Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. AWS
  4. API Docs
  5. observabilityadmin
  6. S3TableIntegration
Viewing docs for AWS v7.33.0
published on Monday, Jun 15, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.observabilityadmin.S3TableIntegration

aws logo
Viewing docs for AWS v7.33.0
published on Monday, Jun 15, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Manages a CloudWatch Observability Admin S3 Table Integration. This integration enables CloudWatch to duplicate telemetry data to Amazon S3 Tables, making it available for analysis by tools such as Amazon Athena and Amazon Redshift.

    For more information, see the CloudWatch Logs S3 Tables integration documentation.

    Example Usage

    Basic Integration with AES256 Encryption

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.iam.Role("example", {
    name: "example-s3-table-integration",
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Effect: "Allow",
            Principal: {
                Service: "logs.amazonaws.com",
            },
        }],
    }),
});
const exampleRolePolicy = new aws.iam.RolePolicy("example", {
    role: example.name,
    policy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Effect: "Allow",
            Action: [
                "s3tables:CreateTableBucket",
                "s3tables:ListTableBuckets",
                "s3tables:GetTableBucket",
                "s3tables:CreateNamespace",
                "s3tables:GetNamespace",
                "s3tables:ListNamespaces",
                "s3tables:CreateTable",
                "s3tables:GetTable",
                "s3tables:ListTables",
                "s3tables:PutTableData",
                "s3tables:GetTableData",
            ],
            Resource: "*",
        }],
    }),
});
const exampleS3TableIntegration = new aws.observabilityadmin.S3TableIntegration("example", {
    roleArn: example.arn,
    encryption: {
        sseAlgorithm: "AES256",
    },
});

    import pulumi
import json
import pulumi_aws as aws

example = aws.iam.Role("example",
    name="example-s3-table-integration",
    assume_role_policy=json.dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Action": "sts:AssumeRole",
            "Effect": "Allow",
            "Principal": {
                "Service": "logs.amazonaws.com",
            },
        }],
    }))
example_role_policy = aws.iam.RolePolicy("example",
    role=example.name,
    policy=json.dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Effect": "Allow",
            "Action": [
                "s3tables:CreateTableBucket",
                "s3tables:ListTableBuckets",
                "s3tables:GetTableBucket",
                "s3tables:CreateNamespace",
                "s3tables:GetNamespace",
                "s3tables:ListNamespaces",
                "s3tables:CreateTable",
                "s3tables:GetTable",
                "s3tables:ListTables",
                "s3tables:PutTableData",
                "s3tables:GetTableData",
            ],
            "Resource": "*",
        }],
    }))
example_s3_table_integration = aws.observabilityadmin.S3TableIntegration("example",
    role_arn=example.arn,
    encryption={
        "sse_algorithm": "AES256",
    })

    package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": "sts:AssumeRole",
					"Effect": "Allow",
					"Principal": map[string]interface{}{
						"Service": "logs.amazonaws.com",
					},
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		example, err := iam.NewRole(ctx, "example", &iam.RoleArgs{
			Name:             pulumi.String("example-s3-table-integration"),
			AssumeRolePolicy: pulumi.String(pulumi.String(json0)),
		})
		if err != nil {
			return err
		}
		tmpJSON1, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Effect": "Allow",
					"Action": []string{
						"s3tables:CreateTableBucket",
						"s3tables:ListTableBuckets",
						"s3tables:GetTableBucket",
						"s3tables:CreateNamespace",
						"s3tables:GetNamespace",
						"s3tables:ListNamespaces",
						"s3tables:CreateTable",
						"s3tables:GetTable",
						"s3tables:ListTables",
						"s3tables:PutTableData",
						"s3tables:GetTableData",
					},
					"Resource": "*",
				},
			},
		})
		if err != nil {
			return err
		}
		json1 := string(tmpJSON1)
		_, err = iam.NewRolePolicy(ctx, "example", &iam.RolePolicyArgs{
			Role:   example.Name,
			Policy: pulumi.String(pulumi.String(json1)),
		})
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewS3TableIntegration(ctx, "example", &observabilityadmin.S3TableIntegrationArgs{
			RoleArn: example.Arn,
			Encryption: &observabilityadmin.S3TableIntegrationEncryptionArgs{
				SseAlgorithm: pulumi.String("AES256"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Iam.Role("example", new()
    {
        Name = "example-s3-table-integration",
        AssumeRolePolicy = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Action"] = "sts:AssumeRole",
                    ["Effect"] = "Allow",
                    ["Principal"] = new Dictionary<string, object?>
                    {
                        ["Service"] = "logs.amazonaws.com",
                    },
                },
            },
        }),
    });

