyArgs.builder()
            .name("firehose-policy")
            .role(firehose.id())
            .policy(Output.tuple(exampleBucket.arn(), exampleBucket.arn()).applyValue(values -> {
                var exampleBucketArn = values.t1;
                var exampleBucketArn1 = values.t2;
                return serializeJson(
                    jsonObject(
                        jsonProperty("Version", "2012-10-17"),
                        jsonProperty("Statement", jsonArray(jsonObject(
                            jsonProperty("Effect", "Allow"),
                            jsonProperty("Action", jsonArray(
                                "s3:AbortMultipartUpload", 
                                "s3:GetBucketLocation", 
                                "s3:GetObject", 
                                "s3:ListBucket", 
                                "s3:ListBucketMultipartUploads", 
                                "s3:PutObject"
                            )),
                            jsonProperty("Resource", jsonArray(
                                exampleBucketArn, 
                                String.format("%s/*", exampleBucketArn1)
                            ))
                        )))
                    ));
            }))
            .build());

        var exampleFirehoseDeliveryStream = new FirehoseDeliveryStream("exampleFirehoseDeliveryStream", FirehoseDeliveryStreamArgs.builder()
            .name("example-stream")
            .destination("extended_s3")
            .extendedS3Configuration(FirehoseDeliveryStreamExtendedS3ConfigurationArgs.builder()
                .roleArn(firehose.arn())
                .bucketArn(exampleBucket.arn())
                .build())
            .build());

        var exampleLogDeliveryConfiguration = new LogDeliveryConfiguration("exampleLogDeliveryConfiguration", LogDeliveryConfigurationArgs.builder()
            .userPoolId(example.id())
            .logConfigurations(            
                LogDeliveryConfigurationLogConfigurationArgs.builder()
                    .eventSource("userNotification")
                    .logLevel("INFO")
                    .cloudWatchLogsConfiguration(LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs.builder()
                        .logGroupArn(exampleLogGroup.arn())
                        .build())
                    .build(),
                LogDeliveryConfigurationLogConfigurationArgs.builder()
                    .eventSource("userAuthEvents")
                    .logLevel("ERROR")
                    .firehoseConfiguration(LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs.builder()
                        .streamArn(exampleFirehoseDeliveryStream.arn())
                        .build())
                    .build())
            .build());

    }
}

    resources:
  example:
    type: aws:cognito:UserPool
    properties:
      name: example
  exampleLogGroup:
    type: aws:cloudwatch:LogGroup
    name: example
    properties:
      name: example
  exampleBucket:
    type: aws:s3:Bucket
    name: example
    properties:
      bucket: example-bucket
      forceDestroy: true
  firehose:
    type: aws:iam:Role
    properties:
      name: firehose-role
      assumeRolePolicy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Action: sts:AssumeRole
              Effect: Allow
              Principal:
                Service: firehose.amazonaws.com
  firehoseRolePolicy:
    type: aws:iam:RolePolicy
    name: firehose
    properties:
      name: firehose-policy
      role: ${firehose.id}
      policy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Effect: Allow
              Action:
                - s3:AbortMultipartUpload
                - s3:GetBucketLocation
                - s3:GetObject
                - s3:ListBucket
                - s3:ListBucketMultipartUploads
                - s3:PutObject
              Resource:
                - ${exampleBucket.arn}
                - ${exampleBucket.arn}/*
  exampleFirehoseDeliveryStream:
    type: aws:kinesis:FirehoseDeliveryStream
    name: example
    properties:
      name: example-stream
      destination: extended_s3
      extendedS3Configuration:
        roleArn: ${firehose.arn}
        bucketArn: ${exampleBucket.arn}
  exampleLogDeliveryConfiguration:
    type: aws:cognito:LogDeliveryConfiguration
    name: example
    properties:
      userPoolId: ${example.id}
      logConfigurations:
        - eventSource: userNotification
          logLevel: INFO
          cloudWatchLogsConfiguration:
            logGroupArn: ${exampleLogGroup.arn}
        - eventSource: userAuthEvents
          logLevel: ERROR
          firehoseConfiguration:
            streamArn: ${exampleFirehoseDeliveryStream.arn}

    S3 Configuration

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.cognito.UserPool("example", {name: "example"});
const exampleBucket = new aws.s3.Bucket("example", {
    bucket: "example-bucket",
    forceDestroy: true,
});
const exampleLogDeliveryConfiguration = new aws.cognito.LogDeliveryConfiguration("example", {
    userPoolId: example.id,
    logConfigurations: [{
        eventSource: "userNotification",
        logLevel: "ERROR",
        s3Configuration: {
            bucketArn: exampleBucket.arn,
        },
    }],
});

    import pulumi
import pulumi_aws as aws

example = aws.cognito.UserPool("example", name="example")
example_bucket = aws.s3.Bucket("example",
    bucket="example-bucket",
    force_destroy=True)
example_log_delivery_configuration = aws.cognito.LogDeliveryConfiguration("example",
    user_pool_id=example.id,
    log_configurations=[{
        "event_source": "userNotification",
        "log_level": "ERROR",
        "s3_configuration": {
            "bucket_arn": example_bucket.arn,
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/cognito"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/s3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := cognito.NewUserPool(ctx, "example", &cognito.UserPoolArgs{
			Name: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleBucket, err := s3.NewBucket(ctx, "example", &s3.BucketArgs{
			Bucket:       pulumi.String("example-bucket"),
			ForceDestroy: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = cognito.NewLogDeliveryConfiguration(ctx, "example", &cognito.LogDeliveryConfigurationArgs{
			UserPoolId: example.ID(),
			LogConfigurations: cognito.LogDeliveryConfigurationLogConfigurationArray{
				&cognito.LogDeliveryConfigurationLogConfigurationArgs{
					EventSource: pulumi.String("userNotification"),
					LogLevel:    pulumi.String("ERROR"),
					S3Configuration: &cognito.LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs{
						BucketArn: exampleBucket.Arn,
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Cognito.UserPool("example", new()
    {
        Name = "example",
    });

    var exampleBucket = new Aws.S3.Bucket("example", new()
    {
        BucketName = "example-bucket",
        ForceDestroy = true,
    });

    var exampleLogDeliveryConfiguration = new Aws.Cognito.LogDeliveryConfiguration("example", new()
    {
        UserPoolId = example.Id,
        LogConfigurations = new[]
        {
            new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationArgs
            {
                EventSource = "userNotification",
                LogLevel = "ERROR",
                S3Configuration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs
                {
                    BucketArn = exampleBucket.Arn,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cognito.UserPool;
import com.pulumi.aws.cognito.UserPoolArgs;
import com.pulumi.aws.s3.Bucket;
import com.pulumi.aws.s3.BucketArgs;
import com.pulumi.aws.cognito.LogDeliveryConfiguration;
import com.pulumi.aws.cognito.LogDeliveryConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationArgs;
import com.pulumi.aws.cognito.inputs.LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new UserPool("example", UserPoolArgs.builder()
            .name("example")
            .build());

        var exampleBucket = new Bucket("exampleBucket", BucketArgs.builder()
            .bucket("example-bucket")
            .forceDestroy(true)
            .build());

        var exampleLogDeliveryConfiguration = new LogDeliveryConfiguration("exampleLogDeliveryConfiguration", LogDeliveryConfigurationArgs.builder()
            .userPoolId(example.id())
            .logConfigurations(LogDeliveryConfigurationLogConfigurationArgs.builder()
                .eventSource("userNotification")
                .logLevel("ERROR")
                .s3Configuration(LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs.builder()
                    .bucketArn(exampleBucket.arn())
                    .build())
                .build())
            .build());

