aws-sdk-cloudwatchlogs 1.43.0 → 1.47.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 7856711203d2d73ceac46efb30bb8e2cefcd3f5b56afbde503b24aabe49bd8fa
4
- data.tar.gz: 6048716feaf1d8132bb724d227f33d8b8a520907182453b58d9b390e5909633e
3
+ metadata.gz: 2263b3ac1009108e052df2d1db32d28ed9ddc39f2b78ea9dfefb406e76853619
4
+ data.tar.gz: 93dbf8ecf9e472afe917c01c0eafb343b19a719b6c9cabab2004f4681af621c3
5
5
  SHA512:
6
- metadata.gz: '0825d784ff2118449c0855b02644162dbed639890f21552cccc612692656a02d67011427dcc65bf3aa12fb8654e847067380427dce088a1803ef17ea54ea8009'
7
- data.tar.gz: d6a43c180223691562f78d608dd4283ed3bc8ba99e7796647fdaffb47d08150e96b25adc71fe1c8fae8e2cf3cda0a8fd46b42fed952f27a1013eb75a34ccad2b
6
+ metadata.gz: d7c43a424fea32cb52378d454652515aa44c0b3c22ed22412575c0af5f7906c26adc7ce00a3876bd01f4ca5250d6e9f7cb42f230537fc3e68d3a3848cec5e0ed
7
+ data.tar.gz: d7ab4edfc2364988deb900cf4ebb9f7e740209969b3aac9562bece0652fe33caf75064b2fc13a4aab345ab4eb63727786c38304ce1f0a05fb15b35383cd9c74f
data/CHANGELOG.md CHANGED
@@ -1,6 +1,26 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.47.0 (2021-11-04)
5
+ ------------------
6
+
7
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
8
+
9
+ 1.46.0 (2021-10-18)
10
+ ------------------
11
+
12
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
13
+
14
+ 1.45.0 (2021-09-01)
15
+ ------------------
16
+
17
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
18
+
19
+ 1.44.0 (2021-08-17)
20
+ ------------------
21
+
22
+ * Feature - Documentation-only update for CloudWatch Logs
23
+
4
24
  1.43.0 (2021-07-30)
5
25
  ------------------
6
26
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.43.0
1
+ 1.47.0
@@ -285,6 +285,15 @@ module Aws::CloudWatchLogs
285
285
  # ** Please note ** When response stubbing is enabled, no HTTP
286
286
  # requests are made, and retries are disabled.
287
287
  #
288
+ # @option options [Boolean] :use_dualstack_endpoint
289
+ # When set to `true`, dualstack enabled endpoints (with `.aws` TLD)
290
+ # will be used if available.
291
+ #
292
+ # @option options [Boolean] :use_fips_endpoint
293
+ # When set to `true`, fips compatible endpoints will be used if available.
294
+ # When a `fips` region is used, the region is normalized and this config
295
+ # is set to `true`.
296
+ #
288
297
  # @option options [Boolean] :validate_params (true)
289
298
  # When `true`, request parameters are validated before
290
299
  # sending the request.
@@ -337,16 +346,15 @@ module Aws::CloudWatchLogs
337
346
 
338
347
  # @!group API Operations
339
348
 
340
- # Associates the specified AWS Key Management Service (AWS KMS) customer
341
- # master key (CMK) with the specified log group.
349
+ # Associates the specified Key Management Service customer master key
350
+ # (CMK) with the specified log group.
342
351
  #
343
- # Associating an AWS KMS CMK with a log group overrides any existing
352
+ # Associating an KMS CMK with a log group overrides any existing
344
353
  # associations between the log group and a CMK. After a CMK is
345
354
  # associated with a log group, all newly ingested data for the log group
346
355
  # is encrypted using the CMK. This association is stored as long as the
347
- # data encrypted with the CMK is still within Amazon CloudWatch Logs.
348
- # This enables Amazon CloudWatch Logs to decrypt this data whenever it
349
- # is requested.
356
+ # data encrypted with the CMK is still within CloudWatch Logs. This
357
+ # enables CloudWatch Logs to decrypt this data whenever it is requested.
350
358
  #
351
359
  # CloudWatch Logs supports only symmetric CMKs. Do not use an associate
352
360
  # an asymmetric CMK with your log group. For more information, see
@@ -368,8 +376,8 @@ module Aws::CloudWatchLogs
368
376
  # @option params [required, String] :kms_key_id
369
377
  # The Amazon Resource Name (ARN) of the CMK to use when encrypting log
370
378
  # data. This must be a symmetric CMK. For more information, see [Amazon
371
- # Resource Names - AWS Key Management Service (AWS KMS)][1] and [Using
372
- # Symmetric and Asymmetric Keys][2].
379
+ # Resource Names - Key Management Service][1] and [Using Symmetric and
380
+ # Asymmetric Keys][2].
373
381
  #
374
382
  #
375
383
  #
@@ -466,7 +474,7 @@ module Aws::CloudWatchLogs
466
474
  #
467
475
  # @option params [required, String] :destination
468
476
  # The name of S3 bucket for the exported log data. The bucket must be in
469
- # the same AWS region.
477
+ # the same Amazon Web Services region.
470
478
  #
471
479
  # @option params [String] :destination_prefix
472
480
  # The prefix used as the start of the key for every object exported. If
@@ -506,7 +514,8 @@ module Aws::CloudWatchLogs
506
514
  #
507
515
  # You must use the following guidelines when naming a log group:
508
516
  #
509
- # * Log group names must be unique within a region for an AWS account.
517
+ # * Log group names must be unique within a region for an Amazon Web
518
+ # Services account.
510
519
  #
511
520
  # * Log group names can be between 1 and 512 characters long.
512
521
  #
@@ -518,11 +527,11 @@ module Aws::CloudWatchLogs
518
527
  # group never expire. To set a retention policy so that events expire
519
528
  # and are deleted after a specified time, use [PutRetentionPolicy][1].
520
529
  #
521
- # If you associate a AWS Key Management Service (AWS KMS) customer
522
- # master key (CMK) with the log group, ingested data is encrypted using
523
- # the CMK. This association is stored as long as the data encrypted with
524
- # the CMK is still within Amazon CloudWatch Logs. This enables Amazon
525
- # CloudWatch Logs to decrypt this data whenever it is requested.
530
+ # If you associate a Key Management Service customer master key (CMK)
531
+ # with the log group, ingested data is encrypted using the CMK. This
532
+ # association is stored as long as the data encrypted with the CMK is
533
+ # still within CloudWatch Logs. This enables CloudWatch Logs to decrypt
534
+ # this data whenever it is requested.
526
535
  #
527
536
  # If you attempt to associate a CMK with the log group but the CMK does
528
537
  # not exist or the CMK is disabled, you receive an
@@ -542,8 +551,8 @@ module Aws::CloudWatchLogs
542
551
  #
543
552
  # @option params [String] :kms_key_id
544
553
  # The Amazon Resource Name (ARN) of the CMK to use when encrypting log
545
- # data. For more information, see [Amazon Resource Names - AWS Key
546
- # Management Service (AWS KMS)][1].
554
+ # data. For more information, see [Amazon Resource Names - Key
555
+ # Management Service][1].
547
556
  #
548
557
  #
549
558
  #
@@ -552,6 +561,16 @@ module Aws::CloudWatchLogs
552
561
  # @option params [Hash<String,String>] :tags
553
562
  # The key-value pairs to use for the tags.
554
563
  #
564
+ # CloudWatch Logs doesn’t support IAM policies that prevent users from
565
+ # assigning specified tags to log groups using the
566
+ # `aws:Resource/key-name ` or `aws:TagKeys` condition keys. For more
567
+ # information about using tags to control access, see [Controlling
568
+ # access to Amazon Web Services resources using tags][1].
569
+ #
570
+ #
571
+ #
572
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html
573
+ #
555
574
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
556
575
  #
557
576
  # @example Request syntax with placeholder values
@@ -941,6 +960,17 @@ module Aws::CloudWatchLogs
941
960
  # filter the results by prefix. The results are ASCII-sorted by log
942
961
  # group name.
943
962
  #
963
+ # CloudWatch Logs doesn’t support IAM policies that control access to
964
+ # the `DescribeLogGroups` action by using the `aws:ResourceTag/key-name
965
+ # ` condition key. Other CloudWatch Logs actions do support the use of
966
+ # the `aws:ResourceTag/key-name ` condition key to control access. For
967
+ # more information about using tags to control access, see [Controlling
968
+ # access to Amazon Web Services resources using tags][1].
969
+ #
970
+ #
971
+ #
972
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html
973
+ #
944
974
  # @option params [String] :log_group_name_prefix
945
975
  # The prefix to match.
946
976
  #
@@ -1344,14 +1374,13 @@ module Aws::CloudWatchLogs
1344
1374
  req.send_request(options)
1345
1375
  end
1346
1376
 
1347
- # Disassociates the associated AWS Key Management Service (AWS KMS)
1348
- # customer master key (CMK) from the specified log group.
1377
+ # Disassociates the associated Key Management Service customer master
1378
+ # key (CMK) from the specified log group.
1349
1379
  #
1350
- # After the AWS KMS CMK is disassociated from the log group, AWS
1351
- # CloudWatch Logs stops encrypting newly ingested data for the log
1352
- # group. All previously ingested data remains encrypted, and AWS
1353
- # CloudWatch Logs requires permissions for the CMK whenever the
1354
- # encrypted data is requested.
