Setup account level CW Log filter in datadof account

ServerlessOpsIO · Aug 17, 2024 · b91fcc0 · b91fcc0
1 parent 6420938
commit b91fcc0
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/stacksets/datadog-shipping/logs-template.yaml b/stacksets/datadog-shipping/logs-template.yaml
@@ -143,4 +143,13 @@ Resources:
           CloudWatchLoggingOptions:
             Enabled: true
             LogGroupName: !Ref DeliveryStreamLogGroup
-            LogStreamName: !Ref BackupDeliveryLogStream
+            LogStreamName: !Ref BackupDeliveryLogStream
+
+  CloudWatchAccountPolicy:
+    Type: AWS::Logs::AccountPolicy
+    Properties:
+      PolicyName: Datadog-Firehose
+      PolicyDocument: !Sub '{ "RoleArn":"${CloudWatchLogsRole.Arn}", "DestinationArn":"${DatadogDeliveryStream.Arn}"}'
+      SelectionCriteria: !Sub 'LogGroupName NOT IN ["${DeliveryStreamLogGroup}", "${BackupDeliveryLogStream}"]'
+      PolicyType: "SUBSCRIPTION_FILTER_POLICY"
+      Scope: "ALL"