Configuration to enable logging the DNS queries that originate in an Amazon VPC using the Route53 Resolver Query Logging feature. Query logs can be sent to CloudWatch logs, S3 Buckets, or Kinesis Data Firehose
Provide the following details to configure Route53 Resolver Query Logging:
AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
Route53QueryLoggingConfig:
Type: 'AWS::Route53Resolver::ResolverQueryLoggingConfig'
Properties:
DestinationArn: ''
Route53QueryLoggingConfigAssociation:
Type: 'AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation'
Properties:
ResolverQueryLogConfigId:
'Fn::GetAtt':
- Route53QueryLoggingConfig
- Id
ResourceId: ''
Parameters: {}
Metadata: {}
Conditions: {}
Configuration Source: AWS Documentation
Additional Documentation: