Skip to contents

Disassociates the specified KMS key from the specified log group or from all CloudWatch Logs Insights query results in the account

Source: R/cloudwatchlogs_operations.R
cloudwatchlogs_disassociate_kms_key.Rd

Disassociates the specified KMS key from the specified log group or from all CloudWatch Logs Insights query results in the account.

See https://www.paws-r-sdk.com/docs/cloudwatchlogs_disassociate_kms_key/ for full documentation.

Usage

cloudwatchlogs_disassociate_kms_key(
  logGroupName = NULL,
  resourceIdentifier = NULL
)

Arguments

logGroupName

The name of the log group.

In your disassociate_kms_key operation, you must specify either the resourceIdentifier parameter or the logGroup parameter, but you can't specify both.

resourceIdentifier

Specifies the target for this operation. You must specify one of the following:

  • Specify the ARN of a log group to stop having CloudWatch Logs use the KMS key to encrypt log events that are ingested and stored by that log group. After you run this operation, CloudWatch Logs encrypts ingested log events with the default CloudWatch Logs method. The log group ARN must be in the following format. Replace REGION and ACCOUNT_ID with your Region and account ID.

    arn:aws:logs:REGION:ACCOUNT_ID:log-group:LOG_GROUP_NAME

  • Specify the following ARN to stop using this key to encrypt the results of future start_query operations in this account. Replace REGION and ACCOUNT_ID with your Region and account ID.

    arn:aws:logs:REGION:ACCOUNT_ID:query-result:*

In your DisssociateKmsKey operation, you must specify either the resourceIdentifier parameter or the logGroup parameter, but you can't specify both.