aws-sdk-cloudwatchlogs 1.171.0 → 1.173.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9d5306cd1e60d60f9117c6f54e41edb8a89270c70cac6f799d29745b0af24cc
-  data.tar.gz: 9d38a744223bf80a4df1ec845b08971b1ae9e151abb83f07df303beeb23a8ce6
+  metadata.gz: 1d7b4c180aaf3c6a6d529f98cb25ea274b5f84eed4768219f16f0c72975103f4
+  data.tar.gz: b11975106533fcff541266f5a35198803f474e32e718e8933a9409b8267688c3
 SHA512:
-  metadata.gz: a104646ce4558fb323135a13c0d9fac486b123b1f04ad6bc5916fcba2ae95b152c7fbffc34a1fefaf6c62cc871057af953dd50b99b385d4bcfe007f3e31407be
-  data.tar.gz: 4349c4e1a5b1c1e64c943e358bdef16ef97e8e87be486603004960a39140911a73391d11ace7aa45992c07dc82e5347cb7d82d80af3d5a5fc8cb1811fd0460c5
+  metadata.gz: 65fedde140accc5ffd7c61d4228dffb6c5498adce0cffb9a37b33fa65f80537b04ec16f0788a397983a305782d55d4df22012d4159a8df6af6208c15e7c5e6fb
+  data.tar.gz: 12cc8ee636570a4ff2093878845b23cdbee0c0598e9b75ce381efe78931eacfc2420029de1aa5c3fefbec918a3a6ebdb80cea19bc809c151bb3a00030ef2c4a8

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.173.0 (2026-11-05)
+------------------
+
+* Feature - Adds account-level retention policies with dry run preview and the Essentials log group class to Amazon CloudWatch Logs
+
+1.172.0 (2026-11-04)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.171.0 (2026-10-30)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.171.0
+1.173.0

