aws ec2 modify-verified-access-instance-logging-configuration

Modifies the logging configuration for the specified Amazon Web Services Verified Access instance. AWS CLI reference

1 example 4 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To enable logging for a Verified Access instance

The following modify-verified-access-instance-logging-configuration example enables access logging for the specified Verified Access instance. The logs will be delivered to the specified CloudWatch Logs log group.

aws ec2 modify-verified-access-instance-logging-configuration --verified-access-instance-id vai-0ce000c0b7643abea --access-logs CloudWatchLogs={Enabled=true,LogGroup=my-log-group}

Identify

--verified-access-instance-idThe ID of the Verified Access instance.

--access-logsThe configuration options for Verified Access instances.

Its output

{
    "LoggingConfiguration": {
        "VerifiedAccessInstanceId": "vai-0ce000c0b7643abea",
        "AccessLogs": {
            "S3": {
                "Enabled": false
            },
            "CloudWatchLogs": {
                "Enabled": true,
                "DeliveryStatus": {
                    "Code": "success"
                },
                "LogGroup": "my-log-group"
            },
            "KinesisDataFirehose": {
                "Enabled": false
            },
            "LogVersion": "ocsf-1.0.0-rc.2",
            "IncludeTrustContext": false
        }
    }
}

For more information, see Verified Access logs in the AWS Verified Access User Guide.

Options

4 in the AWS CLI reference

--access-logsThe configuration options for Verified Access instances.

--client-tokenA unique, case-sensitive token that you provide to ensure idempotency of your modification request.

--dry-runChecks whether you have the required permissions for the action, without actually making the request, and provides an error response.

--verified-access-instance-idThe ID of the Verified Access instance.