    }
}

    resources:
  example:
    type: aws:cognito:UserPool
    properties:
      name: example
  exampleBucket:
    type: aws:s3:Bucket
    name: example
    properties:
      bucket: example-bucket
      forceDestroy: true
  exampleLogDeliveryConfiguration:
    type: aws:cognito:LogDeliveryConfiguration
    name: example
    properties:
      userPoolId: ${example.id}
      logConfigurations:
        - eventSource: userNotification
          logLevel: ERROR
          s3Configuration:
            bucketArn: ${exampleBucket.arn}

    Create LogDeliveryConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LogDeliveryConfiguration(name: string, args: LogDeliveryConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def LogDeliveryConfiguration(resource_name: str,
                             args: LogDeliveryConfigurationArgs,
                             opts: Optional[ResourceOptions] = None)

@overload
def LogDeliveryConfiguration(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             user_pool_id: Optional[str] = None,
                             log_configurations: Optional[Sequence[LogDeliveryConfigurationLogConfigurationArgs]] = None,
                             region: Optional[str] = None)
    func NewLogDeliveryConfiguration(ctx *Context, name string, args LogDeliveryConfigurationArgs, opts ...ResourceOption) (*LogDeliveryConfiguration, error)
    public LogDeliveryConfiguration(string name, LogDeliveryConfigurationArgs args, CustomResourceOptions? opts = null)
    public LogDeliveryConfiguration(String name, LogDeliveryConfigurationArgs args)
public LogDeliveryConfiguration(String name, LogDeliveryConfigurationArgs args, CustomResourceOptions options)

    type: aws:cognito:LogDeliveryConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args LogDeliveryConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LogDeliveryConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LogDeliveryConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LogDeliveryConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LogDeliveryConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var logDeliveryConfigurationResource = new Aws.Cognito.LogDeliveryConfiguration("logDeliveryConfigurationResource", new()
{
    UserPoolId = "string",
    LogConfigurations = new[]
    {
        new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationArgs
        {
            EventSource = "string",
            LogLevel = "string",
            CloudWatchLogsConfiguration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs
            {
                LogGroupArn = "string",
            },
            FirehoseConfiguration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs
            {
                StreamArn = "string",
            },
            S3Configuration = new Aws.Cognito.Inputs.LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs
            {
                BucketArn = "string",
            },
        },
    },
    Region = "string",
});

    example, err := cognito.NewLogDeliveryConfiguration(ctx, "logDeliveryConfigurationResource", &cognito.LogDeliveryConfigurationArgs{
	UserPoolId: pulumi.String("string"),
	LogConfigurations: cognito.LogDeliveryConfigurationLogConfigurationArray{
		&cognito.LogDeliveryConfigurationLogConfigurationArgs{
			EventSource: pulumi.String("string"),
			LogLevel:    pulumi.String("string"),
			CloudWatchLogsConfiguration: &cognito.LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs{
				LogGroupArn: pulumi.String("string"),
			},
			FirehoseConfiguration: &cognito.LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs{
				StreamArn: pulumi.String("string"),
			},
			S3Configuration: &cognito.LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs{
				BucketArn: pulumi.String("string"),
			},
		},
	},
	Region: pulumi.String("string"),
})

    var logDeliveryConfigurationResource = new LogDeliveryConfiguration("logDeliveryConfigurationResource", LogDeliveryConfigurationArgs.builder()
    .userPoolId("string")
    .logConfigurations(LogDeliveryConfigurationLogConfigurationArgs.builder()
        .eventSource("string")
        .logLevel("string")
        .cloudWatchLogsConfiguration(LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs.builder()
            .logGroupArn("string")
            .build())
        .firehoseConfiguration(LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs.builder()
            .streamArn("string")
            .build())
        .s3Configuration(LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs.builder()
            .bucketArn("string")
            .build())
        .build())
    .region("string")
    .build());

    log_delivery_configuration_resource = aws.cognito.LogDeliveryConfiguration("logDeliveryConfigurationResource",
    user_pool_id="string",
    log_configurations=[{
        "event_source": "string",
        "log_level": "string",
        "cloud_watch_logs_configuration": {
            "log_group_arn": "string",
        },
        "firehose_configuration": {
            "stream_arn": "string",
        },
        "s3_configuration": {
            "bucket_arn": "string",
        },
    }],
    region="string")

