aws-sdk-cloudwatchlogs 1.102.0 → 1.104.0

data/sig/types.rbs

@@ -15,13 +15,25 @@ module Aws::CloudWatchLogs
       attr_accessor policy_name: ::String
       attr_accessor policy_document: ::String
       attr_accessor last_updated_time: ::Integer
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY")
       attr_accessor scope: ("ALL")
       attr_accessor selection_criteria: ::String
       attr_accessor account_id: ::String
       SENSITIVE: []
     end
 
+    class AddKeyEntry
+      attr_accessor key: ::String
+      attr_accessor value: ::String
+      attr_accessor overwrite_if_exists: bool
+      SENSITIVE: []
+    end
+
+    class AddKeys
+      attr_accessor entries: ::Array[Types::AddKeyEntry]
+      SENSITIVE: []
+    end
+
     class Anomaly
       attr_accessor anomaly_id: ::String
       attr_accessor pattern_id: ::String
@@ -66,6 +78,14 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class CSV
+      attr_accessor quote_character: ::String
+      attr_accessor delimiter: ::String
+      attr_accessor columns: ::Array[::String]
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
     class CancelExportTaskRequest
       attr_accessor task_id: ::String
       SENSITIVE: []
@@ -95,6 +115,18 @@ module Aws::CloudWatchLogs
     class ConflictException < Aws::EmptyStructure
     end
 
+    class CopyValue
+      attr_accessor entries: ::Array[Types::CopyValueEntry]
+      SENSITIVE: []
+    end
+
+    class CopyValueEntry
+      attr_accessor source: ::String
+      attr_accessor target: ::String
+      attr_accessor overwrite_if_exists: bool
+      SENSITIVE: []
+    end
+
     class CreateDeliveryRequest
       attr_accessor delivery_source_name: ::String
       attr_accessor delivery_destination_arn: ::String
@@ -161,9 +193,20 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DateTimeConverter
+      attr_accessor source: ::String
+      attr_accessor target: ::String
+      attr_accessor target_format: ::String
+      attr_accessor match_patterns: ::Array[::String]
+      attr_accessor source_timezone: ::String
+      attr_accessor target_timezone: ::String
+      attr_accessor locale: ::String
+      SENSITIVE: []
+    end
+
     class DeleteAccountPolicyRequest
       attr_accessor policy_name: ::String
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY")
       SENSITIVE: []
     end
 
@@ -197,6 +240,28 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DeleteIndexPolicyRequest
+      attr_accessor log_group_identifier: ::String
+      SENSITIVE: []
+    end
+
+    class DeleteIndexPolicyResponse < Aws::EmptyStructure
+    end
+
+    class DeleteIntegrationRequest
+      attr_accessor integration_name: ::String
+      attr_accessor force: bool
+      SENSITIVE: []
+    end
+
+    class DeleteIntegrationResponse < Aws::EmptyStructure
+    end
+
+    class DeleteKeys
+      attr_accessor with_keys: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class DeleteLogAnomalyDetectorRequest
       attr_accessor anomaly_detector_arn: ::String
       SENSITIVE: []
@@ -245,6 +310,11 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DeleteTransformerRequest
+      attr_accessor log_group_identifier: ::String
+      SENSITIVE: []
+    end
+
     class Delivery
       attr_accessor id: ::String
       attr_accessor arn: ::String
@@ -284,14 +354,16 @@ module Aws::CloudWatchLogs
     end
 
     class DescribeAccountPoliciesRequest
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY")
       attr_accessor policy_name: ::String
       attr_accessor account_identifiers: ::Array[::String]
+      attr_accessor next_token: ::String
       SENSITIVE: []
     end
 
     class DescribeAccountPoliciesResponse
       attr_accessor account_policies: ::Array[Types::AccountPolicy]
+      attr_accessor next_token: ::String
       SENSITIVE: []
     end
 
@@ -374,6 +446,30 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DescribeFieldIndexesRequest
+      attr_accessor log_group_identifiers: ::Array[::String]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeFieldIndexesResponse
+      attr_accessor field_indexes: ::Array[Types::FieldIndex]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeIndexPoliciesRequest
+      attr_accessor log_group_identifiers: ::Array[::String]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeIndexPoliciesResponse
+      attr_accessor index_policies: ::Array[Types::IndexPolicy]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class DescribeLogGroupsRequest
       attr_accessor account_identifiers: ::Array[::String]
       attr_accessor log_group_name_prefix: ::String
@@ -429,6 +525,7 @@ module Aws::CloudWatchLogs
       attr_accessor status: ("Scheduled" | "Running" | "Complete" | "Failed" | "Cancelled" | "Timeout" | "Unknown")
       attr_accessor max_results: ::Integer
       attr_accessor next_token: ::String
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       SENSITIVE: []
     end
 
@@ -439,6 +536,7 @@ module Aws::CloudWatchLogs
     end
 
     class DescribeQueryDefinitionsRequest
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor query_definition_name_prefix: ::String
       attr_accessor max_results: ::Integer
       attr_accessor next_token: ::String
@@ -524,6 +622,15 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class FieldIndex
+      attr_accessor log_group_identifier: ::String
+      attr_accessor field_index_name: ::String
+      attr_accessor last_scan_time: ::Integer
+      attr_accessor first_event_time: ::Integer
+      attr_accessor last_event_time: ::Integer
+      SENSITIVE: []
+    end
+
     class FilterLogEventsRequest
       attr_accessor log_group_name: ::String
       attr_accessor log_group_identifier: ::String
@@ -607,6 +714,19 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class GetIntegrationRequest
+      attr_accessor integration_name: ::String
+      SENSITIVE: []
+    end
+
+    class GetIntegrationResponse
+      attr_accessor integration_name: ::String
+      attr_accessor integration_type: ("OPENSEARCH")
+      attr_accessor integration_status: ("PROVISIONING" | "ACTIVE" | "FAILED")
+      attr_accessor integration_details: Types::IntegrationDetails
+      SENSITIVE: []
+    end
+
     class GetLogAnomalyDetectorRequest
       attr_accessor anomaly_detector_arn: ::String
       SENSITIVE: []
@@ -674,6 +794,7 @@ module Aws::CloudWatchLogs
     end
 
     class GetQueryResultsResponse
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor results: ::Array[::Array[Types::ResultField]]
       attr_accessor statistics: Types::QueryStatistics
       attr_accessor status: ("Scheduled" | "Running" | "Complete" | "Failed" | "Cancelled" | "Timeout" | "Unknown")
@@ -681,12 +802,58 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class GetTransformerRequest
+      attr_accessor log_group_identifier: ::String
+      SENSITIVE: []
+    end
+
+    class GetTransformerResponse
+      attr_accessor log_group_identifier: ::String
+      attr_accessor creation_time: ::Integer
+      attr_accessor last_modified_time: ::Integer
+      attr_accessor transformer_config: ::Array[Types::Processor]
+      SENSITIVE: []
+    end
+
+    class Grok
+      attr_accessor source: ::String
+      attr_accessor match: ::String
+      SENSITIVE: []
+    end
+
+    class IndexPolicy
+      attr_accessor log_group_identifier: ::String
+      attr_accessor last_update_time: ::Integer
+      attr_accessor policy_document: ::String
+      attr_accessor policy_name: ::String
+      attr_accessor source: ("ACCOUNT" | "LOG_GROUP")
+      SENSITIVE: []
+    end
+
     class InputLogEvent
       attr_accessor timestamp: ::Integer
       attr_accessor message: ::String
       SENSITIVE: []
     end
 
+    class IntegrationDetails
+      attr_accessor open_search_integration_details: Types::OpenSearchIntegrationDetails
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class OpenSearchIntegrationDetails < IntegrationDetails
+      end
+      class Unknown < IntegrationDetails
+      end
+    end
+
+    class IntegrationSummary
+      attr_accessor integration_name: ::String
+      attr_accessor integration_type: ("OPENSEARCH")
+      attr_accessor integration_status: ("PROVISIONING" | "ACTIVE" | "FAILED")
+      SENSITIVE: []
+    end
+
     class InvalidOperationException < Aws::EmptyStructure
     end
 