data/lib/aws-sdk-cloudwatchlogs/client.rb

@@ -1257,13 +1257,16 @@ module Aws::CloudWatchLogs
     #
     # @option params [String] :log_group_class
     #   Use this parameter to specify the log group class for this log group.
-    #   There are three classes:
+    #   There are four classes:
     #
     #   * The `Standard` log class supports all CloudWatch Logs features.
     #
     #   * The `Infrequent Access` log class supports a subset of CloudWatch
     #     Logs features and incurs lower costs.
     #
+    #   * The `Essentials` log class supports a subset of CloudWatch Logs
+    #     features and incurs lower costs.
+    #
     #   * Use the `Delivery` log class only for delivering Lambda logs to
     #     store in Amazon S3 or Amazon Data Firehose. Log events in log groups
     #     in the Delivery class are kept in CloudWatch Logs for only one day.
@@ -1298,7 +1301,7 @@ module Aws::CloudWatchLogs
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
-    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY
+    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY, ESSENTIALS
     #     deletion_protection_enabled: false,
     #   })
     #
@@ -1559,10 +1562,13 @@ module Aws::CloudWatchLogs
     # Deletes a CloudWatch Logs account policy. This stops the account-wide
     # policy from applying to log groups or data sources in the account. If
     # you delete a data protection policy or subscription filter policy, any
-    # log-group level policies of those types remain in effect. This
-    # operation supports deletion of data source-based field index policies,
-    # including facet configurations, in addition to log group-based
-    # policies.
+    # log-group level policies of those types remain in effect. If you
+    # delete a retention policy, the log groups that it applied to use their
+    # own retention setting, unless another retention policy applies to
+    # them. Deleting a retention policy does not restore log events that
+    # CloudWatch Logs has already deleted. This operation supports deletion
+    # of data source-based field index policies, including facet
+    # configurations, in addition to log group-based policies.
     #
     # To use this operation, you must be signed on with the correct
     # permissions depending on the type of policy that you are deleting.
@@ -1586,6 +1592,12 @@ module Aws::CloudWatchLogs
     #   interactive exploration in the CloudWatch Logs Insights console.
     #   However, facet data is retained for up to 30 days.
     #
+    # * To delete a retention policy, you must have the
+    #   `logs:DeleteRetentionPolicy` and `logs:DeleteAccountPolicy`
+    #   permissions. To preview the impact of deleting a retention policy,
+    #   specify `true` for `dryRun`. A dry run requires the same permissions
+    #   as the operation that it previews, and no additional permissions.
+    #
     # If you delete a field index policy, the indexing of the log events
     # that happened before you deleted the policy will still be used for up
     # to 30 days to improve CloudWatch Logs Insights queries.
@@ -2117,6 +2129,15 @@ module Aws::CloudWatchLogs
     # Log events do not expire if they belong to log groups without a
     # retention policy.
     #
+    # If an account-level retention policy applies to this log group, the
+    # log group uses the retention period from that policy. For more
+    # information about account-level retention policies, see
+    # [PutAccountPolicy][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutAccountPolicy.html
+    #
     # @option params [required, String] :log_group_name
     #   The name of the log group.
     #
@@ -2270,6 +2291,9 @@ module Aws::CloudWatchLogs
     #   `logs:DescribeIndexPolicies` and `logs:DescribeAccountPolicies`
     #   permissions.
     #
+    # * To see retention policies, you must have the
+    #   `logs:DescribeAccountPolicies` permission.
+    #
     # @option params [required, String] :policy_type
     #   Use this parameter to limit the returned policies to only the policies
     #   that match the policy type that you specify.
@@ -2974,6 +2998,10 @@ module Aws::CloudWatchLogs
     # filter the results by prefix. The results are ASCII-sorted by log
     # group name.
     #
+    # If an account-level retention policy applies to a log group,
+    # `retentionInDays` shows the retention period from that policy, and
+    # `retentionPolicyName` shows the name of the policy.
+    #
     # CloudWatch Logs doesn't support IAM policies that control access to
     # the `DescribeLogGroups` action by using the `aws:ResourceTag/key-name
     # ` condition key. Other CloudWatch Logs actions do support the use of
@@ -3045,7 +3073,11 @@ module Aws::CloudWatchLogs
     #   the specified log group class. If you omit this parameter, log groups
     #   of all classes can be returned.
     #
-    #   Specifies the log group class for this log group. There are three
+    #   If you specify either `INFREQUENT_ACCESS` or `ESSENTIALS`, the results
+    #   include log groups in both the Infrequent Access and Essentials log
+    #   classes.
+    #
+    #   Specifies the log group class for this log group. There are four
     #   classes:
     #
     #   * The `Standard` log class supports all CloudWatch Logs features.
@@ -3053,6 +3085,9 @@ module Aws::CloudWatchLogs
     #   * The `Infrequent Access` log class supports a subset of CloudWatch
     #     Logs features and incurs lower costs.
     #
+    #   * The `Essentials` log class supports a subset of CloudWatch Logs
+    #     features and incurs lower costs.
+    #
     #   * Use the `Delivery` log class only for delivering Lambda logs to
     #     store in Amazon S3 or Amazon Data Firehose. Log events in log groups
     #     in the Delivery class are kept in CloudWatch Logs for only one day.
@@ -3093,7 +3128,7 @@ module Aws::CloudWatchLogs
     #     next_token: "NextToken",
     #     limit: 1,
     #     include_linked_accounts: false,
-    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY
+    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY, ESSENTIALS
     #     log_group_identifiers: ["LogGroupIdentifier"],
     #   })
     #
@@ -3110,7 +3145,7 @@ module Aws::CloudWatchLogs
     #   resp.log_groups[0].data_protection_status #=> String, one of "ACTIVATED", "DELETED", "ARCHIVED", "DISABLED"
     #   resp.log_groups[0].inherited_properties #=> Array
     #   resp.log_groups[0].inherited_properties[0] #=> String, one of "ACCOUNT_DATA_PROTECTION"
-    #   resp.log_groups[0].log_group_class #=> String, one of "STANDARD", "INFREQUENT_ACCESS", "DELIVERY"
+    #   resp.log_groups[0].log_group_class #=> String, one of "STANDARD", "INFREQUENT_ACCESS", "DELIVERY", "ESSENTIALS"
     #   resp.log_groups[0].log_group_arn #=> String
     #   resp.log_groups[0].deletion_protection_enabled #=> Boolean
     #   resp.log_groups[0].bearer_token_authentication_enabled #=> Boolean
@@ -5275,7 +5310,7 @@ module Aws::CloudWatchLogs
     #   resp = client.list_aggregate_log_group_summaries({
     #     account_identifiers: ["AccountId"],
     #     include_linked_accounts: false,
-    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY
+    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY, ESSENTIALS
     #     log_group_name_pattern: "LogGroupNameRegexPattern",
     #     data_sources: [
     #       {
@@ -5580,7 +5615,7 @@ module Aws::CloudWatchLogs
     #
     #   resp = client.list_log_groups({
     #     log_group_name_pattern: "LogGroupNameRegexPattern",
-    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY
+    #     log_group_class: "STANDARD", # accepts STANDARD, INFREQUENT_ACCESS, DELIVERY, ESSENTIALS
     #     include_linked_accounts: false,
     #     account_identifiers: ["AccountId"],
     #     next_token: "NextToken",
@@ -5605,7 +5640,7 @@ module Aws::CloudWatchLogs
     #   resp.log_groups #=> Array
     #   resp.log_groups[0].log_group_name #=> String
     #   resp.log_groups[0].log_group_arn #=> String
-    #   resp.log_groups[0].log_group_class #=> String, one of "STANDARD", "INFREQUENT_ACCESS", "DELIVERY"
+    #   resp.log_groups[0].log_group_class #=> String, one of "STANDARD", "INFREQUENT_ACCESS", "DELIVERY", "ESSENTIALS"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/ListLogGroups AWS API Documentation
@@ -5924,12 +5959,13 @@ module Aws::CloudWatchLogs
     end
 
     # Creates an account-level data protection policy, subscription filter
-    # policy, field index policy, transformer policy, or metric extraction
-    # policy that applies to all log groups, a subset of log groups, or a
-    # data source name and type combination in the account. Account-level
-    # policies are Region-specific: a policy applies only to log groups in
-    # the Region where you create it. To apply a policy across multiple
-    # Regions, create the policy separately in each Region.
+    # policy, field index policy, transformer policy, metric extraction
+    # policy, or retention policy that applies to all log groups, a subset
+    # of log groups, or a data source name and type combination in the
+    # account. Account-level policies are Region-specific: a policy applies
+    # only to log groups in the Region where you create it. To apply a
+    # policy across multiple Regions, create the policy separately in each
+    # Region.
     #
     # `PutAccountPolicy` is an account-wide administrative operation
     # intended for CloudWatch Logs administrators. Because it affects all
@@ -5969,6 +6005,9 @@ module Aws::CloudWatchLogs
     #   account-level only and have no log-group-level equivalent, so no
     #   conflict resolution applies.
     #
+    # * *Retention policies* — An account-level retention policy overrides
+    #   the retention setting of the log group.
+    #
     # For field index policies, you can configure indexed fields as *facets*
     # to enable interactive exploration of your logs. Facets provide value
     # distributions and counts for indexed fields in the CloudWatch Logs
@@ -5999,6 +6038,11 @@ module Aws::CloudWatchLogs
     #   `logs:PutMetricExtractionPolicy` and `logs:PutAccountPolicy`
     #   permissions.
     #
+    # * To create a retention policy, you must have the
+    #   `logs:PutRetentionPolicy` and `logs:PutAccountPolicy` permissions. A
+    #   dry run requires the same permissions as the operation that it
+    #   previews, and no additional permissions.
+    #
     # **Data protection policy**
     #
     # A data protection policy can help safeguard sensitive data that's
@@ -6319,6 +6363,60 @@ module Aws::CloudWatchLogs
     #   groups matching `"/aws"` is not a subset of the log groups matching
     #   `"/aws/lambda"`.
     #
+    # **Retention policy**
+    #
+    # A retention policy sets the retention period for log groups in your
+    # account. You can use an account-level retention policy to set a
+    # default retention period for all log groups in the account, or for a
+    # subset of log groups that you specify with the `selectionCriteria`
+    # parameter. CloudWatch Logs automatically deletes log events that are
+    # older than the retention period.
+    #
+    # Each account can have up to 20 account-level retention policies in
+    # each Region. To scope a retention policy to a subset of log groups,
+    # use `LogGroupNamePrefix` in `selectionCriteria`. Retention policies
+    # support log group name prefixes only. If you omit `selectionCriteria`,
+    # the policy applies to all log groups in the account.
+    #
+    # Unlike other account-level policy types, retention policies can have
+    # overlapping selection criteria. When more than one retention policy
+    # applies to a log group, the policy with the longest retention period
+    # is used. A policy that specifies `NEVER_EXPIRE` is treated as the
+    # longest retention period. This lets you set a baseline retention
+    # period for the account, apply longer retention periods to specific log
+    # groups, and exempt specific log groups from expiring at all. If two
+    # policies that apply to the same log group specify the same retention
+    # period, the policy that was created first is the one reported in
+    # `retentionPolicyName`.
+    #
+    # <note markdown="1"> Account-level retention policies require a minimum retention period of
+    # 30 days.
+    #
+    #  </note>
+    #
+    # <note markdown="1"> A retention policy takes effect 24 hours after you create it. If you
+    # update a policy, the new retention period takes effect 24 hours after
+    # the update, and the previous retention period stays in effect until
+    # then. During this period, `DescribeLogGroups` and log event expiration
+    # use the retention period that is currently in effect, but a dry run
+    # reports the impact as if the policy were already in effect.
+    #
+    #  </note>
+    #
+    # Before you create, update, or delete a retention policy, you can
+    # specify `true` for `dryRun` to preview how many log groups would have
+    # a longer, shorter, or unchanged retention period. For more
+    # information, see [DryRunResult][14].
+    #
+    # An account-level retention policy replaces the retention period set on
+    # a log group, including when the log group's own retention period is
+    # longer. For example, if a log group is set to retain log events for 10
+    # years and you create a retention policy that sets a 90-day retention