    var exampleRolePolicy = new Aws.Iam.RolePolicy("example", new()
    {
        Role = example.Name,
        Policy = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Effect"] = "Allow",
                    ["Action"] = new[]
                    {
                        "s3tables:CreateTableBucket",
                        "s3tables:ListTableBuckets",
                        "s3tables:GetTableBucket",
                        "s3tables:CreateNamespace",
                        "s3tables:GetNamespace",
                        "s3tables:ListNamespaces",
                        "s3tables:CreateTable",
                        "s3tables:GetTable",
                        "s3tables:ListTables",
                        "s3tables:PutTableData",
                        "s3tables:GetTableData",
                    },
                    ["Resource"] = "*",
                },
            },
        }),
    });

    var exampleS3TableIntegration = new Aws.Observabilityadmin.S3TableIntegration("example", new()
    {
        RoleArn = example.Arn,
        Encryption = new Aws.Observabilityadmin.Inputs.S3TableIntegrationEncryptionArgs
        {
            SseAlgorithm = "AES256",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.iam.RolePolicy;
import com.pulumi.aws.iam.RolePolicyArgs;
import com.pulumi.aws.observabilityadmin.S3TableIntegration;
import com.pulumi.aws.observabilityadmin.S3TableIntegrationArgs;
import com.pulumi.aws.observabilityadmin.inputs.S3TableIntegrationEncryptionArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Role("example", RoleArgs.builder()
            .name("example-s3-table-integration")
            .assumeRolePolicy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Action", "sts:AssumeRole"),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("Service", "logs.amazonaws.com")
                        ))
                    )))
                )))
            .build());

        var exampleRolePolicy = new RolePolicy("exampleRolePolicy", RolePolicyArgs.builder()
            .role(example.name())
            .policy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Action", jsonArray(
                            "s3tables:CreateTableBucket", 
                            "s3tables:ListTableBuckets", 
                            "s3tables:GetTableBucket", 
                            "s3tables:CreateNamespace", 
                            "s3tables:GetNamespace", 
                            "s3tables:ListNamespaces", 
                            "s3tables:CreateTable", 
                            "s3tables:GetTable", 
                            "s3tables:ListTables", 
                            "s3tables:PutTableData", 
                            "s3tables:GetTableData"
                        )),
                        jsonProperty("Resource", "*")
                    )))
                )))
            .build());

        var exampleS3TableIntegration = new S3TableIntegration("exampleS3TableIntegration", S3TableIntegrationArgs.builder()
            .roleArn(example.arn())
            .encryption(S3TableIntegrationEncryptionArgs.builder()
                .sseAlgorithm("AES256")
                .build())
            .build());

    }
}

    resources:
  example:
    type: aws:iam:Role
    properties:
      name: example-s3-table-integration
      assumeRolePolicy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Action: sts:AssumeRole
              Effect: Allow
              Principal:
                Service: logs.amazonaws.com
  exampleRolePolicy:
    type: aws:iam:RolePolicy
    name: example
    properties:
      role: ${example.name}
      policy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Effect: Allow
              Action:
                - s3tables:CreateTableBucket
                - s3tables:ListTableBuckets
                - s3tables:GetTableBucket
                - s3tables:CreateNamespace
                - s3tables:GetNamespace
                - s3tables:ListNamespaces
                - s3tables:CreateTable
                - s3tables:GetTable
                - s3tables:ListTables
                - s3tables:PutTableData
                - s3tables:GetTableData
              Resource: '*'
  exampleS3TableIntegration:
    type: aws:observabilityadmin:S3TableIntegration
    name: example
    properties:
      roleArn: ${example.arn}
      encryption:
        sseAlgorithm: AES256

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_iam_role" "example" {
  name = "example-s3-table-integration"
  assume_role_policy = jsonencode({
    "Version" = "2012-10-17"
    "Statement" = [{
      "Action" = "sts:AssumeRole"
      "Effect" = "Allow"
      "Principal" = {
        "Service" = "logs.amazonaws.com"
      }
    }]
  })
}
resource "aws_iam_rolepolicy" "example" {
  role = aws_iam_role.example.name
  policy = jsonencode({
    "Version" = "2012-10-17"
    "Statement" = [{
      "Effect"   = "Allow"
      "Action"   = ["s3tables:CreateTableBucket", "s3tables:ListTableBuckets", "s3tables:GetTableBucket", "s3tables:CreateNamespace", "s3tables:GetNamespace", "s3tables:ListNamespaces", "s3tables:CreateTable", "s3tables:GetTable", "s3tables:ListTables", "s3tables:PutTableData", "s3tables:GetTableData"]
      "Resource" = "*"
    }]
  })
}
resource "aws_observabilityadmin_s3tableintegration" "example" {
  role_arn = aws_iam_role.example.arn
  encryption = {
    sse_algorithm = "AES256"
  }
}

    Integration with KMS Encryption

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.iam.Role("example", {
    name: "example-s3-table-integration",
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Effect: "Allow",
            Principal: {
                Service: "logs.amazonaws.com",
            },
        }],
    }),
});
const exampleKey = new aws.kms.Key("example", {
    description: "S3 Table Integration KMS key",
    deletionWindowInDays: 7,
});
const exampleS3TableIntegration = new aws.observabilityadmin.S3TableIntegration("example", {
    roleArn: example.arn,
    encryption: {
        sseAlgorithm: "aws:kms",
        kmsKeyArn: exampleKey.arn,
    },
});

    import pulumi
import json
import pulumi_aws as aws

example = aws.iam.Role("example",
    name="example-s3-table-integration",
    assume_role_policy=json.dumps({
        "Version": "2012-10-17",
        "Statement": [{
            "Action": "sts:AssumeRole",
            "Effect": "Allow",
            "Principal": {
                "Service": "logs.amazonaws.com",
            },
        }],
    }))
example_key = aws.kms.Key("example",
    description="S3 Table Integration KMS key",
    deletion_window_in_days=7)
example_s3_table_integration = aws.observabilityadmin.S3TableIntegration("example",
    role_arn=example.arn,
    encryption={
        "sse_algorithm": "aws:kms",
        "kms_key_arn": example_key.arn,
    })

    package main

import (
	"encoding/json"

	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/kms"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/observabilityadmin"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"Version": "2012-10-17",
			"Statement": []map[string]interface{}{
				map[string]interface{}{
					"Action": "sts:AssumeRole",
					"Effect": "Allow",
					"Principal": map[string]interface{}{
						"Service": "logs.amazonaws.com",
					},
				},
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		example, err := iam.NewRole(ctx, "example", &iam.RoleArgs{
			Name:             pulumi.String("example-s3-table-integration"),
			AssumeRolePolicy: pulumi.String(pulumi.String(json0)),
		})
		if err != nil {
			return err
		}
		exampleKey, err := kms.NewKey(ctx, "example", &kms.KeyArgs{
			Description:          pulumi.String("S3 Table Integration KMS key"),
			DeletionWindowInDays: pulumi.Int(7),
		})
		if err != nil {
			return err
		}
		_, err = observabilityadmin.NewS3TableIntegration(ctx, "example", &observabilityadmin.S3TableIntegrationArgs{
			RoleArn: example.Arn,
			Encryption: &observabilityadmin.S3TableIntegrationEncryptionArgs{
				SseAlgorithm: pulumi.String("aws:kms"),
				KmsKeyArn:    exampleKey.Arn,
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using System.Text.Json;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Iam.Role("example", new()
    {
        Name = "example-s3-table-integration",
        AssumeRolePolicy = JsonSerializer.Serialize(new Dictionary<string, object?>
        {
            ["Version"] = "2012-10-17",
            ["Statement"] = new[]
            {
                new Dictionary<string, object?>
                {
                    ["Action"] = "sts:AssumeRole",
                    ["Effect"] = "Allow",
                    ["Principal"] = new Dictionary<string, object?>
                    {
                        ["Service"] = "logs.amazonaws.com",
                    },
                },
            },
        }),
    });

    var exampleKey = new Aws.Kms.Key("example", new()
    {
        Description = "S3 Table Integration KMS key",
        DeletionWindowInDays = 7,
    });

