lambda-function-application-log-level-check - AWS Config
AWS CloudFormation template
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

lambda-function-application-log-level-check

Checks if AWS Lambda functions with JSON structured logs are configured with a specified application log level. The rule is NON_COMPLIANT if configuration.loggingConfig.applicationLogLevel is not a value specified in the required rule parameter.

Identifier: LAMBDA_FUNCTION_APPLICATION_LOG_LEVEL_CHECK

Resource Types: AWS::Lambda::Function

Trigger type: Configuration changes

AWS Region: All supported AWS regions except China (Beijing), AWS GovCloud (US-East), AWS GovCloud (US-West), China (Ningxia) Region

Parameters:

logLevel
Type: String

The minimum application log level for the rule to check. The rule is NON_COMPLIANT if configuration.loggingConfig.applicationLogLevel is configured with a value not specified in this parameter. Valid values include: 'TRACE', 'DEBUG', 'INFO', 'WARN', 'ERROR', and 'FATAL'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.