python - AWS CDK : Invalid ARN for CloudWatch Logs when using LogGroup. log_group_arn

Question

我正在尝试在 CDK (Python) 中设置带有查询日志组的route53.HostedZone。

查询组定义为:

queryLogGroup = logs.LogGroup(self, 'logGroup',
                                log_group_name='/aws/route53/'+subdomain,
                                retention=logs.RetentionDays.THREE_DAYS,
                                removal_policy=RemovalPolicy.DESTROY
                                )

托管区:

subdomainHostedZone = route53.HostedZone(
        self,
        'subdomainHostedZone',
        zone_name=subdomain,
        query_logs_log_group_arn=queryLogGroup.log_group_arn
    )

但是，在部署过程中我收到错误:

11:49:59 PM | CREATE_FAILED        | AWS::Route53::HostedZone      | subdomainHostedZoneE712CA19
Resource handler returned message: "The ARN for the CloudWatch Logs log group is invalid. 
(Service: Route53, Status Code: 400, Request ID: {Rec-ID}, 
Extended Request ID: null)" (RequestToken: {Rec-Token}, HandlerErrorCode: GeneralServiceException)

输出的 CF 模板将托管区域显示为:

"subdomainHostedZoneE712CA19": {
"Type": "AWS::Route53::HostedZone",
"Properties": {
  "Name": "{FQDN}",
  "QueryLoggingConfig": {
   "CloudWatchLogsLogGroupArn": {
    "Fn::GetAtt": [
     "logGroup68A52FBE",
     "Arn"
    ]
   }
  }
 },
 "DependsOn": [
  "CloudwatchLogResourcePolicyCustomResourcePolicyA1266CC5",
  "CloudwatchLogResourcePolicy687D24D9"
 ],
 "Metadata": {
  "aws:cdk:path": "awsStack/network-stack/subdomainHostedZone/Resource"
 }
},

这似乎是通过 Fn::GetAtt 正确引用日志组

我尝试将日志组添加为依赖项，并尝试将日志组转换为 L1 构造，然后手动调用 getAtt，但自动生成的 CF 似乎已经在执行相同的逻辑。

Answer 1

这是因为，来自docs :

The log group must be in the US East (N. Virginia) Region.