    const logDeliveryConfigurationResource = new aws.cognito.LogDeliveryConfiguration("logDeliveryConfigurationResource", {
    userPoolId: "string",
    logConfigurations: [{
        eventSource: "string",
        logLevel: "string",
        cloudWatchLogsConfiguration: {
            logGroupArn: "string",
        },
        firehoseConfiguration: {
            streamArn: "string",
        },
        s3Configuration: {
            bucketArn: "string",
        },
    }],
    region: "string",
});

    type: aws:cognito:LogDeliveryConfiguration
properties:
    logConfigurations:
        - cloudWatchLogsConfiguration:
            logGroupArn: string
          eventSource: string
          firehoseConfiguration:
            streamArn: string
          logLevel: string
          s3Configuration:
            bucketArn: string
    region: string
    userPoolId: string

    LogDeliveryConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LogDeliveryConfiguration resource accepts the following input properties:

    UserPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    LogConfigurations List<LogDeliveryConfigurationLogConfiguration>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    Region string
    The AWS region.
    UserPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    LogConfigurations []LogDeliveryConfigurationLogConfigurationArgs
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    Region string
    The AWS region.
    userPoolId String

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations List<LogDeliveryConfigurationLogConfiguration>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region String
    The AWS region.
    userPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations LogDeliveryConfigurationLogConfiguration[]
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region string
    The AWS region.
    user_pool_id str

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    log_configurations Sequence[LogDeliveryConfigurationLogConfigurationArgs]
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region str
    The AWS region.
    userPoolId String

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations List<Property Map>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region String
    The AWS region.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LogDeliveryConfiguration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing LogDeliveryConfiguration Resource

    Get an existing LogDeliveryConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: LogDeliveryConfigurationState, opts?: CustomResourceOptions): LogDeliveryConfiguration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        log_configurations: Optional[Sequence[LogDeliveryConfigurationLogConfigurationArgs]] = None,
        region: Optional[str] = None,
        user_pool_id: Optional[str] = None) -> LogDeliveryConfiguration
    func GetLogDeliveryConfiguration(ctx *Context, name string, id IDInput, state *LogDeliveryConfigurationState, opts ...ResourceOption) (*LogDeliveryConfiguration, error)
    public static LogDeliveryConfiguration Get(string name, Input<string> id, LogDeliveryConfigurationState? state, CustomResourceOptions? opts = null)
    public static LogDeliveryConfiguration get(String name, Output<String> id, LogDeliveryConfigurationState state, CustomResourceOptions options)
    resources:  _:    type: aws:cognito:LogDeliveryConfiguration    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    LogConfigurations List<LogDeliveryConfigurationLogConfiguration>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    Region string
    The AWS region.
    UserPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    LogConfigurations []LogDeliveryConfigurationLogConfigurationArgs
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    Region string
    The AWS region.
    UserPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations List<LogDeliveryConfigurationLogConfiguration>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region String
    The AWS region.
    userPoolId String

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations LogDeliveryConfigurationLogConfiguration[]
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region string
    The AWS region.
    userPoolId string

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    log_configurations Sequence[LogDeliveryConfigurationLogConfigurationArgs]
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region str
    The AWS region.
    user_pool_id str

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    logConfigurations List<Property Map>
    Configuration block for log delivery. At least one configuration block is required. See Log Configurations below.
    region String
    The AWS region.
    userPoolId String

    The ID of the user pool for which to configure log delivery.

