aws-sdk-cloudwatch 1.140.0 → 1.141.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 757903d0a14590e8a5b29e8e786811e98d4e9ee444bb83a173bff23a3643d18a
-  data.tar.gz: ea6e7efa72ebd26c537ef7ecc24028c934cda43f0010afe7bc750f6fb9089673
+  metadata.gz: eb6f98bd0b2fb464f53f56643b4ddab971d3b9754a46f1e6a07f8d84d457fc55
+  data.tar.gz: e4a976b47f6ecda00c062273da24bd36f09489395696ebb4b8b0208bb88fc19c
 SHA512:
-  metadata.gz: 242d0143f4f1990be627456403aef91e8884a584cde8bc03577e423671168919c424112ee7fd1eabb30d19761f1841ba5685999ea280737272be24746fa8f6b4
-  data.tar.gz: 3fdf6143b7f052ab7b567e1ad7a3f7fe1508c9ffc019df4bf369e5b2fd2ccbf44da43e7ef97a94fef581358bfb75557159d5b9851f8e50181f28faa3982c1053
+  metadata.gz: 1eabd1f39d7f6bd8ac470155fafe33dfc44b93fb1eabc4a39943d4cd5dfba3bcd9a7d442705470aff84217a631b364c40a2fbc1a77fb8a6aa384981ea81c78e6
+  data.tar.gz: 19fb3e807a681ca44a8503d1eb9793fb07423293b2067477a66f2120f3b03f3e7cadbcc442168bacec7aa4bc928abe1b36213e3b3735b5d7901490b52e2a1bba

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.141.0 (2026-06-29)
+------------------
+
+* Feature - This release adds the API (PutLogAlarm) to manage a new CloudWatch resource, Log Based Alarms. Log Based Alarms allows customers to alarm directly on CloudWatch Logs query results.
+
 1.140.0 (2026-06-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.140.0
+1.141.0

data/lib/aws-sdk-cloudwatch/alarm.rb

@@ -456,7 +456,7 @@ module Aws::CloudWatch
     #
     #   alarm.describe_history({
     #     alarm_contributor_id: "ContributorId",
-    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm
+    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm, LogAlarm
     #     history_item_type: "ConfigurationUpdate", # accepts ConfigurationUpdate, StateUpdate, Action, AlarmContributorStateUpdate, AlarmContributorAction
     #     start_date: Time.now,
     #     end_date: Time.now,
@@ -470,8 +470,8 @@ module Aws::CloudWatch
     #   alarm history results.
     # @option options [Array<String>] :alarm_types
     #   Use this parameter to specify whether you want the operation to return
-    #   metric alarms or composite alarms. If you omit this parameter, only
-    #   metric alarms are returned.
+    #   metric alarms, composite alarms, or log alarms. If you omit this
+    #   parameter, only metric alarms are returned.
     # @option options [String] :history_item_type
     #   The type of alarm histories to retrieve.
     # @option options [Time,DateTime,Date,Integer,String] :start_date

data/lib/aws-sdk-cloudwatch/client.rb

@@ -623,7 +623,8 @@ module Aws::CloudWatch
     # operation. However, this total can include no more than one composite
     # alarm. For example, you could delete 99 metric alarms and one
     # composite alarms with one operation, but you can't delete two
-    # composite alarms with one operation.
+    # composite alarms with one operation. Log alarms cannot be batch
+    # deleted.
     #
     # If you specify any incorrect alarm names, the alarms you specify with
     # correct names are still deleted. Other syntax errors might result in
@@ -952,8 +953,8 @@ module Aws::CloudWatch
     #
     # @option params [Array<String>] :alarm_types
     #   Use this parameter to specify whether you want the operation to return
-    #   metric alarms or composite alarms. If you omit this parameter, only
-    #   metric alarms are returned.
+    #   metric alarms, composite alarms, or log alarms. If you omit this
+    #   parameter, only metric alarms are returned.
     #
     # @option params [String] :history_item_type
     #   The type of alarm histories to retrieve.
@@ -989,7 +990,7 @@ module Aws::CloudWatch
     #   resp = client.describe_alarm_history({
     #     alarm_name: "AlarmName",
     #     alarm_contributor_id: "ContributorId",
-    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm
+    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm, LogAlarm
     #     history_item_type: "ConfigurationUpdate", # accepts ConfigurationUpdate, StateUpdate, Action, AlarmContributorStateUpdate, AlarmContributorAction
     #     start_date: Time.now,
     #     end_date: Time.now,
@@ -1003,7 +1004,7 @@ module Aws::CloudWatch
     #   resp.alarm_history_items #=> Array
     #   resp.alarm_history_items[0].alarm_name #=> String
     #   resp.alarm_history_items[0].alarm_contributor_id #=> String
-    #   resp.alarm_history_items[0].alarm_type #=> String, one of "CompositeAlarm", "MetricAlarm"
+    #   resp.alarm_history_items[0].alarm_type #=> String, one of "CompositeAlarm", "MetricAlarm", "LogAlarm"
     #   resp.alarm_history_items[0].timestamp #=> Time
     #   resp.alarm_history_items[0].history_item_type #=> String, one of "ConfigurationUpdate", "StateUpdate", "Action", "AlarmContributorStateUpdate", "AlarmContributorAction"
     #   resp.alarm_history_items[0].history_summary #=> String
@@ -1043,16 +1044,19 @@ module Aws::CloudWatch
     #
     # @option params [Array<String>] :alarm_types
     #   Use this parameter to specify whether you want the operation to return
-    #   metric alarms or composite alarms. If you omit this parameter, only
-    #   metric alarms are returned, even if composite alarms exist in the
-    #   account.
+    #   metric alarms, composite alarms, or log alarms. If you omit this
+    #   parameter, only metric alarms are returned, even if composite alarms
+    #   or log alarms exist in the account.
     #
     #   For example, if you omit this parameter or specify `MetricAlarms`, the
     #   operation returns only a list of metric alarms. It does not return any
-    #   composite alarms, even if composite alarms exist in the account.
+    #   composite alarms or log alarms, even if they exist in the account.
     #
     #   If you specify `CompositeAlarms`, the operation returns only a list of
-    #   composite alarms, and does not return any metric alarms.
+    #   composite alarms, and does not return any metric alarms or log alarms.
+    #
+    #   If you specify `LogAlarms`, the operation returns only a list of log
+    #   alarms, and does not return any metric alarms or composite alarms.
     #
     # @option params [String] :children_of_alarm_name
     #   If you use this parameter and specify the name of a composite alarm,
@@ -1115,6 +1119,7 @@ module Aws::CloudWatch
     #
     #   * {Types::DescribeAlarmsOutput#composite_alarms #composite_alarms} => Array&lt;Types::CompositeAlarm&gt;
     #   * {Types::DescribeAlarmsOutput#metric_alarms #metric_alarms} => Array&lt;Types::MetricAlarm&gt;
+    #   * {Types::DescribeAlarmsOutput#log_alarms #log_alarms} => Array&lt;Types::LogAlarm&gt;
     #   * {Types::DescribeAlarmsOutput#next_token #next_token} => String
     #
     # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
@@ -1124,7 +1129,7 @@ module Aws::CloudWatch
     #   resp = client.describe_alarms({
     #     alarm_names: ["AlarmName"],
     #     alarm_name_prefix: "AlarmNamePrefix",
-    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm
+    #     alarm_types: ["CompositeAlarm"], # accepts CompositeAlarm, MetricAlarm, LogAlarm
     #     children_of_alarm_name: "AlarmName",
     #     parents_of_alarm_name: "AlarmName",
     #     state_value: "OK", # accepts OK, ALARM, INSUFFICIENT_DATA
@@ -1211,6 +1216,43 @@ module Aws::CloudWatch
     #   resp.metric_alarms[0].evaluation_criteria.prom_ql_criteria.pending_period #=> Integer
     #   resp.metric_alarms[0].evaluation_criteria.prom_ql_criteria.recovery_period #=> Integer
     #   resp.metric_alarms[0].evaluation_interval #=> Integer
+    #   resp.log_alarms #=> Array
+    #   resp.log_alarms[0].alarm_name #=> String
+    #   resp.log_alarms[0].alarm_arn #=> String
+    #   resp.log_alarms[0].alarm_description #=> String
+    #   resp.log_alarms[0].alarm_configuration_updated_timestamp #=> Time
+    #   resp.log_alarms[0].actions_enabled #=> Boolean
+    #   resp.log_alarms[0].ok_actions #=> Array
+    #   resp.log_alarms[0].ok_actions[0] #=> String
+    #   resp.log_alarms[0].alarm_actions #=> Array
+    #   resp.log_alarms[0].alarm_actions[0] #=> String
+    #   resp.log_alarms[0].insufficient_data_actions #=> Array
+    #   resp.log_alarms[0].insufficient_data_actions[0] #=> String
+    #   resp.log_alarms[0].state_value #=> String, one of "OK", "ALARM", "INSUFFICIENT_DATA"
+    #   resp.log_alarms[0].state_reason #=> String
+    #   resp.log_alarms[0].state_reason_data #=> String
+    #   resp.log_alarms[0].state_updated_timestamp #=> Time
+    #   resp.log_alarms[0].scheduled_query_configuration.query_string #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.log_group_identifiers #=> Array
+    #   resp.log_alarms[0].scheduled_query_configuration.log_group_identifiers[0] #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.query_arn #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.scheduled_query_role_arn #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.schedule_configuration.schedule_expression #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.schedule_configuration.start_time_offset #=> Integer
+    #   resp.log_alarms[0].scheduled_query_configuration.schedule_configuration.end_time_offset #=> Integer
+    #   resp.log_alarms[0].scheduled_query_configuration.aggregation_expression #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.tags #=> Array
+    #   resp.log_alarms[0].scheduled_query_configuration.tags[0].key #=> String
+    #   resp.log_alarms[0].scheduled_query_configuration.tags[0].value #=> String
+    #   resp.log_alarms[0].query_results_to_evaluate #=> Integer
+    #   resp.log_alarms[0].query_results_to_alarm #=> Integer
+    #   resp.log_alarms[0].threshold #=> Float
+    #   resp.log_alarms[0].comparison_operator #=> String, one of "GreaterThanOrEqualToThreshold", "GreaterThanThreshold", "LessThanThreshold", "LessThanOrEqualToThreshold", "LessThanLowerOrGreaterThanUpperThreshold", "LessThanLowerThreshold", "GreaterThanUpperThreshold"
+    #   resp.log_alarms[0].treat_missing_data #=> String
+    #   resp.log_alarms[0].state_transitioned_timestamp #=> Time
+    #   resp.log_alarms[0].evaluation_state #=> String, one of "PARTIAL_DATA", "EVALUATION_FAILURE", "EVALUATION_ERROR"
+    #   resp.log_alarms[0].action_log_line_count #=> Integer
+    #   resp.log_alarms[0].action_log_line_role_arn #=> String
     #   resp.next_token #=> String
     #
     #
@@ -1218,6 +1260,7 @@ module Aws::CloudWatch
     #
     #   * alarm_exists
     #   * composite_alarm_exists
+    #   * log_alarm_exists
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/monitoring-2010-08-01/DescribeAlarms AWS API Documentation
     #
@@ -2527,7 +2570,7 @@ module Aws::CloudWatch
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/CloudWatch-Metric-Widget-Structure.html
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Metric-Widget-Structure.html
     #
     # @option params [String] :output_format
     #   The format of the resulting image. Only PNG images are supported.
@@ -3573,7 +3616,7 @@ module Aws::CloudWatch
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/CloudWatch-Dashboard-Body-Structure.html
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Dashboard-Body-Structure.html
     #
     # @option params [Array<Types::Tag>] :tags
     #   A list of key-value pairs to associate with the dashboard. You can
@@ -3720,6 +3763,222 @@ module Aws::CloudWatch
       req.send_request(options)
     end
 
+    # Creates or updates a log alarm. A log alarm evaluates the results of a
+    # CloudWatch Logs scheduled query against the configured threshold and
+    # comparison operator to determine its state.
+    #
+    # When you create a log alarm, the operation creates a service-managed
+    # CloudWatch Logs scheduled query that runs the query string you provide
+    # on the schedule you configure. Each scheduled query execution returns
+    # one or more aggregated values determined by the
+    # `AggregationExpression`, and each aggregated value is compared against
+    # the alarm `Threshold` to determine the alarm state. The alarm uses
+    # M-out-of-N evaluation: if `QueryResultsToAlarm` out of the most recent
+    # `QueryResultsToEvaluate` query results breach the threshold, the alarm
+    # transitions to `ALARM`.
+    #
+    # Log alarms support the alarm states (`OK`, `ALARM`,
+    # `INSUFFICIENT_DATA`). Configure transition actions using `OKActions`,
+    # `AlarmActions`, and `InsufficientDataActions`.
+    #
+    # If you call this operation with the name of an existing log alarm, the
+    # operation replaces the previous configuration of that alarm.
+    #
+    # **Permissions**
+    #
+    # To create or update a log alarm, you must have the
+    # `cloudwatch:PutLogAlarm` permission. The IAM role specified in
+    # `ScheduledQueryRoleARN` must grant the CloudWatch Alarms service
+    # permission to execute scheduled queries on the specified log groups.
+    # If you set `ActionLogLineCount`, the role specified in
+    # `ActionLogLineRoleArn` must grant permission to retrieve log events
+    # for inclusion in alarm notifications.
+    #
+    # @option params [required, String] :alarm_name
+    #   The name for the alarm. This name must be unique within the Amazon Web
+    #   Services account and Region.
+    #
+    # @option params [String] :alarm_description
+    #   The description for the alarm.
+    #
+    # @option params [required, Types::ScheduledQueryConfiguration] :scheduled_query_configuration
+    #   The configuration of the underlying CloudWatch Logs scheduled query
+    #   that this alarm evaluates, including the query string, log groups,
+    #   schedule, and aggregation expression.
+    #
+    # @option params [Integer] :action_log_line_count
+    #   The number of log lines from the most recent scheduled query execution
+    #   to include in alarm action notifications. Valid range is 0 through 50.
+    #   The default is 0, which means no log lines are included.
+    #
+    # @option params [String] :action_log_line_role_arn
+    #   The Amazon Resource Name (ARN) of an IAM role that CloudWatch assumes
+    #   to retrieve log events for inclusion in alarm action notifications.
+    #   Required when `ActionLogLineCount` is greater than 0.
+    #
+    # @option params [Boolean] :actions_enabled
+    #   Indicates whether actions should be executed during any changes to the
+    #   alarm state. The default is `true`.
+    #
+    # @option params [Array<String>] :ok_actions
+    #   The actions to execute when this alarm transitions to the `OK` state
+    #   from any other state. Each action is specified as an Amazon Resource
+    #   Name (ARN).
+    #
+    #   Valid Values:
+    #
+    #   **Amazon SNS actions:**
+    #
+    #   `arn:aws:sns:region:account-id:sns-topic-name `
+    #
+    #   **Lambda actions:**
+    #
+    #   * Invoke the latest version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name `
+    #
+    #   * Invoke a specific version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:version-number
+    #     `
+    #
+    #   * Invoke a function by using an alias Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:alias-name
+    #     `
+    #
+    # @option params [Array<String>] :alarm_actions
+    #   The actions to execute when this alarm transitions to the `ALARM`
+    #   state from any other state. Each action is specified as an Amazon
+    #   Resource Name (ARN).
+    #
+    #   Valid Values:
+    #
+    #   **Amazon SNS actions:**
+    #
+    #   `arn:aws:sns:region:account-id:sns-topic-name `
+    #
+    #   **Lambda actions:**
+    #
+    #   * Invoke the latest version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name `
+    #
+    #   * Invoke a specific version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:version-number
+    #     `
+    #
+    #   * Invoke a function by using an alias Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:alias-name
+    #     `
+    #
+    #   **Systems Manager actions:**
+    #
+    #   `arn:aws:ssm:region:account-id:opsitem:severity `
+    #
+    # @option params [Array<String>] :insufficient_data_actions
+    #   The actions to execute when this alarm transitions to the
+    #   `INSUFFICIENT_DATA` state from any other state. Each action is
+    #   specified as an Amazon Resource Name (ARN).
+    #
+    #   Valid Values:
+    #
+    #   **Amazon SNS actions:**
+    #
+    #   `arn:aws:sns:region:account-id:sns-topic-name `
+    #
+    #   **Lambda actions:**
+    #
+    #   * Invoke the latest version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name `
+    #
+    #   * Invoke a specific version of a Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:version-number
+    #     `
+    #
+    #   * Invoke a function by using an alias Lambda function:
+    #     `arn:aws:lambda:region:account-id:function:function-name:alias-name
+    #     `
+    #
+    # @option params [required, Integer] :query_results_to_evaluate
+    #   The number of most recent scheduled query results to evaluate against
+    #   the threshold (the N in M-of-N evaluation). Valid range is 1 through
+    #   100.
+    #
+    # @option params [required, Integer] :query_results_to_alarm
+    #   The number of query results, out of the most recent
+    #   `QueryResultsToEvaluate` results, that must breach the threshold to
+    #   trigger the alarm to transition to `ALARM` (the M in M-of-N
+    #   evaluation). Must be less than or equal to `QueryResultsToEvaluate`.
+    #
+    # @option params [required, Float] :threshold
+    #   The value to compare with the aggregated query result.
+    #
+    # @option params [required, String] :comparison_operator
+    #   The arithmetic operation to use when comparing the aggregated query
+    #   result and the threshold. The aggregated query result is used as the
+    #   first operand. Valid values are `GreaterThanThreshold`,
+    #   `GreaterThanOrEqualToThreshold`, `LessThanThreshold`, and
+    #   `LessThanOrEqualToThreshold`.
+    #
+    # @option params [String] :treat_missing_data
+    #   Sets how this alarm is to handle missing data points. Valid values are
+    #   `breaching`, `notBreaching`, `ignore`, and `missing`. If this
+    #   parameter is omitted, the default behavior of `missing` is used.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   A list of key-value pairs to associate with the alarm. You can use
+    #   tags to categorize and manage your alarms.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_log_alarm({
+    #     alarm_name: "AlarmName", # required
+    #     alarm_description: "AlarmDescription",
+    #     scheduled_query_configuration: { # required
+    #       query_string: "QueryString", # required
+    #       log_group_identifiers: ["AmazonResourceName"],
+    #       query_arn: "AmazonResourceName",
+    #       scheduled_query_role_arn: "AmazonResourceName", # required
+    #       schedule_configuration: { # required
+    #         schedule_expression: "ScheduleExpression", # required
+    #         start_time_offset: 1,
+    #         end_time_offset: 1,
+    #       },
+    #       aggregation_expression: "AggregationExpression", # required
+    #       tags: [
+    #         {
+    #           key: "TagKey", # required
+    #           value: "TagValue", # required
+    #         },
+    #       ],
+    #     },
+    #     action_log_line_count: 1,
+    #     action_log_line_role_arn: "ActionLogLineRoleArn",
+    #     actions_enabled: false,
+    #     ok_actions: ["ResourceName"],
+    #     alarm_actions: ["ResourceName"],
+    #     insufficient_data_actions: ["ResourceName"],
+    #     query_results_to_evaluate: 1, # required
+    #     query_results_to_alarm: 1, # required
+    #     threshold: 1.0, # required
+    #     comparison_operator: "GreaterThanOrEqualToThreshold", # required, accepts GreaterThanOrEqualToThreshold, GreaterThanThreshold, LessThanThreshold, LessThanOrEqualToThreshold, LessThanLowerOrGreaterThanUpperThreshold, LessThanLowerThreshold, GreaterThanUpperThreshold
+    #     treat_missing_data: "TreatMissingData",
+    #     tags: [
+    #       {
+    #         key: "TagKey", # required
+    #         value: "TagValue", # required
+    #       },
+    #     ],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/monitoring-2010-08-01/PutLogAlarm AWS API Documentation
+    #
+    # @overload put_log_alarm(params = {})
+    # @param [Hash] params ({})
+    def put_log_alarm(params = {}, options = {})
+      req = build_request(:put_log_alarm, params)
+      req.send_request(options)
+    end
+
     # Creates a managed Contributor Insights rule for a specified Amazon Web
     # Services resource. When you enable a managed rule, you create a
     # Contributor Insights rule that collects data from Amazon Web Services
@@ -5061,7 +5320,7 @@ module Aws::CloudWatch
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudwatch'
-      context[:gem_version] = '1.140.0'
+      context[:gem_version] = '1.141.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 
@@ -5132,6 +5391,7 @@ module Aws::CloudWatch
     # | alarm_exists           | {Client#describe_alarms}     | 5        | 40            |
     # | alarm_mute_rule_exists | {Client#get_alarm_mute_rule} | 5        | 40            |
     # | composite_alarm_exists | {Client#describe_alarms}     | 5        | 40            |
+    # | log_alarm_exists       | {Client#describe_alarms}     | 5        | 40            |
     #
     # @raise [Errors::FailureStateError] Raised when the waiter terminates
     #   because the waiter has entered a state that it will not transition
@@ -5184,7 +5444,8 @@ module Aws::CloudWatch
       {
         alarm_exists: Waiters::AlarmExists,
         alarm_mute_rule_exists: Waiters::AlarmMuteRuleExists,
-        composite_alarm_exists: Waiters::CompositeAlarmExists
+        composite_alarm_exists: Waiters::CompositeAlarmExists,
+        log_alarm_exists: Waiters::LogAlarmExists
       }
     end
 