+    # period for that log group, CloudWatch Logs deletes the log events in
+    # that log group that are older than 90 days. Specify `true` for
+    # `dryRun` to see which log groups would have a shorter retention period
+    # before you create or update the policy.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Facets.html
@@ -6334,6 +6432,7 @@ module Aws::CloudWatchLogs
     # [11]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogFields.html
     # [12]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing-Syntax
     # [13]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutIndexPolicy.html
+    # [14]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DryRunResult.html
     #
     # @option params [required, String] :policy_name
     #   A name for the policy. This must be unique within the account and
@@ -6445,6 +6544,36 @@ module Aws::CloudWatchLogs
     #   types are `FIELD_INDEX` and `FACET`. Field names within `Fields` and
     #   `FieldsV2` must be mutually exclusive.
     #
+    #   **Retention policy**
+    #
+    #   A retention policy must include the following attributes in a JSON
+    #   block:
+    #
+    #   retentionInDays
+    #
+    #   : The number of days to retain log events. Valid values are 30, 60,
+    #     90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922,
+    #     3288, and 3653. To retain log events indefinitely, specify the
+    #     string `NEVER_EXPIRE`.
+    #
+    #   enforcementMode
+    #
+    #   : Specifies which log groups the policy applies to. Valid values are
+    #     `NEW_ONLY` and `RETROACTIVE`.
+    #
+    #     `RETROACTIVE` applies the policy to every log group that matches the
+    #     selection criteria, including log groups that existed before you
+    #     created the policy.
+    #
+    #     `NEW_ONLY` applies the policy only to log groups that are created
+    #     after you create the policy. Log groups that already existed when
+    #     you created the policy keep their own retention period.
+    #
+    #   The following is an example of a retention policy document.
+    #
+    #   `"policyDocument": "{"retentionInDays": 90, "enforcementMode":
+    #   "RETROACTIVE"}"`
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data-types.html
@@ -6464,8 +6593,8 @@ module Aws::CloudWatchLogs
     #   in the account or a data source name and type combination.
     #
     #   Specifying `selectionCriteria` is valid only when you specify
-    #   `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY` or
-    #   `TRANSFORMER_POLICY`for `policyType`.
+    #   `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY`,
+    #   `TRANSFORMER_POLICY`, or `RETENTION_POLICY` for `policyType`.
     #
     #   * If `policyType` is `SUBSCRIPTION_FILTER_POLICY`, the only supported
     #     `selectionCriteria` filter is `LogGroupName NOT IN []`
@@ -6483,6 +6612,11 @@ module Aws::CloudWatchLogs
     #     can use either `LogGroupNamePrefix` by itself or `DataSourceName`
     #     and `DataSourceType` together.
     #
+    #   * If `policyType` is `RETENTION_POLICY`, the only supported
+    #     `selectionCriteria` filter is `LogGroupNamePrefix`. If you omit
+    #     `selectionCriteria`, the retention policy applies to all log groups
+    #     in the account.
+    #
     #   The `selectionCriteria` string can be up to 25KB in length. The length
     #   is determined by using its UTF-8 bytes.
     #
@@ -7973,6 +8107,17 @@ module Aws::CloudWatchLogs
     # policy, you can configure the number of days for which to retain log
     # events in the specified log group.
     #
+    # Account-level retention policies created with [PutAccountPolicy][1]
+    # override the retention that you set with `PutRetentionPolicy`. If an
+    # account-level retention policy applies to the log group, this
+    # operation succeeds and CloudWatch Logs saves the retention period that
+    # you specify, but the retention period from the account-level policy
+    # continues to determine when log events in the log group expire.
+    # `DescribeLogGroups` returns the retention period from the policy in
+    # `retentionInDays` and the name of the policy in `retentionPolicyName`.
+    # The retention period that you set with this operation takes effect if
+    # the account-level policy no longer applies to the log group.
+    #
     # <note markdown="1"> CloudWatch Logs doesn't immediately delete log events when they reach
     # their retention setting. It typically takes up to 72 hours after that
     # before log events are deleted, but in rare situations might take
@@ -7996,6 +8141,10 @@ module Aws::CloudWatchLogs
     #
     #  </note>
     #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutAccountPolicy.html
+    #
     # @option params [required, String] :log_group_name
     #   The name of the log group.
     #
@@ -9786,7 +9935,7 @@ module Aws::CloudWatchLogs
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudwatchlogs'
-      context[:gem_version] = '1.171.0'
+      context[:gem_version] = '1.173.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudwatchlogs/types.rb

@@ -1082,13 +1082,16 @@ module Aws::CloudWatchLogs
     #
     # @!attribute [rw] log_group_class
     #   Use this parameter to specify the log group class for this log
-    #   group. There are three classes:
+    #   group. There are four classes:
     #
     #   * The `Standard` log class supports all CloudWatch Logs features.
     #
     #   * The `Infrequent Access` log class supports a subset of CloudWatch
     #     Logs features and incurs lower costs.
     #
+    #   * The `Essentials` log class supports a subset of CloudWatch Logs
+    #     features and incurs lower costs.
+    #
     #   * Use the `Delivery` log class only for delivering Lambda logs to
     #     store in Amazon S3 or Amazon Data Firehose. Log events in log
     #     groups in the Delivery class are kept in CloudWatch Logs for only
@@ -2814,7 +2817,11 @@ module Aws::CloudWatchLogs
     #   the specified log group class. If you omit this parameter, log
     #   groups of all classes can be returned.
     #
-    #   Specifies the log group class for this log group. There are three
+    #   If you specify either `INFREQUENT_ACCESS` or `ESSENTIALS`, the
+    #   results include log groups in both the Infrequent Access and
+    #   Essentials log classes.
+    #
+    #   Specifies the log group class for this log group. There are four
     #   classes:
     #
     #   * The `Standard` log class supports all CloudWatch Logs features.
@@ -2822,6 +2829,9 @@ module Aws::CloudWatchLogs
     #   * The `Infrequent Access` log class supports a subset of CloudWatch
     #     Logs features and incurs lower costs.
     #
+    #   * The `Essentials` log class supports a subset of CloudWatch Logs
+    #     features and incurs lower costs.
+    #
     #   * Use the `Delivery` log class only for delivering Lambda logs to
     #     store in Amazon S3 or Amazon Data Firehose. Log events in log
     #     groups in the Delivery class are kept in CloudWatch Logs for only
@@ -6158,21 +6168,24 @@ module Aws::CloudWatchLogs
     #
     # @!attribute [rw] log_group_class
     #   This specifies the log group class for this log group. There are
-    #   three classes:
+    #   four classes:
     #
     #   * The `Standard` log class supports all CloudWatch Logs features.
     #
     #   * The `Infrequent Access` log class supports a subset of CloudWatch
     #     Logs features and incurs lower costs.
     #
+    #   * The `Essentials` log class supports a subset of CloudWatch Logs
+    #     features and incurs lower costs.
+    #
     #   * Use the `Delivery` log class only for delivering Lambda logs to
     #     store in Amazon S3 or Amazon Data Firehose. Log events in log
     #     groups in the Delivery class are kept in CloudWatch Logs for only
     #     one day. This log class doesn't offer rich CloudWatch Logs
     #     capabilities such as CloudWatch Logs Insights queries.
     #
-    #   For details about the features supported by the Standard and
-    #   Infrequent Access classes, see [Log classes][1]
+    #   For details about the features supported by the Standard, Infrequent
+    #   Access, and Essentials classes, see [Log classes][1]
     #
     #
     #
@@ -7959,6 +7972,36 @@ module Aws::CloudWatchLogs
     #   types are `FIELD_INDEX` and `FACET`. Field names within `Fields` and
     #   `FieldsV2` must be mutually exclusive.
     #
+    #   **Retention policy**
+    #
+    #   A retention policy must include the following attributes in a JSON
+    #   block:
+    #
+    #   retentionInDays
+    #
+    #   : The number of days to retain log events. Valid values are 30, 60,
+    #     90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557,
+    #     2922, 3288, and 3653. To retain log events indefinitely, specify
+    #     the string `NEVER_EXPIRE`.
+    #
+    #   enforcementMode
+    #
+    #   : Specifies which log groups the policy applies to. Valid values are
+    #     `NEW_ONLY` and `RETROACTIVE`.
+    #
+    #     `RETROACTIVE` applies the policy to every log group that matches
+    #     the selection criteria, including log groups that existed before
+    #     you created the policy.
+    #
+    #     `NEW_ONLY` applies the policy only to log groups that are created
+    #     after you create the policy. Log groups that already existed when
+    #     you created the policy keep their own retention period.
+    #
+    #   The following is an example of a retention policy document.
+    #
+    #   `"policyDocument": "{"retentionInDays": 90, "enforcementMode":
+    #   "RETROACTIVE"}"`
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data-types.html
@@ -7982,8 +8025,8 @@ module Aws::CloudWatchLogs
     #   in the account or a data source name and type combination.
     #
     #   Specifying `selectionCriteria` is valid only when you specify
-    #   `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY` or
-    #   `TRANSFORMER_POLICY`for `policyType`.
+    #   `SUBSCRIPTION_FILTER_POLICY`, `FIELD_INDEX_POLICY`,
+    #   `TRANSFORMER_POLICY`, or `RETENTION_POLICY` for `policyType`.
     #
     #   * If `policyType` is `SUBSCRIPTION_FILTER_POLICY`, the only
     #     supported `selectionCriteria` filter is `LogGroupName NOT IN []`
@@ -8001,6 +8044,11 @@ module Aws::CloudWatchLogs
     #     can use either `LogGroupNamePrefix` by itself or `DataSourceName`
     #     and `DataSourceType` together.
     #
+    #   * If `policyType` is `RETENTION_POLICY`, the only supported
+    #     `selectionCriteria` filter is `LogGroupNamePrefix`. If you omit
+    #     `selectionCriteria`, the retention policy applies to all log
+    #     groups in the account.
+    #
     #   The `selectionCriteria` string can be up to 25KB in length. The
     #   length is determined by using its UTF-8 bytes.
     #

data/lib/aws-sdk-cloudwatchlogs.rb

@@ -55,7 +55,7 @@ module Aws::CloudWatchLogs
   autoload :Endpoints, 'aws-sdk-cloudwatchlogs/endpoints'
   autoload :EventStreams, 'aws-sdk-cloudwatchlogs/event_streams'
 
-  GEM_VERSION = '1.171.0'
+  GEM_VERSION = '1.173.0'
 
 end
 

data/sig/client.rbs

@@ -197,7 +197,7 @@ module Aws
                               log_group_name: ::String,
                               ?kms_key_id: ::String,
                               ?tags: Hash[::String, ::String],
-                              ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY"),
+                              ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS"),
                               ?deletion_protection_enabled: bool
                             ) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
                           | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> ::Seahorse::Client::_ResponseSuccess[::Aws::EmptyStructure]
@@ -567,7 +567,7 @@ module Aws
                                  ?next_token: ::String,
                                  ?limit: ::Integer,
                                  ?include_linked_accounts: bool,
-                                 ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY"),
+                                 ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS"),
                                  ?log_group_identifiers: Array[::String]
                                ) -> _DescribeLogGroupsResponseSuccess
                              | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeLogGroupsResponseSuccess
@@ -975,7 +975,7 @@ module Aws
       def list_aggregate_log_group_summaries: (
                                                 ?account_identifiers: Array[::String],
                                                 ?include_linked_accounts: bool,
-                                                ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY"),
+                                                ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS"),
                                                 ?log_group_name_pattern: ::String,
                                                 ?data_sources: Array[
                                                   {
@@ -1036,7 +1036,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchLogs/Client.html#list_log_groups-instance_method
       def list_log_groups: (
                              ?log_group_name_pattern: ::String,
-                             ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY"),
+                             ?log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS"),
                              ?include_linked_accounts: bool,
                              ?account_identifiers: Array[::String],
                              ?next_token: ::String,

data/sig/types.rbs

@@ -226,7 +226,7 @@ module Aws::CloudWatchLogs
       attr_accessor log_group_name: ::String
       attr_accessor kms_key_id: ::String
       attr_accessor tags: ::Hash[::String, ::String]
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       attr_accessor deletion_protection_enabled: bool
       SENSITIVE: []
     end
@@ -655,7 +655,7 @@ module Aws::CloudWatchLogs
       attr_accessor next_token: ::String
       attr_accessor limit: ::Integer
       attr_accessor include_linked_accounts: bool
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       attr_accessor log_group_identifiers: ::Array[::String]
       SENSITIVE: []
     end
@@ -1243,7 +1243,7 @@ module Aws::CloudWatchLogs
     class ListAggregateLogGroupSummariesRequest
       attr_accessor account_identifiers: ::Array[::String]
       attr_accessor include_linked_accounts: bool
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       attr_accessor log_group_name_pattern: ::String
       attr_accessor data_sources: ::Array[Types::DataSourceFilter]
       attr_accessor group_by: ("DATA_SOURCE_NAME_TYPE_AND_FORMAT" | "DATA_SOURCE_NAME_AND_TYPE")
@@ -1312,7 +1312,7 @@ module Aws::CloudWatchLogs
 
     class ListLogGroupsRequest
       attr_accessor log_group_name_pattern: ::String
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       attr_accessor include_linked_accounts: bool
       attr_accessor account_identifiers: ::Array[::String]
       attr_accessor next_token: ::String
@@ -1461,7 +1461,7 @@ module Aws::CloudWatchLogs
       attr_accessor kms_key_id: ::String
       attr_accessor data_protection_status: ("ACTIVATED" | "DELETED" | "ARCHIVED" | "DISABLED")
       attr_accessor inherited_properties: ::Array[("ACCOUNT_DATA_PROTECTION")]
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       attr_accessor log_group_arn: ::String
       attr_accessor deletion_protection_enabled: bool
       attr_accessor bearer_token_authentication_enabled: bool
@@ -1486,7 +1486,7 @@ module Aws::CloudWatchLogs
     class LogGroupSummary
       attr_accessor log_group_name: ::String
       attr_accessor log_group_arn: ::String
-      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY")
+      attr_accessor log_group_class: ("STANDARD" | "INFREQUENT_ACCESS" | "DELIVERY" | "ESSENTIALS")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudwatchlogs
 version: !ruby/object:Gem::Version
-  version: 1.171.0
+  version: 1.173.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.263.0
+        version: 3.264.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.263.0
+        version: 3.264.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement