Skip to main content

Configure AWS CloudWatch Unused Log Stream

  1. Configure AWS CloudWatch Unused Log Stream
  2. Use Case for AWS CloudWatch Unused Log Stream
  3. Triage Guides by Violation Type
    1. Triage AWS CloudWatch Unused Log Stream LOG_STREAM_UNUSED_FOR_TOO_LONG

How do I enable this policy?​

Signature:
  Type: Pyrae::Policy::PolicyDocument::Signatory
  Properties:
    SignatureTeamUrn: { "PyRef": "PyraeTeam" }
    PolicyUrn: "urn:pyrae:policy:us-west-2:sAutx4ZxiqTJUzJdvky2km:policy/AwsCloudwatchUnusedLogStream"

What permissions does this policy require in my AWS account?​

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "logs:DescribeLogStreams"
      ],
      "Resource": "*"
    }
  ]
}

What resources match this policy?​

Type: Pyrae::Observer::MatchingRule
Properties:
  MatchAccountType: aws
  MatchUrnService: logs
  MatchUrnResourceType: log-group