data/lib/aws-sdk-cloudwatch/client_api.rb

@@ -15,10 +15,13 @@ module Aws::CloudWatch
     include Seahorse::Model
 
     AccountId = Shapes::StringShape.new(name: 'AccountId')
+    ActionLogLineCount = Shapes::IntegerShape.new(name: 'ActionLogLineCount')
+    ActionLogLineRoleArn = Shapes::StringShape.new(name: 'ActionLogLineRoleArn')
     ActionPrefix = Shapes::StringShape.new(name: 'ActionPrefix')
     ActionsEnabled = Shapes::BooleanShape.new(name: 'ActionsEnabled')
     ActionsSuppressedBy = Shapes::StringShape.new(name: 'ActionsSuppressedBy')
     ActionsSuppressedReason = Shapes::StringShape.new(name: 'ActionsSuppressedReason')
+    AggregationExpression = Shapes::StringShape.new(name: 'AggregationExpression')
     AlarmArn = Shapes::StringShape.new(name: 'AlarmArn')
     AlarmContributor = Shapes::StructureShape.new(name: 'AlarmContributor')
     AlarmContributors = Shapes::ListShape.new(name: 'AlarmContributors')
@@ -120,6 +123,7 @@ module Aws::CloudWatch
     EnableAlarmActionsInput = Shapes::StructureShape.new(name: 'EnableAlarmActionsInput')
     EnableInsightRulesInput = Shapes::StructureShape.new(name: 'EnableInsightRulesInput')
     EnableInsightRulesOutput = Shapes::StructureShape.new(name: 'EnableInsightRulesOutput')
+    EndTimeOffset = Shapes::IntegerShape.new(name: 'EndTimeOffset')
     Entity = Shapes::StructureShape.new(name: 'Entity')
     EntityAttributesMap = Shapes::MapShape.new(name: 'EntityAttributesMap')
     EntityAttributesMapKeyString = Shapes::StringShape.new(name: 'EntityAttributesMapKeyString')
@@ -221,6 +225,9 @@ module Aws::CloudWatch
     ListMetricsOutput = Shapes::StructureShape.new(name: 'ListMetricsOutput')
     ListTagsForResourceInput = Shapes::StructureShape.new(name: 'ListTagsForResourceInput')
     ListTagsForResourceOutput = Shapes::StructureShape.new(name: 'ListTagsForResourceOutput')
+    LogAlarm = Shapes::StructureShape.new(name: 'LogAlarm')
+    LogAlarms = Shapes::ListShape.new(name: 'LogAlarms')
+    LogGroupIdentifiers = Shapes::ListShape.new(name: 'LogGroupIdentifiers')
     ManagedRule = Shapes::StructureShape.new(name: 'ManagedRule')
     ManagedRuleDescription = Shapes::StructureShape.new(name: 'ManagedRuleDescription')
     ManagedRuleDescriptions = Shapes::ListShape.new(name: 'ManagedRuleDescriptions')
@@ -289,6 +296,7 @@ module Aws::CloudWatch
     PutDashboardOutput = Shapes::StructureShape.new(name: 'PutDashboardOutput')
     PutInsightRuleInput = Shapes::StructureShape.new(name: 'PutInsightRuleInput')
     PutInsightRuleOutput = Shapes::StructureShape.new(name: 'PutInsightRuleOutput')
+    PutLogAlarmInput = Shapes::StructureShape.new(name: 'PutLogAlarmInput')
     PutManagedInsightRulesInput = Shapes::StructureShape.new(name: 'PutManagedInsightRulesInput')
     PutManagedInsightRulesOutput = Shapes::StructureShape.new(name: 'PutManagedInsightRulesOutput')
     PutMetricAlarmInput = Shapes::StructureShape.new(name: 'PutMetricAlarmInput')
@@ -296,9 +304,13 @@ module Aws::CloudWatch
     PutMetricStreamInput = Shapes::StructureShape.new(name: 'PutMetricStreamInput')
     PutMetricStreamOutput = Shapes::StructureShape.new(name: 'PutMetricStreamOutput')
     Query = Shapes::StringShape.new(name: 'Query')
+    QueryResultsToAlarm = Shapes::IntegerShape.new(name: 'QueryResultsToAlarm')
+    QueryResultsToEvaluate = Shapes::IntegerShape.new(name: 'QueryResultsToEvaluate')
+    QueryString = Shapes::StringShape.new(name: 'QueryString')
     Range = Shapes::StructureShape.new(name: 'Range')
     RecentlyActive = Shapes::StringShape.new(name: 'RecentlyActive')
     RecoveryPeriod = Shapes::IntegerShape.new(name: 'RecoveryPeriod')
+    ResourceConflict = Shapes::StructureShape.new(name: 'ResourceConflict', error: {"code" => "ResourceConflict", "httpStatusCode" => 409, "senderFault" => true})
     ResourceId = Shapes::StringShape.new(name: 'ResourceId')
     ResourceList = Shapes::ListShape.new(name: 'ResourceList')
     ResourceName = Shapes::StringShape.new(name: 'ResourceName')
@@ -309,6 +321,9 @@ module Aws::CloudWatch
     Rule = Shapes::StructureShape.new(name: 'Rule')
     ScanBy = Shapes::StringShape.new(name: 'ScanBy')
     Schedule = Shapes::StructureShape.new(name: 'Schedule')
+    ScheduleConfiguration = Shapes::StructureShape.new(name: 'ScheduleConfiguration')
+    ScheduleExpression = Shapes::StringShape.new(name: 'ScheduleExpression')
+    ScheduledQueryConfiguration = Shapes::StructureShape.new(name: 'ScheduledQueryConfiguration')
     SetAlarmStateInput = Shapes::StructureShape.new(name: 'SetAlarmStateInput')
     SingleMetricAnomalyDetector = Shapes::StructureShape.new(name: 'SingleMetricAnomalyDetector')
     Size = Shapes::IntegerShape.new(name: 'Size')
@@ -317,6 +332,7 @@ module Aws::CloudWatch
     StartMetricStreamsOutput = Shapes::StructureShape.new(name: 'StartMetricStreamsOutput')
     StartOTelEnrichmentInput = Shapes::StructureShape.new(name: 'StartOTelEnrichmentInput')
     StartOTelEnrichmentOutput = Shapes::StructureShape.new(name: 'StartOTelEnrichmentOutput')
+    StartTimeOffset = Shapes::IntegerShape.new(name: 'StartTimeOffset')
     Stat = Shapes::StringShape.new(name: 'Stat')
     StateReason = Shapes::StringShape.new(name: 'StateReason')
     StateReasonData = Shapes::StringShape.new(name: 'StateReasonData')
@@ -572,6 +588,7 @@ module Aws::CloudWatch
 
     DescribeAlarmsOutput.add_member(:composite_alarms, Shapes::ShapeRef.new(shape: CompositeAlarms, location_name: "CompositeAlarms"))
     DescribeAlarmsOutput.add_member(:metric_alarms, Shapes::ShapeRef.new(shape: MetricAlarms, location_name: "MetricAlarms"))
+    DescribeAlarmsOutput.add_member(:log_alarms, Shapes::ShapeRef.new(shape: LogAlarms, location_name: "LogAlarms"))
     DescribeAlarmsOutput.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     DescribeAlarmsOutput.struct_class = Types::DescribeAlarmsOutput
 
@@ -890,6 +907,34 @@ module Aws::CloudWatch
     ListTagsForResourceOutput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     ListTagsForResourceOutput.struct_class = Types::ListTagsForResourceOutput
 
+    LogAlarm.add_member(:alarm_name, Shapes::ShapeRef.new(shape: AlarmName, location_name: "AlarmName"))
+    LogAlarm.add_member(:alarm_arn, Shapes::ShapeRef.new(shape: AlarmArn, location_name: "AlarmArn"))
+    LogAlarm.add_member(:alarm_description, Shapes::ShapeRef.new(shape: AlarmDescription, location_name: "AlarmDescription"))
+    LogAlarm.add_member(:alarm_configuration_updated_timestamp, Shapes::ShapeRef.new(shape: Timestamp, location_name: "AlarmConfigurationUpdatedTimestamp"))
+    LogAlarm.add_member(:actions_enabled, Shapes::ShapeRef.new(shape: ActionsEnabled, location_name: "ActionsEnabled"))
+    LogAlarm.add_member(:ok_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "OKActions"))
+    LogAlarm.add_member(:alarm_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "AlarmActions"))
+    LogAlarm.add_member(:insufficient_data_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "InsufficientDataActions"))
+    LogAlarm.add_member(:state_value, Shapes::ShapeRef.new(shape: StateValue, location_name: "StateValue"))
+    LogAlarm.add_member(:state_reason, Shapes::ShapeRef.new(shape: StateReason, location_name: "StateReason"))
+    LogAlarm.add_member(:state_reason_data, Shapes::ShapeRef.new(shape: StateReasonData, location_name: "StateReasonData"))
+    LogAlarm.add_member(:state_updated_timestamp, Shapes::ShapeRef.new(shape: Timestamp, location_name: "StateUpdatedTimestamp"))
+    LogAlarm.add_member(:scheduled_query_configuration, Shapes::ShapeRef.new(shape: ScheduledQueryConfiguration, location_name: "ScheduledQueryConfiguration"))
+    LogAlarm.add_member(:query_results_to_evaluate, Shapes::ShapeRef.new(shape: QueryResultsToEvaluate, location_name: "QueryResultsToEvaluate"))
+    LogAlarm.add_member(:query_results_to_alarm, Shapes::ShapeRef.new(shape: QueryResultsToAlarm, location_name: "QueryResultsToAlarm"))
+    LogAlarm.add_member(:threshold, Shapes::ShapeRef.new(shape: Threshold, location_name: "Threshold"))
+    LogAlarm.add_member(:comparison_operator, Shapes::ShapeRef.new(shape: ComparisonOperator, location_name: "ComparisonOperator"))
+    LogAlarm.add_member(:treat_missing_data, Shapes::ShapeRef.new(shape: TreatMissingData, location_name: "TreatMissingData"))
+    LogAlarm.add_member(:state_transitioned_timestamp, Shapes::ShapeRef.new(shape: Timestamp, location_name: "StateTransitionedTimestamp"))
+    LogAlarm.add_member(:evaluation_state, Shapes::ShapeRef.new(shape: EvaluationState, location_name: "EvaluationState"))
+    LogAlarm.add_member(:action_log_line_count, Shapes::ShapeRef.new(shape: ActionLogLineCount, location_name: "ActionLogLineCount"))
+    LogAlarm.add_member(:action_log_line_role_arn, Shapes::ShapeRef.new(shape: ActionLogLineRoleArn, location_name: "ActionLogLineRoleArn"))
+    LogAlarm.struct_class = Types::LogAlarm
+
+    LogAlarms.member = Shapes::ShapeRef.new(shape: LogAlarm)
+
+    LogGroupIdentifiers.member = Shapes::ShapeRef.new(shape: AmazonResourceName)
+
     ManagedRule.add_member(:template_name, Shapes::ShapeRef.new(shape: TemplateName, required: true, location_name: "TemplateName"))
     ManagedRule.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location_name: "ResourceARN"))
     ManagedRule.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
@@ -1104,6 +1149,23 @@ module Aws::CloudWatch
 
     PutInsightRuleOutput.struct_class = Types::PutInsightRuleOutput
 
+    PutLogAlarmInput.add_member(:alarm_name, Shapes::ShapeRef.new(shape: AlarmName, required: true, location_name: "AlarmName"))
+    PutLogAlarmInput.add_member(:alarm_description, Shapes::ShapeRef.new(shape: AlarmDescription, location_name: "AlarmDescription"))
+    PutLogAlarmInput.add_member(:scheduled_query_configuration, Shapes::ShapeRef.new(shape: ScheduledQueryConfiguration, required: true, location_name: "ScheduledQueryConfiguration"))
+    PutLogAlarmInput.add_member(:action_log_line_count, Shapes::ShapeRef.new(shape: ActionLogLineCount, location_name: "ActionLogLineCount"))
+    PutLogAlarmInput.add_member(:action_log_line_role_arn, Shapes::ShapeRef.new(shape: ActionLogLineRoleArn, location_name: "ActionLogLineRoleArn"))
+    PutLogAlarmInput.add_member(:actions_enabled, Shapes::ShapeRef.new(shape: ActionsEnabled, location_name: "ActionsEnabled"))
+    PutLogAlarmInput.add_member(:ok_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "OKActions"))
+    PutLogAlarmInput.add_member(:alarm_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "AlarmActions"))
+    PutLogAlarmInput.add_member(:insufficient_data_actions, Shapes::ShapeRef.new(shape: ResourceList, location_name: "InsufficientDataActions"))
+    PutLogAlarmInput.add_member(:query_results_to_evaluate, Shapes::ShapeRef.new(shape: QueryResultsToEvaluate, required: true, location_name: "QueryResultsToEvaluate"))
+    PutLogAlarmInput.add_member(:query_results_to_alarm, Shapes::ShapeRef.new(shape: QueryResultsToAlarm, required: true, location_name: "QueryResultsToAlarm"))
+    PutLogAlarmInput.add_member(:threshold, Shapes::ShapeRef.new(shape: Threshold, required: true, location_name: "Threshold"))
+    PutLogAlarmInput.add_member(:comparison_operator, Shapes::ShapeRef.new(shape: ComparisonOperator, required: true, location_name: "ComparisonOperator"))
+    PutLogAlarmInput.add_member(:treat_missing_data, Shapes::ShapeRef.new(shape: TreatMissingData, location_name: "TreatMissingData"))
+    PutLogAlarmInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    PutLogAlarmInput.struct_class = Types::PutLogAlarmInput
+
     PutManagedInsightRulesInput.add_member(:managed_rules, Shapes::ShapeRef.new(shape: ManagedRules, required: true, location_name: "ManagedRules"))
     PutManagedInsightRulesInput.struct_class = Types::PutManagedInsightRulesInput
 
@@ -1160,6 +1222,9 @@ module Aws::CloudWatch
     Range.add_member(:end_time, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "EndTime"))
     Range.struct_class = Types::Range
 
+    ResourceConflict.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "message"))
+    ResourceConflict.struct_class = Types::ResourceConflict
+
     ResourceList.member = Shapes::ShapeRef.new(shape: ResourceName)
 
     ResourceNotFound.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "message"))
@@ -1177,6 +1242,20 @@ module Aws::CloudWatch
     Schedule.add_member(:timezone, Shapes::ShapeRef.new(shape: Timezone, location_name: "Timezone"))
     Schedule.struct_class = Types::Schedule
 
+    ScheduleConfiguration.add_member(:schedule_expression, Shapes::ShapeRef.new(shape: ScheduleExpression, required: true, location_name: "ScheduleExpression"))
+    ScheduleConfiguration.add_member(:start_time_offset, Shapes::ShapeRef.new(shape: StartTimeOffset, location_name: "StartTimeOffset"))
+    ScheduleConfiguration.add_member(:end_time_offset, Shapes::ShapeRef.new(shape: EndTimeOffset, location_name: "EndTimeOffset"))
+    ScheduleConfiguration.struct_class = Types::ScheduleConfiguration
+
+    ScheduledQueryConfiguration.add_member(:query_string, Shapes::ShapeRef.new(shape: QueryString, required: true, location_name: "QueryString"))
+    ScheduledQueryConfiguration.add_member(:log_group_identifiers, Shapes::ShapeRef.new(shape: LogGroupIdentifiers, location_name: "LogGroupIdentifiers"))
+    ScheduledQueryConfiguration.add_member(:query_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "QueryARN"))
+    ScheduledQueryConfiguration.add_member(:scheduled_query_role_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location_name: "ScheduledQueryRoleARN"))
+    ScheduledQueryConfiguration.add_member(:schedule_configuration, Shapes::ShapeRef.new(shape: ScheduleConfiguration, required: true, location_name: "ScheduleConfiguration"))
+    ScheduledQueryConfiguration.add_member(:aggregation_expression, Shapes::ShapeRef.new(shape: AggregationExpression, required: true, location_name: "AggregationExpression"))
+    ScheduledQueryConfiguration.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    ScheduledQueryConfiguration.struct_class = Types::ScheduledQueryConfiguration
+
     SetAlarmStateInput.add_member(:alarm_name, Shapes::ShapeRef.new(shape: AlarmName, required: true, location_name: "AlarmName"))
     SetAlarmStateInput.add_member(:state_value, Shapes::ShapeRef.new(shape: StateValue, required: true, location_name: "StateValue"))
     SetAlarmStateInput.add_member(:state_reason, Shapes::ShapeRef.new(shape: StateReason, required: true, location_name: "StateReason"))
@@ -1291,6 +1370,7 @@ module Aws::CloudWatch
         o.input = Shapes::ShapeRef.new(shape: DeleteAlarmsInput)
         o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFound)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceConflict)
       end)
 
       api.add_operation(:delete_anomaly_detector, Seahorse::Model::Operation.new.tap do |o|
@@ -1707,6 +1787,16 @@ module Aws::CloudWatch
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
       end)
 
+      api.add_operation(:put_log_alarm, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutLogAlarm"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: PutLogAlarmInput)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: LimitExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceConflict)
+      end)
+
       api.add_operation(:put_managed_insight_rules, Seahorse::Model::Operation.new.tap do |o|
         o.name = "PutManagedInsightRules"
         o.http_method = "POST"