aws-logs: support DataProtectionPolicy in LogGroup construct #23399
Assignees
Labels
@aws-cdk/aws-logs
Related to Amazon CloudWatch Logs
effort/medium
Medium work item – several days of effort
feature-request
A feature should be added or improved.
p2
Comments
kchg
added
feature-request
4 tasks
peterwoodworth
added
p2
effort/medium
|
Is there any update on this feature? When is it planned to be released? |
mergify bot
pushed a commit
that referenced
this issue
May 8, 2023
Sensitive data protection for CloudWatch Logs was launched at re:Invent 2022. This feature will enable that property under DataProtectionPolicy as a JSON object in the LogGroup construct. Use case: A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks. closes #23399 ---- ### All Submissions: * [x] Have you followed the guidelines in our [Contributing guide?](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) ### Adding new Construct Runtime Dependencies: * [ ] This PR adds new construct runtime dependencies following the process described [here](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md/#adding-construct-runtime-dependencies) ### New Features * [x] Have you added the new feature to an [integration test](https://github.com/aws/aws-cdk/blob/main/INTEGRATION_TESTS.md)? * [x] Did you use `yarn integ` to deploy the infrastructure and generate the snapshot (i.e. `yarn integ` without `--dry-run`)? *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the feature
Sensitive data protection for CloudWatch Logs was launched at re:Invent 2022 (Blogpost). This feature will enable that property under
DataProtectionPolicyas a JSON object in the LogGroup construct.Use Case
I am an SDE on CloudWatch Logs, I've received several requests to support this as an L2 construct. This will allow customers to integrate data protection for their logs in new and existing workflows.
Proposed Solution
The L1 construct, generated from CloudFormation, was recently released. I will build this property using the
CfnLogGroupconstruct.Other Information
No response
Acknowledgements
CDK version used
2.55.1
Environment details (OS name and version, etc.)
macOS
The text was updated successfully, but these errors were encountered: