aws-sdk-cloudwatchlogs 1.170.0 → 1.171.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45b7e895ef6345e84e37aafd10c52cb3ea79d4acf2d11dbfd000a9490503ad87
-  data.tar.gz: 1f76b3a7d2e18822583cf33b448c43f0510c9f5bd4a528389a3666867460bd47
+  metadata.gz: a9d5306cd1e60d60f9117c6f54e41edb8a89270c70cac6f799d29745b0af24cc
+  data.tar.gz: 9d38a744223bf80a4df1ec845b08971b1ae9e151abb83f07df303beeb23a8ce6
 SHA512:
-  metadata.gz: af91ddd2440e85dca93fe2e47ee4d708174cdf0773ceea44cf94987952e1735e27a0b3c0e6a341ea6397b3509ad7f8d468e10894ac0dea679bdf48203e86e400
-  data.tar.gz: 9a6a78266c3b24f658ef3140a84100186ea0f700d711f30380c77fef6b2242f8fd08b67b7d9a18aa5c1ad18f9e406d44d9408d7c4c4e144ed9762ad46a892a03
+  metadata.gz: a104646ce4558fb323135a13c0d9fac486b123b1f04ad6bc5916fcba2ae95b152c7fbffc34a1fefaf6c62cc871057af953dd50b99b385d4bcfe007f3e31407be
+  data.tar.gz: 4349c4e1a5b1c1e64c943e358bdef16ef97e8e87be486603004960a39140911a73391d11ace7aa45992c07dc82e5347cb7d82d80af3d5a5fc8cb1811fd0460c5

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.171.0 (2026-10-30)
+------------------
+
+* Feature - Adds support for account-level retention policies in Amazon CloudWatch Logs. Customers can now use PutAccountPolicy with the new RETENTION POLICY type to set default log retention across all log groups in an account. Includes dry-run mode to preview the impact of policy changes before applying them.
+
 1.170.0 (2026-10-29)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.170.0
+1.171.0

data/lib/aws-sdk-cloudwatchlogs/client.rb

@@ -1596,15 +1596,41 @@ module Aws::CloudWatchLogs
     # @option params [required, String] :policy_type
     #   The type of policy to delete.
     #
-    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    # @option params [Boolean] :dry_run
+    #   Specifies whether to preview the impact of deleting the policy without
+    #   deleting it. If you specify `true`, CloudWatch Logs does not delete
+    #   the policy and returns the estimated impact in `dryRunResult`. The
+    #   default is `false`.
+    #
+    #   Specifying `dryRun` is valid only when you specify `RETENTION_POLICY`
+    #   for `policyType`. Only one dry run can be in progress for an account
+    #   at a time.
+    #
+    # @return [Types::DeleteAccountPolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteAccountPolicyResponse#dry_run_result #dry_run_result} => Types::DryRunResult
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.delete_account_policy({
     #     policy_name: "PolicyName", # required
-    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY
+    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY, RETENTION_POLICY
+    #     dry_run: false,
     #   })
     #
+    # @example Response structure
+    #
+    #   resp.dry_run_result.total_matched_log_groups #=> Integer
+    #   resp.dry_run_result.increased_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.decreased_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.unchanged_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.failed_analysis_count #=> Integer
+    #   resp.dry_run_result.top_log_groups_impacted #=> Array
+    #   resp.dry_run_result.top_log_groups_impacted[0].log_group_name #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].current_retention #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].proposed_retention #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].stored_bytes #=> Integer
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteAccountPolicy AWS API Documentation
     #
     # @overload delete_account_policy(params = {})
@@ -2274,7 +2300,7 @@ module Aws::CloudWatchLogs
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_account_policies({
-    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY
+    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY, RETENTION_POLICY
     #     policy_name: "PolicyName",
     #     account_identifiers: ["AccountId"],
     #     next_token: "NextToken",
@@ -2286,7 +2312,7 @@ module Aws::CloudWatchLogs
     #   resp.account_policies[0].policy_name #=> String
     #   resp.account_policies[0].policy_document #=> String
     #   resp.account_policies[0].last_updated_time #=> Integer
-    #   resp.account_policies[0].policy_type #=> String, one of "DATA_PROTECTION_POLICY", "SUBSCRIPTION_FILTER_POLICY", "FIELD_INDEX_POLICY", "TRANSFORMER_POLICY", "METRIC_EXTRACTION_POLICY"
+    #   resp.account_policies[0].policy_type #=> String, one of "DATA_PROTECTION_POLICY", "SUBSCRIPTION_FILTER_POLICY", "FIELD_INDEX_POLICY", "TRANSFORMER_POLICY", "METRIC_EXTRACTION_POLICY", "RETENTION_POLICY"
     #   resp.account_policies[0].scope #=> String, one of "ALL"
     #   resp.account_policies[0].selection_criteria #=> String
     #   resp.account_policies[0].account_id #=> String
@@ -3088,6 +3114,7 @@ module Aws::CloudWatchLogs
     #   resp.log_groups[0].log_group_arn #=> String
     #   resp.log_groups[0].deletion_protection_enabled #=> Boolean
     #   resp.log_groups[0].bearer_token_authentication_enabled #=> Boolean
+    #   resp.log_groups[0].retention_policy_name #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DescribeLogGroups AWS API Documentation
@@ -6467,18 +6494,30 @@ module Aws::CloudWatchLogs
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions-recursion-prevention.html
     #
+    # @option params [Boolean] :dry_run
+    #   Specifies whether to preview the impact of the policy without creating
+    #   or updating it. If you specify `true`, CloudWatch Logs validates the
+    #   request, does not save the policy, and returns the estimated impact in
+    #   `dryRunResult` instead of `accountPolicy`. The default is `false`.
+    #
+    #   Specifying `dryRun` is valid only when you specify `RETENTION_POLICY`
+    #   for `policyType`. Only one dry run can be in progress for an account
+    #   at a time.
+    #
     # @return [Types::PutAccountPolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::PutAccountPolicyResponse#account_policy #account_policy} => Types::AccountPolicy
+    #   * {Types::PutAccountPolicyResponse#dry_run_result #dry_run_result} => Types::DryRunResult
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.put_account_policy({
     #     policy_name: "PolicyName", # required
     #     policy_document: "AccountPolicyDocument", # required
-    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY
+    #     policy_type: "DATA_PROTECTION_POLICY", # required, accepts DATA_PROTECTION_POLICY, SUBSCRIPTION_FILTER_POLICY, FIELD_INDEX_POLICY, TRANSFORMER_POLICY, METRIC_EXTRACTION_POLICY, RETENTION_POLICY
     #     scope: "ALL", # accepts ALL
     #     selection_criteria: "SelectionCriteria",
+    #     dry_run: false,
     #   })
     #
     # @example Response structure
@@ -6486,10 +6525,20 @@ module Aws::CloudWatchLogs
     #   resp.account_policy.policy_name #=> String
     #   resp.account_policy.policy_document #=> String
     #   resp.account_policy.last_updated_time #=> Integer
-    #   resp.account_policy.policy_type #=> String, one of "DATA_PROTECTION_POLICY", "SUBSCRIPTION_FILTER_POLICY", "FIELD_INDEX_POLICY", "TRANSFORMER_POLICY", "METRIC_EXTRACTION_POLICY"
+    #   resp.account_policy.policy_type #=> String, one of "DATA_PROTECTION_POLICY", "SUBSCRIPTION_FILTER_POLICY", "FIELD_INDEX_POLICY", "TRANSFORMER_POLICY", "METRIC_EXTRACTION_POLICY", "RETENTION_POLICY"
     #   resp.account_policy.scope #=> String, one of "ALL"
     #   resp.account_policy.selection_criteria #=> String
     #   resp.account_policy.account_id #=> String
+    #   resp.dry_run_result.total_matched_log_groups #=> Integer
+    #   resp.dry_run_result.increased_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.decreased_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.unchanged_retention_log_group_count #=> Integer
+    #   resp.dry_run_result.failed_analysis_count #=> Integer
+    #   resp.dry_run_result.top_log_groups_impacted #=> Array
+    #   resp.dry_run_result.top_log_groups_impacted[0].log_group_name #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].current_retention #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].proposed_retention #=> String
+    #   resp.dry_run_result.top_log_groups_impacted[0].stored_bytes #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/PutAccountPolicy AWS API Documentation
     #
@@ -9737,7 +9786,7 @@ module Aws::CloudWatchLogs
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudwatchlogs'
-      context[:gem_version] = '1.170.0'
+      context[:gem_version] = '1.171.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudwatchlogs/client_api.rb

@@ -95,6 +95,7 @@ module Aws::CloudWatchLogs
     Days = Shapes::IntegerShape.new(name: 'Days')
     DefaultValue = Shapes::FloatShape.new(name: 'DefaultValue')
     DeleteAccountPolicyRequest = Shapes::StructureShape.new(name: 'DeleteAccountPolicyRequest')
+    DeleteAccountPolicyResponse = Shapes::StructureShape.new(name: 'DeleteAccountPolicyResponse')
     DeleteDataProtectionPolicyRequest = Shapes::StructureShape.new(name: 'DeleteDataProtectionPolicyRequest')
     DeleteDeliveryDestinationPolicyRequest = Shapes::StructureShape.new(name: 'DeleteDeliveryDestinationPolicyRequest')
     DeleteDeliveryDestinationRequest = Shapes::StructureShape.new(name: 'DeleteDeliveryDestinationRequest')
@@ -211,6 +212,9 @@ module Aws::CloudWatchLogs
     DisassociateSourceFromS3TableIntegrationRequest = Shapes::StructureShape.new(name: 'DisassociateSourceFromS3TableIntegrationRequest')
     DisassociateSourceFromS3TableIntegrationResponse = Shapes::StructureShape.new(name: 'DisassociateSourceFromS3TableIntegrationResponse')
     Distribution = Shapes::StringShape.new(name: 'Distribution')
+    DryRun = Shapes::BooleanShape.new(name: 'DryRun')
+    DryRunCount = Shapes::IntegerShape.new(name: 'DryRunCount')
+    DryRunResult = Shapes::StructureShape.new(name: 'DryRunResult')
     DynamicTokenPosition = Shapes::IntegerShape.new(name: 'DynamicTokenPosition')
     EmitSystemFields = Shapes::ListShape.new(name: 'EmitSystemFields')
     EncryptionKey = Shapes::StringShape.new(name: 'EncryptionKey')
@@ -412,6 +416,8 @@ module Aws::CloudWatchLogs
     LogGroupFieldList = Shapes::ListShape.new(name: 'LogGroupFieldList')
     LogGroupIdentifier = Shapes::StringShape.new(name: 'LogGroupIdentifier')
     LogGroupIdentifiers = Shapes::ListShape.new(name: 'LogGroupIdentifiers')
+    LogGroupImpact = Shapes::StructureShape.new(name: 'LogGroupImpact')
+    LogGroupImpacts = Shapes::ListShape.new(name: 'LogGroupImpacts')
     LogGroupName = Shapes::StringShape.new(name: 'LogGroupName')
     LogGroupNamePattern = Shapes::StringShape.new(name: 'LogGroupNamePattern')
     LogGroupNameRegexPattern = Shapes::StringShape.new(name: 'LogGroupNameRegexPattern')
@@ -580,6 +586,7 @@ module Aws::CloudWatchLogs
     ResourceTypes = Shapes::ListShape.new(name: 'ResourceTypes')
     ResultField = Shapes::StructureShape.new(name: 'ResultField')
     ResultRows = Shapes::ListShape.new(name: 'ResultRows')
+    RetentionValue = Shapes::StringShape.new(name: 'RetentionValue')
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
     S3Configuration = Shapes::StructureShape.new(name: 'S3Configuration')
     S3DeliveryConfiguration = Shapes::StructureShape.new(name: 'S3DeliveryConfiguration')
@@ -969,8 +976,12 @@ module Aws::CloudWatchLogs
 
     DeleteAccountPolicyRequest.add_member(:policy_name, Shapes::ShapeRef.new(shape: PolicyName, required: true, location_name: "policyName"))
     DeleteAccountPolicyRequest.add_member(:policy_type, Shapes::ShapeRef.new(shape: PolicyType, required: true, location_name: "policyType"))
+    DeleteAccountPolicyRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: DryRun, location_name: "dryRun"))
     DeleteAccountPolicyRequest.struct_class = Types::DeleteAccountPolicyRequest
 
+    DeleteAccountPolicyResponse.add_member(:dry_run_result, Shapes::ShapeRef.new(shape: DryRunResult, location_name: "dryRunResult"))
+    DeleteAccountPolicyResponse.struct_class = Types::DeleteAccountPolicyResponse
+
     DeleteDataProtectionPolicyRequest.add_member(:log_group_identifier, Shapes::ShapeRef.new(shape: LogGroupIdentifier, required: true, location_name: "logGroupIdentifier"))
     DeleteDataProtectionPolicyRequest.struct_class = Types::DeleteDataProtectionPolicyRequest
 
@@ -1343,6 +1354,14 @@ module Aws::CloudWatchLogs
     DisassociateSourceFromS3TableIntegrationResponse.add_member(:identifier, Shapes::ShapeRef.new(shape: S3TableIntegrationSourceIdentifier, location_name: "identifier"))
     DisassociateSourceFromS3TableIntegrationResponse.struct_class = Types::DisassociateSourceFromS3TableIntegrationResponse
 
+    DryRunResult.add_member(:total_matched_log_groups, Shapes::ShapeRef.new(shape: DryRunCount, location_name: "totalMatchedLogGroups"))
+    DryRunResult.add_member(:increased_retention_log_group_count, Shapes::ShapeRef.new(shape: DryRunCount, location_name: "increasedRetentionLogGroupCount"))
+    DryRunResult.add_member(:decreased_retention_log_group_count, Shapes::ShapeRef.new(shape: DryRunCount, location_name: "decreasedRetentionLogGroupCount"))
+    DryRunResult.add_member(:unchanged_retention_log_group_count, Shapes::ShapeRef.new(shape: DryRunCount, location_name: "unchangedRetentionLogGroupCount"))
+    DryRunResult.add_member(:failed_analysis_count, Shapes::ShapeRef.new(shape: DryRunCount, location_name: "failedAnalysisCount"))
+    DryRunResult.add_member(:top_log_groups_impacted, Shapes::ShapeRef.new(shape: LogGroupImpacts, location_name: "topLogGroupsImpacted"))
+    DryRunResult.struct_class = Types::DryRunResult
+
     EmitSystemFields.member = Shapes::ShapeRef.new(shape: SystemField)
 
     Entity.add_member(:key_attributes, Shapes::ShapeRef.new(shape: EntityKeyAttributes, location_name: "keyAttributes"))
@@ -1869,6 +1888,7 @@ module Aws::CloudWatchLogs
     LogGroup.add_member(:log_group_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "logGroupArn"))
     LogGroup.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, location_name: "deletionProtectionEnabled"))
     LogGroup.add_member(:bearer_token_authentication_enabled, Shapes::ShapeRef.new(shape: BearerTokenAuthenticationEnabled, location_name: "bearerTokenAuthenticationEnabled"))
+    LogGroup.add_member(:retention_policy_name, Shapes::ShapeRef.new(shape: PolicyName, location_name: "retentionPolicyName"))
     LogGroup.struct_class = Types::LogGroup
 
     LogGroupArnList.member = Shapes::ShapeRef.new(shape: LogGroupArn)
@@ -1881,6 +1901,14 @@ module Aws::CloudWatchLogs
 
     LogGroupIdentifiers.member = Shapes::ShapeRef.new(shape: LogGroupIdentifier)
 
+    LogGroupImpact.add_member(:log_group_name, Shapes::ShapeRef.new(shape: LogGroupName, location_name: "logGroupName"))
+    LogGroupImpact.add_member(:current_retention, Shapes::ShapeRef.new(shape: RetentionValue, location_name: "currentRetention"))
+    LogGroupImpact.add_member(:proposed_retention, Shapes::ShapeRef.new(shape: RetentionValue, location_name: "proposedRetention"))
+    LogGroupImpact.add_member(:stored_bytes, Shapes::ShapeRef.new(shape: StoredBytes, location_name: "storedBytes"))
+    LogGroupImpact.struct_class = Types::LogGroupImpact
+
+    LogGroupImpacts.member = Shapes::ShapeRef.new(shape: LogGroupImpact)
+
     LogGroupNames.member = Shapes::ShapeRef.new(shape: LogGroupName)
 
     LogGroupSummaries.member = Shapes::ShapeRef.new(shape: LogGroupSummary)
@@ -2124,9 +2152,11 @@ module Aws::CloudWatchLogs
     PutAccountPolicyRequest.add_member(:policy_type, Shapes::ShapeRef.new(shape: PolicyType, required: true, location_name: "policyType"))
     PutAccountPolicyRequest.add_member(:scope, Shapes::ShapeRef.new(shape: Scope, location_name: "scope"))
     PutAccountPolicyRequest.add_member(:selection_criteria, Shapes::ShapeRef.new(shape: SelectionCriteria, location_name: "selectionCriteria"))
+    PutAccountPolicyRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: DryRun, location_name: "dryRun"))
     PutAccountPolicyRequest.struct_class = Types::PutAccountPolicyRequest
 
     PutAccountPolicyResponse.add_member(:account_policy, Shapes::ShapeRef.new(shape: AccountPolicy, location_name: "accountPolicy"))
+    PutAccountPolicyResponse.add_member(:dry_run_result, Shapes::ShapeRef.new(shape: DryRunResult, location_name: "dryRunResult"))
     PutAccountPolicyResponse.struct_class = Types::PutAccountPolicyResponse
 
     PutBearerTokenAuthenticationRequest.add_member(:log_group_identifier, Shapes::ShapeRef.new(shape: LogGroupIdentifier, required: true, location_name: "logGroupIdentifier"))
@@ -2880,7 +2910,7 @@ module Aws::CloudWatchLogs
         o.http_method = "POST"
         o.http_request_uri = "/"
         o.input = Shapes::ShapeRef.new(shape: DeleteAccountPolicyRequest)
-        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.output = Shapes::ShapeRef.new(shape: DeleteAccountPolicyResponse)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)

data/lib/aws-sdk-cloudwatchlogs/types.rb

@@ -1464,11 +1464,36 @@ module Aws::CloudWatchLogs
     #   The type of policy to delete.
     #   @return [String]
     #
+    # @!attribute [rw] dry_run
+    #   Specifies whether to preview the impact of deleting the policy
+    #   without deleting it. If you specify `true`, CloudWatch Logs does not
+    #   delete the policy and returns the estimated impact in
+    #   `dryRunResult`. The default is `false`.
+    #
+    #   Specifying `dryRun` is valid only when you specify
+    #   `RETENTION_POLICY` for `policyType`. Only one dry run can be in
+    #   progress for an account at a time.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteAccountPolicyRequest AWS API Documentation
     #
     class DeleteAccountPolicyRequest < Struct.new(
       :policy_name,
-      :policy_type)
+      :policy_type,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] dry_run_result
+    #   The estimated impact of deleting the policy. This field is returned
+    #   only when the request specifies `dryRun` as `true`.
+    #   @return [Types::DryRunResult]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DeleteAccountPolicyResponse AWS API Documentation
+    #
+    class DeleteAccountPolicyResponse < Struct.new(
+      :dry_run_result)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3397,6 +3422,61 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # Contains the estimated impact of creating, updating, or deleting an
+    # account-level retention policy. The analysis compares the effective
+    # retention period of each log group, which accounts for all
+    # account-level retention policies that apply to it, before and after
+    # the change. Log groups in the Delivery class are not included.
+    #
+    # @!attribute [rw] total_matched_log_groups
+    #   The number of log groups in the scope of the policy that were
+    #   analyzed. This value is the sum of
+    #   `increasedRetentionLogGroupCount`,
+    #   `decreasedRetentionLogGroupCount`, and
+    #   `unchangedRetentionLogGroupCount`, and does not include log groups
+    #   that could not be analyzed.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] increased_retention_log_group_count
+    #   The number of log groups whose effective retention period would
+    #   become longer.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] decreased_retention_log_group_count
+    #   The number of log groups whose effective retention period would
+    #   become shorter.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] unchanged_retention_log_group_count
+    #   The number of log groups whose effective retention period would not
+    #   change.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] failed_analysis_count
+    #   The number of log groups in the scope of the policy that could not
+    #   be analyzed. These log groups are not included in
+    #   `totalMatchedLogGroups`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] top_log_groups_impacted
+    #   Up to 20 log groups in the scope of the policy, sorted by stored
+    #   bytes in descending order. This list can include log groups whose
+    #   effective retention period would not change.
+    #   @return [Array<Types::LogGroupImpact>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/DryRunResult AWS API Documentation
+    #
+    class DryRunResult < Struct.new(
+      :total_matched_log_groups,
+      :increased_retention_log_group_count,
+      :decreased_retention_log_group_count,
+      :unchanged_retention_log_group_count,
+      :failed_analysis_count,
+      :top_log_groups_impacted)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The entity associated with the log events in a `PutLogEvents` call.
     #
     # @!attribute [rw] key_attributes
@@ -6132,6 +6212,16 @@ module Aws::CloudWatchLogs
     #   operations until it is explicitly disabled.
     #   @return [Boolean]
     #
+    # @!attribute [rw] retention_policy_name
+    #   The name of the account-level retention policy that determines the
+    #   retention period of this log group. This field is returned only when
+    #   an account-level retention policy applies to the log group. When it
+    #   is returned, `retentionInDays` shows the retention period from that
+    #   policy instead of the retention period set on the log group. If the
+    #   policy specifies that log events never expire, `retentionInDays` is
+    #   not returned.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/LogGroup AWS API Documentation
     #
     class LogGroup < Struct.new(
@@ -6147,7 +6237,8 @@ module Aws::CloudWatchLogs
       :log_group_class,
       :log_group_arn,
       :deletion_protection_enabled,
-      :bearer_token_authentication_enabled)
+      :bearer_token_authentication_enabled,
+      :retention_policy_name)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6173,6 +6264,40 @@ module Aws::CloudWatchLogs
       include Aws::Structure
     end
 
+    # Describes the estimated effect of an account-level retention policy
+    # change on one log group.
+    #
+    # @!attribute [rw] log_group_name
+    #   The name of the log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] current_retention
+    #   The current effective retention period of the log group, in days. A
+    #   value of `NEVER_EXPIRE` indicates that log events in the log group
+    #   never expire.
+    #   @return [String]
+    #
+    # @!attribute [rw] proposed_retention
+    #   The effective retention period of the log group, in days, after the
+    #   change. A value of `NEVER_EXPIRE` indicates that log events in the
+    #   log group would never expire.
+    #   @return [String]
+    #
+    # @!attribute [rw] stored_bytes
+    #   The number of bytes stored in the log group.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/LogGroupImpact AWS API Documentation
+    #
+    class LogGroupImpact < Struct.new(
+      :log_group_name,
+      :current_retention,
+      :proposed_retention,
+      :stored_bytes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This structure contains information about one log group in your
     # account.
     #
@@ -7888,6 +8013,18 @@ module Aws::CloudWatchLogs
     #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions-recursion-prevention.html
     #   @return [String]
     #
+    # @!attribute [rw] dry_run
+    #   Specifies whether to preview the impact of the policy without
+    #   creating or updating it. If you specify `true`, CloudWatch Logs
+    #   validates the request, does not save the policy, and returns the
+    #   estimated impact in `dryRunResult` instead of `accountPolicy`. The
+    #   default is `false`.
+    #
+    #   Specifying `dryRun` is valid only when you specify
+    #   `RETENTION_POLICY` for `policyType`. Only one dry run can be in
+    #   progress for an account at a time.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/PutAccountPolicyRequest AWS API Documentation
     #
     class PutAccountPolicyRequest < Struct.new(
@@ -7895,7 +8032,8 @@ module Aws::CloudWatchLogs
       :policy_document,
       :policy_type,
       :scope,
-      :selection_criteria)
+      :selection_criteria,
+      :dry_run)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7904,10 +8042,17 @@ module Aws::CloudWatchLogs
     #   The account policy that you created.
     #   @return [Types::AccountPolicy]
     #
+    # @!attribute [rw] dry_run_result
+    #   The estimated impact of the policy on log groups in the account.
+    #   This field is returned only when the request specifies `dryRun` as
+    #   `true`.
+    #   @return [Types::DryRunResult]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/PutAccountPolicyResponse AWS API Documentation
     #
     class PutAccountPolicyResponse < Struct.new(
-      :account_policy)
+      :account_policy,
+      :dry_run_result)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cloudwatchlogs.rb

@@ -55,7 +55,7 @@ module Aws::CloudWatchLogs
   autoload :Endpoints, 'aws-sdk-cloudwatchlogs/endpoints'
   autoload :EventStreams, 'aws-sdk-cloudwatchlogs/event_streams'
 
-  GEM_VERSION = '1.170.0'
+  GEM_VERSION = '1.171.0'
 
 end
 

data/sig/client.rbs

@@ -250,12 +250,17 @@ module Aws
                                   ) -> _CreateScheduledQueryResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateScheduledQueryResponseSuccess
 
+      interface _DeleteAccountPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeleteAccountPolicyResponse]
+        def dry_run_result: () -> Types::DryRunResult
+      end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#delete_account_policy-instance_method
       def delete_account_policy: (
                                    policy_name: ::String,
-                                   policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY")
-                                 ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
-                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
+                                   policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY"),
+                                   ?dry_run: bool
+                                 ) -> _DeleteAccountPolicyResponseSuccess
+                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteAccountPolicyResponseSuccess
 
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#delete_data_protection_policy-instance_method
       def delete_data_protection_policy: (
@@ -404,7 +409,7 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#describe_account_policies-instance_method
       def describe_account_policies: (
-                                       policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY"),
+                                       policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY"),
                                        ?policy_name: ::String,
                                        ?account_identifiers: Array[::String],
                                        ?next_token: ::String
@@ -1129,14 +1134,16 @@ module Aws
       interface _PutAccountPolicyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::PutAccountPolicyResponse]
         def account_policy: () -> Types::AccountPolicy
+        def dry_run_result: () -> Types::DryRunResult
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#put_account_policy-instance_method
       def put_account_policy: (
                                 policy_name: ::String,
                                 policy_document: ::String,
-                                policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY"),
+                                policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY"),
                                 ?scope: ("ALL"),
-                                ?selection_criteria: ::String
+                                ?selection_criteria: ::String,
+                                ?dry_run: bool
                               ) -> _PutAccountPolicyResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutAccountPolicyResponseSuccess
 

data/sig/types.rbs

@@ -15,7 +15,7 @@ module Aws::CloudWatchLogs
       attr_accessor policy_name: ::String
       attr_accessor policy_document: ::String
       attr_accessor last_updated_time: ::Integer
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY")
       attr_accessor scope: ("ALL")
       attr_accessor selection_criteria: ::String
       attr_accessor account_id: ::String
@@ -308,7 +308,13 @@ module Aws::CloudWatchLogs
 
     class DeleteAccountPolicyRequest
       attr_accessor policy_name: ::String
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY")
+      attr_accessor dry_run: bool
+      SENSITIVE: []
+    end
+
+    class DeleteAccountPolicyResponse
+      attr_accessor dry_run_result: Types::DryRunResult
       SENSITIVE: []
     end
 
@@ -491,7 +497,7 @@ module Aws::CloudWatchLogs
     end
 
     class DescribeAccountPoliciesRequest
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY")
       attr_accessor policy_name: ::String
       attr_accessor account_identifiers: ::Array[::String]
       attr_accessor next_token: ::String
@@ -795,6 +801,16 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class DryRunResult
+      attr_accessor total_matched_log_groups: ::Integer
+      attr_accessor increased_retention_log_group_count: ::Integer
+      attr_accessor decreased_retention_log_group_count: ::Integer
+      attr_accessor unchanged_retention_log_group_count: ::Integer
+      attr_accessor failed_analysis_count: ::Integer
+      attr_accessor top_log_groups_impacted: ::Array[Types::LogGroupImpact]
+      SENSITIVE: []
+    end
+
     class Entity
       attr_accessor key_attributes: ::Hash[::String, ::String]
       attr_accessor attributes: ::Hash[::String, ::String]
@@ -1449,6 +1465,7 @@ module Aws::CloudWatchLogs
       attr_accessor log_group_arn: ::String
       attr_accessor deletion_protection_enabled: bool
       attr_accessor bearer_token_authentication_enabled: bool
+      attr_accessor retention_policy_name: ::String
       SENSITIVE: []
     end
 
@@ -1458,6 +1475,14 @@ module Aws::CloudWatchLogs
       SENSITIVE: []
     end
 
+    class LogGroupImpact
+      attr_accessor log_group_name: ::String
+      attr_accessor current_retention: ::String
+      attr_accessor proposed_retention: ::String
+      attr_accessor stored_bytes: ::Integer
+      SENSITIVE: []
+    end
+
     class LogGroupSummary
       attr_accessor log_group_name: ::String
       attr_accessor log_group_arn: ::String
@@ -1731,14 +1756,16 @@ module Aws::CloudWatchLogs
     class PutAccountPolicyRequest
       attr_accessor policy_name: ::String
       attr_accessor policy_document: ::String
-      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY")
+      attr_accessor policy_type: ("DATA_PROTECTION_POLICY" | "SUBSCRIPTION_FILTER_POLICY" | "FIELD_INDEX_POLICY" | "TRANSFORMER_POLICY" | "METRIC_EXTRACTION_POLICY" | "RETENTION_POLICY")
       attr_accessor scope: ("ALL")
       attr_accessor selection_criteria: ::String
+      attr_accessor dry_run: bool
       SENSITIVE: []
     end
 
     class PutAccountPolicyResponse
       attr_accessor account_policy: Types::AccountPolicy
+      attr_accessor dry_run_result: Types::DryRunResult
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudwatchlogs
 version: !ruby/object:Gem::Version
-  version: 1.170.0
+  version: 1.171.0
 platform: ruby
 authors:
 - Amazon Web Services