    The following arguments are optional:

    Supporting Types

    LogDeliveryConfigurationLogConfiguration, LogDeliveryConfigurationLogConfigurationArgs

    EventSource string
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    LogLevel string
    The log level to set for the event source. Valid values are ERROR and INFO.
    CloudWatchLogsConfiguration LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    FirehoseConfiguration LogDeliveryConfigurationLogConfigurationFirehoseConfiguration
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    S3Configuration LogDeliveryConfigurationLogConfigurationS3Configuration

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    EventSource string
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    LogLevel string
    The log level to set for the event source. Valid values are ERROR and INFO.
    CloudWatchLogsConfiguration LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    FirehoseConfiguration LogDeliveryConfigurationLogConfigurationFirehoseConfiguration
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    S3Configuration LogDeliveryConfigurationLogConfigurationS3Configuration

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    eventSource String
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    logLevel String
    The log level to set for the event source. Valid values are ERROR and INFO.
    cloudWatchLogsConfiguration LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    firehoseConfiguration LogDeliveryConfigurationLogConfigurationFirehoseConfiguration
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    s3Configuration LogDeliveryConfigurationLogConfigurationS3Configuration

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    eventSource string
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    logLevel string
    The log level to set for the event source. Valid values are ERROR and INFO.
    cloudWatchLogsConfiguration LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    firehoseConfiguration LogDeliveryConfigurationLogConfigurationFirehoseConfiguration
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    s3Configuration LogDeliveryConfigurationLogConfigurationS3Configuration

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    event_source str
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    log_level str
    The log level to set for the event source. Valid values are ERROR and INFO.
    cloud_watch_logs_configuration LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    firehose_configuration LogDeliveryConfigurationLogConfigurationFirehoseConfiguration
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    s3_configuration LogDeliveryConfigurationLogConfigurationS3Configuration

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    eventSource String
    The event source to configure logging for. Valid values are userNotification and userAuthEvents.
    logLevel String
    The log level to set for the event source. Valid values are ERROR and INFO.
    cloudWatchLogsConfiguration Property Map
    Configuration for CloudWatch Logs delivery. See CloudWatch Logs Configuration below.
    firehoseConfiguration Property Map
    Configuration for Kinesis Data Firehose delivery. See Firehose Configuration below.
    s3Configuration Property Map

    Configuration for S3 delivery. See S3 Configuration below.

    Note: At least one destination configuration (cloud_watch_logs_configuration, firehose_configuration, or s3_configuration) must be specified for each log configuration.

    LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfiguration, LogDeliveryConfigurationLogConfigurationCloudWatchLogsConfigurationArgs

    LogGroupArn string
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.
    LogGroupArn string
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.
    logGroupArn String
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.
    logGroupArn string
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.
    log_group_arn str
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.
    logGroupArn String
    The ARN of the CloudWatch Logs log group to which the logs should be delivered.

    LogDeliveryConfigurationLogConfigurationFirehoseConfiguration, LogDeliveryConfigurationLogConfigurationFirehoseConfigurationArgs

    StreamArn string
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
    StreamArn string
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
    streamArn String
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
    streamArn string
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
    stream_arn str
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.
    streamArn String
    The ARN of the Kinesis Data Firehose delivery stream to which the logs should be delivered.

    LogDeliveryConfigurationLogConfigurationS3Configuration, LogDeliveryConfigurationLogConfigurationS3ConfigurationArgs

    BucketArn string
    The ARN of the S3 bucket to which the logs should be delivered.
    BucketArn string
    The ARN of the S3 bucket to which the logs should be delivered.
    bucketArn String
    The ARN of the S3 bucket to which the logs should be delivered.
    bucketArn string
    The ARN of the S3 bucket to which the logs should be delivered.
    bucket_arn str
    The ARN of the S3 bucket to which the logs should be delivered.
    bucketArn String
    The ARN of the S3 bucket to which the logs should be delivered.

    Import

    Using pulumi import, import Cognito IDP (Identity Provider) Log Delivery Configuration using the user_pool_id. For example:

    $ pulumi import aws:cognito/logDeliveryConfiguration:LogDeliveryConfiguration example us-west-2_example123

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    AWS v7.4.0 published on Wednesday, Aug 13, 2025 by Pulumi
    pulumi/pulumi-aws