1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234
|
// Code generated by smithy-go-codegen DO NOT EDIT.
package ec2
import (
"context"
"fmt"
awsmiddleware "github.com/aws/aws-sdk-go-v2/aws/middleware"
"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
"github.com/aws/aws-sdk-go-v2/service/ec2/types"
"github.com/aws/smithy-go/middleware"
smithyhttp "github.com/aws/smithy-go/transport/http"
)
// Creates one or more flow logs to capture information about IP traffic for a
// specific network interface, subnet, or VPC. Flow log data for a monitored
// network interface is recorded as flow log records, which are log events
// consisting of fields that describe the traffic flow. For more information, see
// Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records)
// in the Amazon Virtual Private Cloud User Guide. When publishing to CloudWatch
// Logs, flow log records are published to a log group, and each network interface
// has a unique log stream in the log group. When publishing to Amazon S3, flow log
// records for all of the monitored network interfaces are published to a single
// log file object that is stored in the specified bucket. For more information,
// see VPC Flow Logs (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html)
// in the Amazon Virtual Private Cloud User Guide.
func (c *Client) CreateFlowLogs(ctx context.Context, params *CreateFlowLogsInput, optFns ...func(*Options)) (*CreateFlowLogsOutput, error) {
if params == nil {
params = &CreateFlowLogsInput{}
}
result, metadata, err := c.invokeOperation(ctx, "CreateFlowLogs", params, optFns, c.addOperationCreateFlowLogsMiddlewares)
if err != nil {
return nil, err
}
out := result.(*CreateFlowLogsOutput)
out.ResultMetadata = metadata
return out, nil
}
type CreateFlowLogsInput struct {
// The IDs of the resources to monitor. For example, if the resource type is VPC ,
// specify the IDs of the VPCs. Constraints: Maximum of 25 for transit gateway
// resource types. Maximum of 1000 for the other resource types.
//
// This member is required.
ResourceIds []string
// The type of resource to monitor.
//
// This member is required.
ResourceType types.FlowLogsResourceType
// Unique, case-sensitive identifier that you provide to ensure the idempotency of
// the request. For more information, see How to ensure idempotency (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html)
// .
ClientToken *string
// The ARN of the IAM role that allows Amazon EC2 to publish flow logs across
// accounts.
DeliverCrossAccountRole *string
// The ARN of the IAM role that allows Amazon EC2 to publish flow logs to a
// CloudWatch Logs log group in your account. This parameter is required if the
// destination type is cloud-watch-logs and unsupported otherwise.
DeliverLogsPermissionArn *string
// The destination options.
DestinationOptions *types.DestinationOptionsRequest
// Checks whether you have the required permissions for the action, without
// actually making the request, and provides an error response. If you have the
// required permissions, the error response is DryRunOperation . Otherwise, it is
// UnauthorizedOperation .
DryRun *bool
// The destination for the flow log data. The meaning of this parameter depends on
// the destination type.
// - If the destination type is cloud-watch-logs , specify the ARN of a
// CloudWatch Logs log group. For example:
// arn:aws:logs:region:account_id:log-group:my_group Alternatively, use the
// LogGroupName parameter.
// - If the destination type is s3 , specify the ARN of an S3 bucket. For
// example: arn:aws:s3:::my_bucket/my_subfolder/ The subfolder is optional. Note
// that you can't use AWSLogs as a subfolder name.
// - If the destination type is kinesis-data-firehose , specify the ARN of a
// Kinesis Data Firehose delivery stream. For example:
// arn:aws:firehose:region:account_id:deliverystream:my_stream
LogDestination *string
// The type of destination for the flow log data. Default: cloud-watch-logs
LogDestinationType types.LogDestinationType
// The fields to include in the flow log record. List the fields in the order in
// which they should appear. If you omit this parameter, the flow log is created
// using the default format. If you specify this parameter, you must include at
// least one field. For more information about the available fields, see Flow log
// records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records)
// in the Amazon VPC User Guide or Transit Gateway Flow Log records (https://docs.aws.amazon.com/vpc/latest/tgw/tgw-flow-logs.html#flow-log-records)
// in the Amazon Web Services Transit Gateway Guide. Specify the fields using the
// ${field-id} format, separated by spaces.
