vpc-lattice:CreateAccessLogSubscription

Write

vpc-lattice:CreateAccessLogSubscription is a Write access-level action in the vpc-lattice service. Grants permission to create an access log subscription

Resource types

ARNs that vpc-lattice:CreateAccessLogSubscription can be scoped to in an IAM policy.

arn:${Partition}:vpc-lattice:${Region}:${Account}:accesslogsubscription/${AccessLogSubscriptionId}

AccessLogSubscription

arn:${Partition}:vpc-lattice:${Region}:${Account}:resourceconfiguration/${ResourceConfigurationId}

ResourceConfiguration

arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}

Service

arn:${Partition}:vpc-lattice:${Region}:${Account}:servicenetwork/${ServiceNetworkId}

ServiceNetwork

Condition keys

Keys you can use in the Condition block of a policy that grants vpc-lattice:CreateAccessLogSubscription.

aws:RequestTag/${TagKey} String

Filters access by the presence of tag key-value pairs in the request

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

aws:TagKeys ArrayOfString

Filters access by the presence of tag keys in the request

vpc-lattice:AuthType String

Filters access by the auth type specified in the request

vpc-lattice:CreateAction String

Filters access by the name of a resource-creating API action

Dependent actions

To use vpc-lattice:CreateAccessLogSubscription you may also need to grant:

logs:CreateLogDelivery on AccessLogSubscription
logs:GetLogDelivery on AccessLogSubscription

Example IAM policy

A minimal policy that allows vpc-lattice:CreateAccessLogSubscription. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowVpclatticeCreateAccessLogSubscription",
      "Effect": "Allow",
      "Action": "vpc-lattice:CreateAccessLogSubscription",
      "Resource": "*"
    }
  ]
}

Related actions in vpc-lattice

View all vpc-lattice actions →