AWS::Logs::DeliverySource - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


This structure contains information about one delivery source in your account. A delivery source is an Amazon resource that sends logs to an Amazon destination. The destination can be CloudWatch Logs, Amazon S3, or Firehose.

Only some Amazon services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon services.

To configure logs delivery between a supported Amazon service and a destination, you must do the following:

  • Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.

  • Create a delivery destination, which is a logical object that represents the actual delivery destination. For more information, see PutDeliveryDestination.

  • If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.

  • Create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.

You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Type" : "AWS::Logs::DeliverySource", "Properties" : { "LogType" : String, "Name" : String, "ResourceArn" : String, "Tags" : [ Tag, ... ] } }


Type: AWS::Logs::DeliverySource Properties: LogType: String Name: String ResourceArn: String Tags: - Tag



The type of log that the source is sending. For valid values for this parameter, see the documentation for the source service.

Required: No

Type: String

Pattern: [\w-]*$

Minimum: 1

Maximum: 255

Update requires: No interruption


The unique name of the delivery source.

Required: Yes

Type: String

Pattern: [\w-]*$

Minimum: 1

Maximum: 60

Update requires: Replacement


Property description not available.

Required: No

Type: String

Pattern: [\w#+=/:,.@-]*\*?

Minimum: 16

Maximum: 2048

Update requires: No interruption


The tags that have been assigned to this delivery source.

Required: No

Type: Array of Tag

Update requires: No interruption

Return values




The Amazon Resource Name (ARN) that uniquely identifies this delivery source.


This array contains the ARN of the Amazon resource that sends logs and is represented by this delivery source. Currently, only one ARN can be in the array.


The Amazon service that is sending logs.