QueryLog

using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var us_east_1 = new Aws.Provider("us-east-1", new Aws.ProviderArgs
        {
            Region = "us-east-1",
        });
        var awsRoute53ExampleCom = new Aws.CloudWatch.LogGroup("awsRoute53ExampleCom", new Aws.CloudWatch.LogGroupArgs
        {
            RetentionInDays = 30,
        }, new CustomResourceOptions
        {
            Provider = "aws.us-east-1",
        });
        var route53_query_logging_policyPolicyDocument = Output.Create(Aws.Iam.GetPolicyDocument.InvokeAsync(new Aws.Iam.GetPolicyDocumentArgs
        {
            Statements = 
            {
                new Aws.Iam.Inputs.GetPolicyDocumentStatementArgs
                {
                    Actions = 
                    {
                        "logs:CreateLogStream",
                        "logs:PutLogEvents",
                    },
                    Principals = 
                    {
                        new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalArgs
                        {
                            Identifiers = 
                            {
                                "route53.amazonaws.com",
                            },
                            Type = "Service",
                        },
                    },
                    Resources = 
                    {
                        "arn:aws:logs:*:*:log-group:/aws/route53/*",
                    },
                },
            },
        }));
        var route53_query_logging_policyLogResourcePolicy = new Aws.CloudWatch.LogResourcePolicy("route53-query-logging-policyLogResourcePolicy", new Aws.CloudWatch.LogResourcePolicyArgs
        {
            PolicyDocument = route53_query_logging_policyPolicyDocument.Apply(route53_query_logging_policyPolicyDocument => route53_query_logging_policyPolicyDocument.Json),
            PolicyName = "route53-query-logging-policy",
        }, new CustomResourceOptions
        {
            Provider = "aws.us-east-1",
        });
        var exampleComZone = new Aws.Route53.Zone("exampleComZone", new Aws.Route53.ZoneArgs
        {
        });
        var exampleComQueryLog = new Aws.Route53.QueryLog("exampleComQueryLog", new Aws.Route53.QueryLogArgs
        {
            CloudwatchLogGroupArn = awsRoute53ExampleCom.Arn,
            ZoneId = exampleComZone.ZoneId,
        }, new CustomResourceOptions
        {
            DependsOn = 
            {
                "aws_cloudwatch_log_resource_policy.route53-query-logging-policy",
            },
        });
    }

}

package main

import (
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/cloudwatch"
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/iam"
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/providers"
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/route53"
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        _, err := providers.Newaws(ctx, "us_east_1", &providers.awsArgs{
            Region: pulumi.String("us-east-1"),
        })
        if err != nil {
            return err
        }
        awsRoute53ExampleCom, err := cloudwatch.NewLogGroup(ctx, "awsRoute53ExampleCom", &cloudwatch.LogGroupArgs{
            RetentionInDays: pulumi.Int(30),
        }, pulumi.Provider("aws.us-east-1"))
        if err != nil {
            return err
        }
        route53_query_logging_policyPolicyDocument, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{
            Statements: []iam.GetPolicyDocumentStatement{
                iam.GetPolicyDocumentStatement{
                    Actions: []string{
                        "logs:CreateLogStream",
                        "logs:PutLogEvents",
                    },
                    Principals: []iam.GetPolicyDocumentStatementPrincipal{
                        iam.GetPolicyDocumentStatementPrincipal{
                            Identifiers: []string{
                                "route53.amazonaws.com",
                            },
                            Type: "Service",
                        },
                    },
                    Resources: []string{
                        "arn:aws:logs:*:*:log-group:/aws/route53/*",
                    },
                },
            },
        }, nil)
        if err != nil {
            return err
        }
        _, err = cloudwatch.NewLogResourcePolicy(ctx, "route53_query_logging_policyLogResourcePolicy", &cloudwatch.LogResourcePolicyArgs{
            PolicyDocument: pulumi.String(route53_query_logging_policyPolicyDocument.Json),
            PolicyName:     pulumi.String("route53-query-logging-policy"),
        }, pulumi.Provider("aws.us-east-1"))
        if err != nil {
            return err
        }
        exampleComZone, err := route53.NewZone(ctx, "exampleComZone", nil)
        if err != nil {
            return err
        }
        _, err = route53.NewQueryLog(ctx, "exampleComQueryLog", &route53.QueryLogArgs{
            CloudwatchLogGroupArn: awsRoute53ExampleCom.Arn,
            ZoneId:                exampleComZone.ZoneId,
        }, pulumi.DependsOn([]pulumi.Resource{
            "aws_cloudwatch_log_resource_policy.route53-query-logging-policy",
        }))
        if err != nil {
            return err
        }
        return nil
    })
}

import pulumi
import pulumi_aws as aws
import pulumi_pulumi as pulumi

us_east_1 = pulumi.providers.Aws("us-east-1", region="us-east-1")
aws_route53_example_com = aws.cloudwatch.LogGroup("awsRoute53ExampleCom", retention_in_days=30,
opts=ResourceOptions(provider="aws.us-east-1"))
route53_query_logging_policy_policy_document = aws.iam.get_policy_document(statements=[{
    "actions": [
        "logs:CreateLogStream",
        "logs:PutLogEvents",
    ],
    "principals": [{
        "identifiers": ["route53.amazonaws.com"],
        "type": "Service",
    }],
    "resources": ["arn:aws:logs:*:*:log-group:/aws/route53/*"],
}])
route53_query_logging_policy_log_resource_policy = aws.cloudwatch.LogResourcePolicy("route53-query-logging-policyLogResourcePolicy",
    policy_document=route53_query_logging_policy_policy_document.json,
    policy_name="route53-query-logging-policy",
    opts=ResourceOptions(provider="aws.us-east-1"))
example_com_zone = aws.route53.Zone("exampleComZone")
example_com_query_log = aws.route53.QueryLog("exampleComQueryLog",
    cloudwatch_log_group_arn=aws_route53_example_com.arn,
    zone_id=example_com_zone.zone_id,
    opts=ResourceOptions(depends_on=["aws_cloudwatch_log_resource_policy.route53-query-logging-policy"]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const us_east_1 = new aws.Provider("us-east-1", {
    region: "us-east-1",
});
const exampleComZone = new aws.route53.Zone("example_com", {});
const awsRoute53ExampleCom = new aws.cloudwatch.LogGroup("aws_route53_example_com", {
    retentionInDays: 30,
}, { provider: us_east_1 });
const route53_query_logging_policyPolicyDocument = pulumi.output(aws.iam.getPolicyDocument({
    statements: [{
        actions: [
            "logs:CreateLogStream",
            "logs:PutLogEvents",
        ],
        principals: [{
            identifiers: ["route53.amazonaws.com"],
            type: "Service",
        }],
        resources: ["arn:aws:logs:*:*:log-group:/aws/route53/*"],
    }],
}, { async: true }));
const route53_query_logging_policyLogResourcePolicy = new aws.cloudwatch.LogResourcePolicy("route53-query-logging-policy", {
    policyDocument: route53_query_logging_policyPolicyDocument.json,
    policyName: "route53-query-logging-policy",
}, { provider: us_east_1 });
const exampleComQueryLog = new aws.route53.QueryLog("example_com", {
    cloudwatchLogGroupArn: awsRoute53ExampleCom.arn,
    zoneId: exampleComZone.zoneId,
}, { dependsOn: [route53_query_logging_policyLogResourcePolicy] });