Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1473359323.2 KB

Enables access logs to be sent to Amazon CloudWatch, Amazon S3, and Amazon Kinesis Data Firehose. The service network owner can use the access logs to audit the services in the network. The service network owner can only see access logs from clients and services that are associated with their service network. Access log entries represent traffic originated from VPCs associated with that network. For more information, see <a href="https://docs.aws.amazon.com/vpc-lattice/latest/ug/monitoring-access-logs.html">Access logs</a> in the <i>Amazon VPC Lattice User Guide</i>.

post/accesslogsubscriptions

Request body

clientTokenstring

A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you retry a request that completed successfully using the same client token and parameters, the retry succeeds without performing any actions. If the parameters aren't identical, the retry fails.

resourceIdentifierstring required

The ID or ARN of the service network or service.

destinationArnstring required

The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets.

serviceNetworkLogType'SERVICE' | 'RESOURCE'

The type of log that monitors your Amazon VPC Lattice service networks.

tagsobject

The tags for the access log subscription.

Response

Success

idstring required

The ID of the access log subscription.

arnstring required

The Amazon Resource Name (ARN) of the access log subscription.

resourceIdstring required

The ID of the service network or service.

resourceArnstring required

The Amazon Resource Name (ARN) of the service network or service.

serviceNetworkLogType'SERVICE' | 'RESOURCE'

The type of log that monitors your Amazon VPC Lattice service networks.

destinationArnstring required

The Amazon Resource Name (ARN) of the log destination.