LogFormat *string
// The name of a new or existing CloudWatch Logs log group where Amazon EC2
// publishes your flow logs. This parameter is valid only if the destination type
// is cloud-watch-logs .
LogGroupName *string
// The maximum interval of time during which a flow of packets is captured and
// aggregated into a flow log record. The possible values are 60 seconds (1 minute)
// or 600 seconds (10 minutes). This parameter must be 60 seconds for transit
// gateway resource types. When a network interface is attached to a Nitro-based
// instance (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances)
// , the aggregation interval is always 60 seconds or less, regardless of the value
// that you specify. Default: 600
MaxAggregationInterval *int32
// The tags to apply to the flow logs.
TagSpecifications []types.TagSpecification
// The type of traffic to monitor (accepted traffic, rejected traffic, or all
// traffic). This parameter is not supported for transit gateway resource types. It
// is required for the other resource types.
TrafficType types.TrafficType
noSmithyDocumentSerde
}
type CreateFlowLogsOutput struct {
// Unique, case-sensitive identifier that you provide to ensure the idempotency of
// the request.
ClientToken *string
// The IDs of the flow logs.
FlowLogIds []string
// Information about the flow logs that could not be created successfully.
Unsuccessful []types.UnsuccessfulItem
// Metadata pertaining to the operation's result.
ResultMetadata middleware.Metadata
noSmithyDocumentSerde
}
func (c *Client) addOperationCreateFlowLogsMiddlewares(stack *middleware.Stack, options Options) (err error) {
if err := stack.Serialize.Add(&setOperationInputMiddleware{}, middleware.After); err != nil {
return err
}
err = stack.Serialize.Add(&awsEc2query_serializeOpCreateFlowLogs{}, middleware.After)
if err != nil {
return err
}
err = stack.Deserialize.Add(&awsEc2query_deserializeOpCreateFlowLogs{}, middleware.After)
if err != nil {
return err
}
if err := addProtocolFinalizerMiddlewares(stack, options, "CreateFlowLogs"); err != nil {
return fmt.Errorf("add protocol finalizers: %v", err)
}
if err = addlegacyEndpointContextSetter(stack, options); err != nil {
return err
}
if err = addSetLoggerMiddleware(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddClientRequestIDMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddComputeContentLengthMiddleware(stack); err != nil {
return err
}
if err = addResolveEndpointMiddleware(stack, options); err != nil {
return err
}
if err = v4.AddComputePayloadSHA256Middleware(stack); err != nil {
return err
}
if err = addRetryMiddlewares(stack, options); err != nil {
return err
}
if err = awsmiddleware.AddRawResponseToMetadata(stack); err != nil {
return err
}
if err = awsmiddleware.AddRecordResponseTiming(stack); err != nil {
return err
}
if err = addClientUserAgent(stack, options); err != nil {
return err
}
if err = smithyhttp.AddErrorCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = smithyhttp.AddCloseResponseBodyMiddleware(stack); err != nil {
return err
}
if err = addSetLegacyContextSigningOptionsMiddleware(stack); err != nil {
return err
}
if err = addOpCreateFlowLogsValidationMiddleware(stack); err != nil {
return err
}
if err = stack.Initialize.Add(newServiceMetadataMiddleware_opCreateFlowLogs(options.Region), middleware.Before); err != nil {
return err
}
if err = awsmiddleware.AddRecursionDetection(stack); err != nil {
return err
}
if err = addRequestIDRetrieverMiddleware(stack); err != nil {
return err
}
if err = addResponseErrorMiddleware(stack); err != nil {
return err
}
if err = addRequestResponseLogging(stack, options); err != nil {
return err
}
if err = addDisableHTTPSMiddleware(stack, options); err != nil {
return err
}
return nil
}
func newServiceMetadataMiddleware_opCreateFlowLogs(region string) *awsmiddleware.RegisterServiceMetadata {
return &awsmiddleware.RegisterServiceMetadata{
Region: region,
ServiceID: ServiceID,
OperationName: "CreateFlowLogs",
}
}
|