diff --git a/website/source/docs/providers/aws/r/flow_log.html.markdown b/website/source/docs/providers/aws/r/flow_log.html.markdown new file mode 100644 index 000000000..02559e96e --- /dev/null +++ b/website/source/docs/providers/aws/r/flow_log.html.markdown @@ -0,0 +1,40 @@ +--- +layout: "aws" +page_title: "AWS: aws_flow_log" +sidebar_current: "docs-aws-resource-flow-log" +description: |- + Provides a VPC/Subnet/ENI Flow Log +--- + +# aws\_flow\_log + +Provides a VPC/Subnet/ENI Flow Log to capture IP traffic for a specific network +interface, subnet, or VPC. Logs are sent to a CloudWatch Log Group. + +``` +resource "aws_flow_log" "test_flow_log" { + log_group_name = "tf-test-log-group" + iam_role_arn = "arn:aws:iam::470663696735:role/tf-test-cloud" + vpc_id = "${aws_vpc.default.id}" + traffic_type = "ALL" +} +``` + +## Argument Reference + +The following arguments are supported: + +* `log_group_name` - (Required) The name of the CloudWatch log group +* `iam_role_arn` - (Required) The ARN for the IAM role that's used to post flow + logs to a CloudWatch Logs log group +* `vpc_id` - (Optional) VPC ID to attach to +* `subnet_id` - (Optional) Subnet ID to attach to +* `eni_id` - (Optional) Elastic Network Interface ID to attach to +* `traffic_type` - (Required) The type of traffic to capture. Valid values: + `ACCEPT`,`REJECT`, `ALL` + +## Attributes Reference + +The following attributes are exported: + +* `id` - The Flow Log ID diff --git a/website/source/layouts/aws.erb b/website/source/layouts/aws.erb index 7afd00060..3e17133e1 100644 --- a/website/source/layouts/aws.erb +++ b/website/source/layouts/aws.erb @@ -81,6 +81,10 @@ aws_elb + > + aws_flow_log + + > aws_iam_access_key