AWS::Cognito::LogDeliveryConfiguration CloudWatchLogsConfiguration - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::Cognito::LogDeliveryConfiguration CloudWatchLogsConfiguration

The CloudWatch logging destination of a user pool detailed activity logging configuration.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "LogGroupArn" : String }


LogGroupArn: String



The Amazon Resource Name (arn) of a CloudWatch Logs log group where your user pool sends logs. The log group must not be encrypted with Amazon Key Management Service and must be in the same Amazon account as your user pool.

To send logs to log groups with a resource policy of a size greater than 5120 characters, configure a log group with a path that starts with /aws/vendedlogs. For more information, see Enabling logging from certain Amazon services.

Required: No

Type: String

Minimum: 20

Maximum: 2048

Pattern: arn:[\w+=/,.@-]+:[\w+=/,.@-]+:([\w+=/,.@-]*)?:[0-9]+:[\w+=/,.@-]+(:[\w+=/,.@-]+)?(:[\w+=/,.@-]+)?

Update requires: No interruption