---
type: resource-type
title: Logging
description: aws resource type AWS::IoT::Logging
name: Logging
lexicon: aws
resource_type: AWS::IoT::Logging
---
`AWS::IoT::Logging`, a resource type of the aws lexicon.

## Properties

- `AccountId` (`string`, required): Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
- `DefaultLogLevel` (`"DEBUG" | "DISABLED" | "ERROR" | "INFO" | "WARN"`, required): The log level to use. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED.
- `RoleArn` (`string`, required): The ARN of the role that allows IoT to write to Cloudwatch logs.
- `EventConfigurations` (`Logging_EventConfiguration[]`, optional): Configurations for event-based logging that specifies which event types to log and their logging settings. Overrides account-level logging for the specified event

## Governed by

- [WAW024](/rules/WAW024.md): Application Load Balancer does not have access logging enabled