View a markdown version of this page

AWS::ObservabilityAdmin::OrganizationCentralizationRule TagPropagationConfiguration - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::ObservabilityAdmin::OrganizationCentralizationRule TagPropagationConfiguration

Specifies configuration for propagating resource tags from source log groups to centralized destination log groups. The service uses a customer-managed IAM role in the destination account to add, update, and remove tags on destination log groups.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "DestinationRoleArn" : String,
  "TagConflictResolutionStrategy" : String
}

Properties

DestinationRoleArn

The ARN of a customer-managed IAM role in the destination account. The service assumes this role to propagate tags to destination log groups. You must have iam:PassRole permission on this role.

Required: Yes

Type: String

Pattern: ^arn:aws[a-zA-Z-]*:iam::\d{12}:role/[\w+=,.@/-]+$

Minimum: 20

Maximum: 2048

Update requires: No interruption

TagConflictResolutionStrategy

The strategy for resolving conflicts when a tag key exists on both the source and destination log groups. If not specified, defaults to UPDATE_SYNC.

  • ADD_ONLY – Only adds new tags from the source without modifying existing destination tags.

  • UPDATE_SYNC – Adds new tags and updates existing tags from the source. Does not remove destination tags that are absent from the source.

  • IN_SYNC – Keeps destination tags fully synchronized with source tags, including removing destination tags that do not exist on the source.

Required: No

Type: String

Allowed values: IN_SYNC | ADD_ONLY | UPDATE_SYNC

Update requires: No interruption