@@ -715,6 +882,18 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class ListIntegrationsRequest
+      attr_accessor integration_name_prefix: ::String
+      attr_accessor integration_type: ("OPENSEARCH")
+      attr_accessor integration_status: ("PROVISIONING" | "ACTIVE" | "FAILED")
+      SENSITIVE: []
+    end
+
+    class ListIntegrationsResponse
+      attr_accessor integration_summaries: ::Array[Types::IntegrationSummary]
+      SENSITIVE: []
+    end
+
     class ListLogAnomalyDetectorsRequest
       attr_accessor filter_log_group_arn: ::String
       attr_accessor limit: ::Integer
@@ -728,6 +907,19 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class ListLogGroupsForQueryRequest
+      attr_accessor query_id: ::String
+      attr_accessor next_token: ::String
+      attr_accessor max_results: ::Integer
+      SENSITIVE: []
+    end
+
+    class ListLogGroupsForQueryResponse
+      attr_accessor log_group_identifiers: ::Array[::String]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class ListTagsForResourceRequest
       attr_accessor resource_arn: ::String
       SENSITIVE: []
@@ -748,6 +940,16 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class ListToMap
+      attr_accessor source: ::String
+      attr_accessor key: ::String
+      attr_accessor value_key: ::String
+      attr_accessor target: ::String
+      attr_accessor flatten: bool
+      attr_accessor flattened_element: ("first" | "last")
+      SENSITIVE: []
+    end
+
     class LiveTailSessionLogEvent
       attr_accessor log_stream_name: ::String
       attr_accessor log_group_identifier: ::String
@@ -819,6 +1021,11 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class LowerCaseString
+      attr_accessor with_keys: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class MalformedQueryException
       attr_accessor query_compile_error: Types::QueryCompileError
       SENSITIVE: []
@@ -830,6 +1037,7 @@ module Aws::CloudWatchLogs
       attr_accessor metric_transformations: ::Array[Types::MetricTransformation]
       attr_accessor creation_time: ::Integer
       attr_accessor log_group_name: ::String
+      attr_accessor apply_on_transformed_logs: bool
       SENSITIVE: []
     end
 
@@ -850,6 +1058,96 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class MoveKeyEntry
+      attr_accessor source: ::String
+      attr_accessor target: ::String
+      attr_accessor overwrite_if_exists: bool
+      SENSITIVE: []
+    end
+
+    class MoveKeys
+      attr_accessor entries: ::Array[Types::MoveKeyEntry]
+      SENSITIVE: []
+    end
+
+    class OpenSearchApplication
+      attr_accessor application_endpoint: ::String
+      attr_accessor application_arn: ::String
+      attr_accessor application_id: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchCollection
+      attr_accessor collection_endpoint: ::String
+      attr_accessor collection_arn: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchDataAccessPolicy
+      attr_accessor policy_name: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchDataSource
+      attr_accessor data_source_name: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchEncryptionPolicy
+      attr_accessor policy_name: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchIntegrationDetails
+      attr_accessor data_source: Types::OpenSearchDataSource
+      attr_accessor application: Types::OpenSearchApplication
+      attr_accessor collection: Types::OpenSearchCollection
+      attr_accessor workspace: Types::OpenSearchWorkspace
+      attr_accessor encryption_policy: Types::OpenSearchEncryptionPolicy
+      attr_accessor network_policy: Types::OpenSearchNetworkPolicy
+      attr_accessor access_policy: Types::OpenSearchDataAccessPolicy
+      attr_accessor lifecycle_policy: Types::OpenSearchLifecyclePolicy
+      SENSITIVE: []
+    end
+
+    class OpenSearchLifecyclePolicy
+      attr_accessor policy_name: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchNetworkPolicy
+      attr_accessor policy_name: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
+    class OpenSearchResourceConfig
+      attr_accessor kms_key_arn: ::String
+      attr_accessor data_source_role_arn: ::String
+      attr_accessor dashboard_viewer_principals: ::Array[::String]
+      attr_accessor application_arn: ::String
+      attr_accessor retention_days: ::Integer
+      SENSITIVE: []
+    end
+
+    class OpenSearchResourceStatus
+      attr_accessor status: ("ACTIVE" | "NOT_FOUND" | "ERROR")
+      attr_accessor status_message: ::String
+      SENSITIVE: []
+    end
+
+    class OpenSearchWorkspace
+      attr_accessor workspace_id: ::String
+      attr_accessor status: Types::OpenSearchResourceStatus
+      SENSITIVE: []
+    end
+
     class OperationAbortedException < Aws::EmptyStructure
     end
 
