Optionalcanned(Optional) Set canned access control list for the logs, e.g. bucket-owner-full-control.
If canned_cal is set, please make sure the cluster iam role has s3:PutObjectAcl permission on
the destination bucket and prefix. The full list of possible canned acl can be found at
http://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl.
Please also note that by default only the object owner gets full controls. If you are using cross account
role for writing data, you may want to set bucket-owner-full-control to make bucket owner able to
read the logs.
OptionaldestinationS3 destination, e.g. s3://my-bucket/some-prefix Note that logs will be delivered using
cluster iam role, please make sure you set cluster iam role and the role has write access to the
destination. Please also note that you cannot use AWS keys to deliver logs.
Optionalenable(Optional) Flag to enable server side encryption, false by default.
Optionalencryption(Optional) The encryption type, it could be sse-s3 or sse-kms. It will be used only when
encryption is enabled and the default type is sse-s3.
OptionalendpointS3 endpoint, e.g. https://s3-us-west-2.amazonaws.com. Either region or endpoint needs to be set.
If both are set, endpoint will be used.
Optionalkms(Optional) Kms key which will be used if encryption is enabled and encryption type is set to sse-kms.
OptionalregionS3 region, e.g. us-west-2. Either region or endpoint needs to be set. If both are set,
endpoint will be used.
A storage location in Amazon S3