Fixes #1494. * Add import support for `google_logging_organization_sink`, `google_logging_folder_sink`, `google_logging_billing_account_sink`. Using `StateFunc` over `DiffSuppressFunc` should only affect tests; for some reason `TestAccLoggingFolderSink_folderAcceptsFullFolderPath` expected a `folder` value of `folders/{{id}}` vs expecting `{{id}}` when only `DiffSuppressFunc` was used, when in real use `DiffSuppressFunc` should be sufficient.
2.8 KiB
layout | page_title | sidebar_current | description |
---|---|---|---|
Google: google_logging_billing_account_sink | docs-google-logging-billing-account-sink | Manages a billing account logging sink. |
google_logging_billing_account_sink
Manages a billing account logging sink. For more information see the official documentation and Exporting Logs in the API.
~> Note You must have the "Logs Configuration Writer" IAM role (roles/logging.configWriter
)
granted on the billing account to
the credentials used with Terraform. IAM roles granted on a billing account are separate from the
typical IAM roles granted on a project.
Example Usage
resource "google_logging_billing_account_sink" "my-sink" {
name = "my-sink"
billing_account = "ABCDEF-012345-GHIJKL"
# Can export to pubsub, cloud storage, or bigtable
destination = "storage.googleapis.com/${google_storage_bucket.log-bucket.name}"
}
resource "google_storage_bucket" "log-bucket" {
name = "billing-logging-bucket"
}
resource "google_project_iam_binding" "log-writer" {
role = "roles/storage.objectCreator"
members = [
"${google_logging_billing_account_sink.my-sink.writer_identity}",
]
}
Argument Reference
The following arguments are supported:
-
name
- (Required) The name of the logging sink. -
billing_account
- (Required) The billing account exported to the sink. -
destination
- (Required) The destination of the sink (or, in other words, where logs are written to). Can be a Cloud Storage bucket, a PubSub topic, or a BigQuery dataset. Examples:
"storage.googleapis.com/[GCS_BUCKET]"
"bigquery.googleapis.com/projects/[PROJECT_ID]/datasets/[DATASET]"
"pubsub.googleapis.com/projects/[PROJECT_ID]/topics/[TOPIC_ID]"
The writer associated with the sink must have access to write to the above resource.
filter
- (Optional) The filter to apply when exporting logs. Only log entries that match the filter are exported. See Advanced Log Filters for information on how to write a filter.
Attributes Reference
In addition to the arguments listed above, the following computed attributes are exported:
writer_identity
- The identity associated with this sink. This identity must be granted write access to the configureddestination
.
Import
Billing account logging sinks can be imported using this format:
$ terraform import google_logging_billing_account_sink.my_sink billingAccounts/{{billing_account_id}}/sinks/{{sink_id}}