InvocationLoggingConfiguration

resources:
  example:
    type: aws:s3:BucketV2
    properties:
      bucket: example
      forceDestroy: true
  exampleBucketPolicy:
    type: aws:s3:BucketPolicy
    name: example
    properties:
      bucket: ${example.bucket}
      policy: |
        {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "Service": "bedrock.amazonaws.com"
              },
              "Action": [
                "s3:*"
              ],
              "Resource": [
                "${example.arn}/*"
              ],
              "Condition": {
                "StringEquals": {
                  "aws:SourceAccount": "${current.accountId}"
                },
                "ArnLike": {
                  "aws:SourceArn": "arn:aws:bedrock:us-east-1:${current.accountId}:*"
                }
              }
            }
          ]
        }
  exampleInvocationLoggingConfiguration:
    type: aws:bedrockmodel:InvocationLoggingConfiguration
    name: example
    properties:
      loggingConfig:
        - embeddingDataDeliveryEnabled: true
          imageDataDeliveryEnabled: true
          textDataDeliveryEnabled: true
          videoDataDeliveryEnabled: true
          s3Config:
            - bucketName: ${example.id}
              keyPrefix: bedrock
    options:
      dependsOn:
        - ${exampleBucketPolicy}
variables:
  current:
    fn::invoke:
      function: aws:getCallerIdentity
      arguments: {}

$ pulumi import aws:bedrockmodel/invocationLoggingConfiguration:InvocationLoggingConfiguration my_config us-east-1