    var exampleS3TableIntegration = new Aws.Observabilityadmin.S3TableIntegration("example", new()
    {
        RoleArn = example.Arn,
        Encryption = new Aws.Observabilityadmin.Inputs.S3TableIntegrationEncryptionArgs
        {
            SseAlgorithm = "aws:kms",
            KmsKeyArn = exampleKey.Arn,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.kms.Key;
import com.pulumi.aws.kms.KeyArgs;
import com.pulumi.aws.observabilityadmin.S3TableIntegration;
import com.pulumi.aws.observabilityadmin.S3TableIntegrationArgs;
import com.pulumi.aws.observabilityadmin.inputs.S3TableIntegrationEncryptionArgs;
import static com.pulumi.codegen.internal.Serialization.*;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Role("example", RoleArgs.builder()
            .name("example-s3-table-integration")
            .assumeRolePolicy(serializeJson(
                jsonObject(
                    jsonProperty("Version", "2012-10-17"),
                    jsonProperty("Statement", jsonArray(jsonObject(
                        jsonProperty("Action", "sts:AssumeRole"),
                        jsonProperty("Effect", "Allow"),
                        jsonProperty("Principal", jsonObject(
                            jsonProperty("Service", "logs.amazonaws.com")
                        ))
                    )))
                )))
            .build());

        var exampleKey = new Key("exampleKey", KeyArgs.builder()
            .description("S3 Table Integration KMS key")
            .deletionWindowInDays(7)
            .build());

        var exampleS3TableIntegration = new S3TableIntegration("exampleS3TableIntegration", S3TableIntegrationArgs.builder()
            .roleArn(example.arn())
            .encryption(S3TableIntegrationEncryptionArgs.builder()
                .sseAlgorithm("aws:kms")
                .kmsKeyArn(exampleKey.arn())
                .build())
            .build());

    }
}

    resources:
  example:
    type: aws:iam:Role
    properties:
      name: example-s3-table-integration
      assumeRolePolicy:
        fn::toJSON:
          Version: 2012-10-17
          Statement:
            - Action: sts:AssumeRole
              Effect: Allow
              Principal:
                Service: logs.amazonaws.com
  exampleKey:
    type: aws:kms:Key
    name: example
    properties:
      description: S3 Table Integration KMS key
      deletionWindowInDays: 7
  exampleS3TableIntegration:
    type: aws:observabilityadmin:S3TableIntegration
    name: example
    properties:
      roleArn: ${example.arn}
      encryption:
        sseAlgorithm: aws:kms
        kmsKeyArn: ${exampleKey.arn}

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_iam_role" "example" {
  name = "example-s3-table-integration"
  assume_role_policy = jsonencode({
    "Version" = "2012-10-17"
    "Statement" = [{
      "Action" = "sts:AssumeRole"
      "Effect" = "Allow"
      "Principal" = {
        "Service" = "logs.amazonaws.com"
      }
    }]
  })
}
resource "aws_kms_key" "example" {
  description             = "S3 Table Integration KMS key"
  deletion_window_in_days = 7
}
resource "aws_observabilityadmin_s3tableintegration" "example" {
  role_arn = aws_iam_role.example.arn
  encryption = {
    sse_algorithm = "aws:kms"
    kms_key_arn   = aws_kms_key.example.arn
  }
}

    Create S3TableIntegration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new S3TableIntegration(name: string, args: S3TableIntegrationArgs, opts?: CustomResourceOptions);
    @overload
def S3TableIntegration(resource_name: str,
                       args: S3TableIntegrationArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def S3TableIntegration(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       encryption: Optional[S3TableIntegrationEncryptionArgs] = None,
                       role_arn: Optional[str] = None,
                       region: Optional[str] = None,
                       tags: Optional[Mapping[str, str]] = None,
                       timeouts: Optional[S3TableIntegrationTimeoutsArgs] = None)
    func NewS3TableIntegration(ctx *Context, name string, args S3TableIntegrationArgs, opts ...ResourceOption) (*S3TableIntegration, error)
    public S3TableIntegration(string name, S3TableIntegrationArgs args, CustomResourceOptions? opts = null)
    public S3TableIntegration(String name, S3TableIntegrationArgs args)
public S3TableIntegration(String name, S3TableIntegrationArgs args, CustomResourceOptions options)

    type: aws:observabilityadmin:S3TableIntegration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws_observabilityadmin_s3tableintegration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args S3TableIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args S3TableIntegrationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args S3TableIntegrationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args S3TableIntegrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args S3TableIntegrationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var s3tableIntegrationResource = new Aws.Observabilityadmin.S3TableIntegration("s3tableIntegrationResource", new()
{
    Encryption = new Aws.Observabilityadmin.Inputs.S3TableIntegrationEncryptionArgs
    {
        SseAlgorithm = "string",
        KmsKeyArn = "string",
    },
    RoleArn = "string",
    Region = "string",
    Tags = 
    {
        { "string", "string" },
    },
    Timeouts = new Aws.Observabilityadmin.Inputs.S3TableIntegrationTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
    },
});

    example, err := observabilityadmin.NewS3TableIntegration(ctx, "s3tableIntegrationResource", &observabilityadmin.S3TableIntegrationArgs{
	Encryption: &observabilityadmin.S3TableIntegrationEncryptionArgs{
		SseAlgorithm: pulumi.String("string"),
		KmsKeyArn:    pulumi.String("string"),
	},
	RoleArn: pulumi.String("string"),
	Region:  pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Timeouts: &observabilityadmin.S3TableIntegrationTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
	},
})

    resource "aws_observabilityadmin_s3tableintegration" "s3tableIntegrationResource" {
  encryption = {
    sse_algorithm = "string"
    kms_key_arn   = "string"
  }
  role_arn = "string"
  region   = "string"
  tags = {
    "string" = "string"
  }
  timeouts = {
    create = "string"
    delete = "string"
  }
}

    var s3tableIntegrationResource = new S3TableIntegration("s3tableIntegrationResource", S3TableIntegrationArgs.builder()
    .encryption(S3TableIntegrationEncryptionArgs.builder()
        .sseAlgorithm("string")
        .kmsKeyArn("string")
        .build())
    .roleArn("string")
    .region("string")
    .tags(Map.of("string", "string"))
    .timeouts(S3TableIntegrationTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .build())
    .build());

    s3table_integration_resource = aws.observabilityadmin.S3TableIntegration("s3tableIntegrationResource",
    encryption={
        "sse_algorithm": "string",
        "kms_key_arn": "string",
    },
    role_arn="string",
    region="string",
    tags={
        "string": "string",
    },
    timeouts={
        "create": "string",
        "delete": "string",
    })

    const s3tableIntegrationResource = new aws.observabilityadmin.S3TableIntegration("s3tableIntegrationResource", {
    encryption: {
        sseAlgorithm: "string",
        kmsKeyArn: "string",
    },
    roleArn: "string",
    region: "string",
    tags: {
        string: "string",
    },
    timeouts: {
        create: "string",
        "delete": "string",
    },
});

    type: aws:observabilityadmin:S3TableIntegration
properties:
    encryption:
        kmsKeyArn: string
        sseAlgorithm: string
    region: string
    roleArn: string
    tags:
        string: string
    timeouts:
        create: string
        delete: string

    S3TableIntegration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The S3TableIntegration resource accepts the following input properties:

    Encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    RoleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    Tags Dictionary<string, string>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    Timeouts S3TableIntegrationTimeouts
    Encryption S3TableIntegrationEncryptionArgs
    Encryption configuration block. Documented below.
    RoleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    Tags map[string]string
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    Timeouts S3TableIntegrationTimeoutsArgs
    encryption object
    Encryption configuration block. Documented below.
    role_arn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    tags map(string)
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    timeouts object
    encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    roleArn String
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    tags Map<String,String>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    timeouts S3TableIntegrationTimeouts
    encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    roleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    tags {[key: string]: string}
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    timeouts S3TableIntegrationTimeouts
    encryption S3TableIntegrationEncryptionArgs
    Encryption configuration block. Documented below.
    role_arn str
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    tags Mapping[str, str]
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    timeouts S3TableIntegrationTimeoutsArgs
    encryption Property Map
    Encryption configuration block. Documented below.
    roleArn String
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    tags Map<String>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the S3TableIntegration resource produces the following output properties:

    Arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    DestinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    Id string
    The provider-assigned unique ID for this managed resource.
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    Arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    DestinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    Id string
    The provider-assigned unique ID for this managed resource.
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    destination_table_bucket_arn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    id string
    The provider-assigned unique ID for this managed resource.
    tags_all map(string)
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    arn String
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn String
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    id String
    The provider-assigned unique ID for this managed resource.
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    id string
    The provider-assigned unique ID for this managed resource.
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    arn str
    Amazon Resource Name (ARN) of the S3 Table integration.
    destination_table_bucket_arn str
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    id str
    The provider-assigned unique ID for this managed resource.
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    arn String
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn String
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    id String
    The provider-assigned unique ID for this managed resource.
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.

    Look up Existing S3TableIntegration Resource

    Get an existing S3TableIntegration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: S3TableIntegrationState, opts?: CustomResourceOptions): S3TableIntegration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        destination_table_bucket_arn: Optional[str] = None,
        encryption: Optional[S3TableIntegrationEncryptionArgs] = None,
        region: Optional[str] = None,
        role_arn: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        timeouts: Optional[S3TableIntegrationTimeoutsArgs] = None) -> S3TableIntegration
    func GetS3TableIntegration(ctx *Context, name string, id IDInput, state *S3TableIntegrationState, opts ...ResourceOption) (*S3TableIntegration, error)
    public static S3TableIntegration Get(string name, Input<string> id, S3TableIntegrationState? state, CustomResourceOptions? opts = null)
    public static S3TableIntegration get(String name, Output<String> id, S3TableIntegrationState state, CustomResourceOptions options)
    resources:  _:    type: aws:observabilityadmin:S3TableIntegration    get:      id: ${id}
    import {
  to = aws_observabilityadmin_s3tableintegration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    DestinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    Encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    Tags Dictionary<string, string>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll Dictionary<string, string>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    Timeouts S3TableIntegrationTimeouts
    Arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    DestinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    Encryption S3TableIntegrationEncryptionArgs
    Encryption configuration block. Documented below.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RoleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    Tags map[string]string
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    TagsAll map[string]string
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    Timeouts S3TableIntegrationTimeoutsArgs
    arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    destination_table_bucket_arn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    encryption object
    Encryption configuration block. Documented below.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_arn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    tags map(string)
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tags_all map(string)
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    timeouts object
    arn String
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn String
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleArn String
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    tags Map<String,String>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String,String>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    timeouts S3TableIntegrationTimeouts
    arn string
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn string
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    encryption S3TableIntegrationEncryption
    Encryption configuration block. Documented below.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleArn string
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    tags {[key: string]: string}
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll {[key: string]: string}
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    timeouts S3TableIntegrationTimeouts
    arn str
    Amazon Resource Name (ARN) of the S3 Table integration.
    destination_table_bucket_arn str
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    encryption S3TableIntegrationEncryptionArgs
    Encryption configuration block. Documented below.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    role_arn str
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    tags Mapping[str, str]
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tags_all Mapping[str, str]
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    timeouts S3TableIntegrationTimeoutsArgs
    arn String
    Amazon Resource Name (ARN) of the S3 Table integration.
    destinationTableBucketArn String
    ARN of the S3 Table bucket where CloudWatch data is stored. AWS automatically creates a bucket named _aws-cloudwatch_ if one does not already exist.
    encryption Property Map
    Encryption configuration block. Documented below.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    roleArn String
    Amazon Resource Name (ARN) of the IAM role that grants the S3 Table integration permissions to access necessary resources.
    tags Map<String>
    Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
    tagsAll Map<String>
    Map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
    timeouts Property Map

    Supporting Types

    S3TableIntegrationEncryption, S3TableIntegrationEncryptionArgs

    SseAlgorithm string
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    KmsKeyArn string
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    SseAlgorithm string
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    KmsKeyArn string
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    sse_algorithm string
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    kms_key_arn string
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    sseAlgorithm String
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    kmsKeyArn String
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    sseAlgorithm string
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    kmsKeyArn string
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    sse_algorithm str
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    kms_key_arn str
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.
    sseAlgorithm String
    Server-side encryption algorithm. Valid values: AES256, aws:kms.
    kmsKeyArn String
    ARN of the KMS key to use for encryption. Required when sseAlgorithm is aws:kms.

    S3TableIntegrationTimeouts, S3TableIntegrationTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

    Import

    Identity Schema

    Required

    • arn (String) ARN of the S3 Table integration.

    Using pulumi import, import CloudWatch Observability Admin S3 Table Integrations using the arn. For example:

    $ pulumi import aws:observabilityadmin/s3TableIntegration:S3TableIntegration example arn:aws:observabilityadmin:us-east-1:123456789012:s3-table-integration/example-id

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    Viewing docs for AWS v7.33.0
    published on Monday, Jun 15, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial