TelemetryRule

Source: src/AWS/ObservabilityAdmin/TelemetryRule.ts

A CloudWatch telemetry rule (Observability Admin) — automatically enables telemetry (such as VPC flow logs) for AWS resources in your account that match the rule’s criteria.

The account must be onboarded to CloudWatch telemetry config (see ObservabilityAdmin.TelemetryConfig) before rules can be created.

Creating a Telemetry Rule

Enable VPC flow logs for the account’s VPCs

import * as ObservabilityAdmin from "alchemy/AWS/ObservabilityAdmin";

// Onboard the account to telemetry config first.
const telemetry = yield* ObservabilityAdmin.TelemetryConfig("Telemetry");

const rule = yield* ObservabilityAdmin.TelemetryRule("FlowLogs", {
  resourceType: "AWS::EC2::VPC",
  telemetryType: "Logs",
  telemetrySourceTypes: ["VPC_FLOW_LOGS"],
  destinationConfiguration: {
    DestinationType: "cloud-watch-logs",
    Retention: "30 days",
  },
});

Custom flow-log parameters

const rule = yield* ObservabilityAdmin.TelemetryRule("FlowLogs", {
  resourceType: "AWS::EC2::VPC",
  telemetryType: "Logs",
  telemetrySourceTypes: ["VPC_FLOW_LOGS"],
  destinationConfiguration: {
    DestinationType: "cloud-watch-logs",
    Retention: "90 days",
    VPCFlowLogParameters: {
      TrafficType: "REJECT",
      MaxAggregationInterval: 600,
    },
  },
});