@@ -860,6 +1158,48 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class ParseCloudfront
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
+    class ParseJSON
+      attr_accessor source: ::String
+      attr_accessor destination: ::String
+      SENSITIVE: []
+    end
+
+    class ParseKeyValue
+      attr_accessor source: ::String
+      attr_accessor destination: ::String
+      attr_accessor field_delimiter: ::String
+      attr_accessor key_value_delimiter: ::String
+      attr_accessor key_prefix: ::String
+      attr_accessor non_match_value: ::String
+      attr_accessor overwrite_if_exists: bool
+      SENSITIVE: []
+    end
+
+    class ParsePostgres
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
+    class ParseRoute53
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
+    class ParseVPC
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
+    class ParseWAF
+      attr_accessor source: ::String
+      SENSITIVE: []
+    end
+
     class PatternToken
       attr_accessor dynamic_token_position: ::Integer
       attr_accessor is_dynamic: bool
@@ -874,10 +1214,36 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class Processor
+      attr_accessor add_keys: Types::AddKeys
+      attr_accessor copy_value: Types::CopyValue
+      attr_accessor csv: Types::CSV
+      attr_accessor date_time_converter: Types::DateTimeConverter
+      attr_accessor delete_keys: Types::DeleteKeys
+      attr_accessor grok: Types::Grok
+      attr_accessor list_to_map: Types::ListToMap
+      attr_accessor lower_case_string: Types::LowerCaseString
+      attr_accessor move_keys: Types::MoveKeys
+      attr_accessor parse_cloudfront: Types::ParseCloudfront
+      attr_accessor parse_json: Types::ParseJSON
+      attr_accessor parse_key_value: Types::ParseKeyValue
+      attr_accessor parse_route_53: Types::ParseRoute53
+      attr_accessor parse_postgres: Types::ParsePostgres
+      attr_accessor parse_vpc: Types::ParseVPC
+      attr_accessor parse_waf: Types::ParseWAF
+      attr_accessor rename_keys: Types::RenameKeys
+      attr_accessor split_string: Types::SplitString
+      attr_accessor substitute_string: Types::SubstituteString
+      attr_accessor trim_string: Types::TrimString
+      attr_accessor type_converter: Types::TypeConverter
+      attr_accessor upper_case_string: Types::UpperCaseString
+      SENSITIVE: []
+    end
+
     class PutAccountPolicyRequest
       attr_accessor policy_name: ::String
       attr_accessor policy_document: ::String
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY")
       attr_accessor scope: ("ALL")
       attr_accessor selection_criteria: ::String
       SENSITIVE: []
@@ -958,6 +1324,30 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class PutIndexPolicyRequest
+      attr_accessor log_group_identifier: ::String
+      attr_accessor policy_document: ::String
+      SENSITIVE: []
+    end
+
+    class PutIndexPolicyResponse
+      attr_accessor index_policy: Types::IndexPolicy
+      SENSITIVE: []
+    end
+
+    class PutIntegrationRequest
+      attr_accessor integration_name: ::String
+      attr_accessor resource_config: Types::ResourceConfig
+      attr_accessor integration_type: ("OPENSEARCH")
+      SENSITIVE: []
+    end
+
+    class PutIntegrationResponse
+      attr_accessor integration_name: ::String
+      attr_accessor integration_status: ("PROVISIONING" | "ACTIVE" | "FAILED")
+      SENSITIVE: []
+    end
+
     class PutLogEventsRequest
       attr_accessor log_group_name: ::String
       attr_accessor log_stream_name: ::String
@@ -979,10 +1369,12 @@ module Aws::CloudWatchLogs
       attr_accessor filter_name: ::String
       attr_accessor filter_pattern: ::String
       attr_accessor metric_transformations: ::Array[Types::MetricTransformation]
+      attr_accessor apply_on_transformed_logs: bool
       SENSITIVE: []
     end
 
     class PutQueryDefinitionRequest
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor name: ::String
       attr_accessor query_definition_id: ::String
       attr_accessor log_group_names: ::Array[::String]
@@ -1020,6 +1412,13 @@ module Aws::CloudWatchLogs
       attr_accessor destination_arn: ::String
       attr_accessor role_arn: ::String
       attr_accessor distribution: ("Random" | "ByLogStream")
+      attr_accessor apply_on_transformed_logs: bool
+      SENSITIVE: []
+    end
+
+    class PutTransformerRequest
+      attr_accessor log_group_identifier: ::String
+      attr_accessor transformer_config: ::Array[Types::Processor]
       SENSITIVE: []
     end
 
@@ -1036,6 +1435,7 @@ module Aws::CloudWatchLogs
     end
 
     class QueryDefinition
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor query_definition_id: ::String
       attr_accessor name: ::String
       attr_accessor query_string: ::String
@@ -1045,6 +1445,7 @@ module Aws::CloudWatchLogs
     end
 
     class QueryInfo
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor query_id: ::String
       attr_accessor query_string: ::String
       attr_accessor status: ("Scheduled" | "Running" | "Complete" | "Failed" | "Cancelled" | "Timeout" | "Unknown")
@@ -1056,7 +1457,10 @@ module Aws::CloudWatchLogs
     class QueryStatistics
       attr_accessor records_matched: ::Float
       attr_accessor records_scanned: ::Float
+      attr_accessor estimated_records_skipped: ::Float
       attr_accessor bytes_scanned: ::Float
+      attr_accessor estimated_bytes_skipped: ::Float
+      attr_accessor log_groups_scanned: ::Float
       SENSITIVE: []
     end
 
@@ -1078,9 +1482,32 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class RenameKeyEntry
+      attr_accessor key: ::String
+      attr_accessor rename_to: ::String
+      attr_accessor overwrite_if_exists: bool
+      SENSITIVE: []
+    end
+
+    class RenameKeys
+      attr_accessor entries: ::Array[Types::RenameKeyEntry]
+      SENSITIVE: []
+    end
+
     class ResourceAlreadyExistsException < Aws::EmptyStructure
     end
 
+    class ResourceConfig
+      attr_accessor open_search_resource_config: Types::OpenSearchResourceConfig
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class OpenSearchResourceConfig < ResourceConfig
+      end
+      class Unknown < ResourceConfig
+      end
+    end
+
     class ResourceNotFoundException < Aws::EmptyStructure
     end
 
@@ -1127,6 +1554,17 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class SplitString
+      attr_accessor entries: ::Array[Types::SplitStringEntry]
+      SENSITIVE: []
+    end
+
+    class SplitStringEntry
+      attr_accessor source: ::String
+      attr_accessor delimiter: ::String
+      SENSITIVE: []
+    end
+
     class StartLiveTailRequest
       attr_accessor log_group_identifiers: ::Array[::String]
       attr_accessor log_stream_names: ::Array[::String]
@@ -1141,6 +1579,7 @@ module Aws::CloudWatchLogs
     end
 
     class StartQueryRequest
+      attr_accessor query_language: ("CWLI" | "SQL" | "PPL")
       attr_accessor log_group_name: ::String
       attr_accessor log_group_names: ::Array[::String]
       attr_accessor log_group_identifiers: ::Array[::String]
@@ -1173,10 +1612,23 @@ module Aws::CloudWatchLogs
       attr_accessor destination_arn: ::String
       attr_accessor role_arn: ::String
       attr_accessor distribution: ("Random" | "ByLogStream")
+      attr_accessor apply_on_transformed_logs: bool
       attr_accessor creation_time: ::Integer
       SENSITIVE: []
     end
 
+    class SubstituteString
+      attr_accessor entries: ::Array[Types::SubstituteStringEntry]
+      SENSITIVE: []
+    end
+
+    class SubstituteStringEntry
+      attr_accessor source: ::String
+      attr_accessor from: ::String
+      attr_accessor to: ::String
+      SENSITIVE: []
+    end
+
     class SuppressionPeriod
       attr_accessor value: ::Integer
       attr_accessor suppression_unit: ("SECONDS" | "MINUTES" | "HOURS")
@@ -1206,6 +1658,17 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class TestTransformerRequest
+      attr_accessor transformer_config: ::Array[Types::Processor]
+      attr_accessor log_event_messages: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class TestTransformerResponse
+      attr_accessor transformed_logs: ::Array[Types::TransformedLogRecord]
+      SENSITIVE: []
+    end
+
     class ThrottlingException < Aws::EmptyStructure
     end
 
@@ -1215,6 +1678,29 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class TransformedLogRecord
+      attr_accessor event_number: ::Integer
+      attr_accessor event_message: ::String
+      attr_accessor transformed_event_message: ::String
+      SENSITIVE: []
+    end
+
+    class TrimString
+      attr_accessor with_keys: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class TypeConverter
+      attr_accessor entries: ::Array[Types::TypeConverterEntry]
+      SENSITIVE: []
+    end
+
+    class TypeConverterEntry
+      attr_accessor key: ::String
+      attr_accessor type: ("boolean" | "integer" | "double" | "string")
+      SENSITIVE: []
+    end
+
     class UnrecognizedClientException < Aws::EmptyStructure
     end
 
@@ -1260,6 +1746,11 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class UpperCaseString
+      attr_accessor with_keys: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class ValidationException < Aws::EmptyStructure
     end