1380
+ # After the KMS CMK is disassociated from the log group, CloudWatch Logs
1381
+ # stops encrypting newly ingested data for the log group. All previously
1382
+ # ingested data remains encrypted, and CloudWatch Logs requires
1383
+ # permissions for the CMK whenever the encrypted data is requested.
1355
1384
  #
1356
1385
  # Note that it can take up to 5 minutes for this operation to take
1357
1386
  # effect.
@@ -1524,9 +1553,6 @@ module Aws::CloudWatchLogs
1524
1553
  # The token for the next set of items to return. (You received this
1525
1554
  # token from a previous call.)
1526
1555
  #
1527
- # Using this token works only when you specify `true` for
1528
- # `startFromHead`.
1529
- #
1530
1556
  # @option params [Integer] :limit
1531
1557
  # The maximum number of log events returned. If you don't specify a
1532
1558
  # value, the maximum is as many log events as can fit in a response size
@@ -1537,8 +1563,9 @@ module Aws::CloudWatchLogs
1537
1563
  # the value is false, the latest log events are returned first. The
1538
1564
  # default value is false.
1539
1565
  #
1540
- # If you are using `nextToken` in this operation, you must specify
1541
- # `true` for `startFromHead`.
1566
+ # If you are using a previous `nextForwardToken` value as the
1567
+ # `nextToken` in this operation, you must specify `true` for
1568
+ # `startFromHead`.
1542
1569
  #
1543
1570
  # @return [Types::GetLogEventsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1544
1571
  #
@@ -1823,10 +1850,10 @@ module Aws::CloudWatchLogs
1823
1850
  # used to authorize claims to register a subscription filter against a
1824
1851
  # given destination.
1825
1852
  #
1826
- # If multiple AWS accounts are sending logs to this destination, each
1827
- # sender account must be listed separately in the policy. The policy
1828
- # does not support specifying `*` as the Principal or the use of the
1829
- # `aws:PrincipalOrgId` global key.
1853
+ # If multiple Amazon Web Services accounts are sending logs to this
1854
+ # destination, each sender account must be listed separately in the
1855
+ # policy. The policy does not support specifying `*` as the Principal or
1856
+ # the use of the `aws:PrincipalOrgId` global key.
1830
1857
  #
1831
1858
  #
1832
1859
  #
@@ -1883,9 +1910,9 @@ module Aws::CloudWatchLogs
1883
1910
  # * The log events in the batch must be in chronological order by their
1884
1911
  # timestamp. The timestamp is the time the event occurred, expressed
1885
1912
  # as the number of milliseconds after Jan 1, 1970 00:00:00 UTC. (In
1886
- # AWS Tools for PowerShell and the AWS SDK for .NET, the timestamp is
1887
- # specified in .NET format: yyyy-mm-ddThh:mm:ss. For example,
1888
- # 2017-09-15T13:45:30.)
1913
+ # Amazon Web Services Tools for PowerShell and the Amazon Web Services
1914
+ # SDK for .NET, the timestamp is specified in .NET format:
1915
+ # yyyy-mm-ddThh:mm:ss. For example, 2017-09-15T13:45:30.)
1889
1916
  #
1890
1917
  # * A batch of log events in a single request cannot span more than 24
1891
1918
  # hours. Otherwise, the operation fails.
@@ -1896,7 +1923,8 @@ module Aws::CloudWatchLogs
1896
1923
  # requests are throttled. This quota can't be changed.
1897
1924
  #
1898
1925
  # If a call to `PutLogEvents` returns "UnrecognizedClientException"
1899
- # the most likely cause is an invalid AWS access key ID or secret key.
1926
+ # the most likely cause is an invalid Amazon Web Services access key ID
1927
+ # or secret key.
1900
1928
  #
1901
1929
  # @option params [required, String] :log_group_name
1902
1930
  # The name of the log group.
@@ -1977,7 +2005,7 @@ module Aws::CloudWatchLogs
1977
2005
  #
1978
2006
  # You can also set up a billing alarm to alert you if your charges are
1979
2007
  # higher than expected. For more information, see [ Creating a Billing
1980
- # Alarm to Monitor Your Estimated AWS Charges][2].
2008
+ # Alarm to Monitor Your Estimated Amazon Web Services Charges][2].
1981
2009
  #
1982
2010
  #
1983
2011
  #
@@ -2114,9 +2142,10 @@ module Aws::CloudWatchLogs
2114
2142
  req.send_request(options)
2115
2143
  end
2116
2144
 
2117
- # Creates or updates a resource policy allowing other AWS services to
2118
- # put log events to this account, such as Amazon Route 53. An account
2119
- # can have up to 10 resource policies per AWS Region.
2145
+ # Creates or updates a resource policy allowing other Amazon Web
2146
+ # Services services to put log events to this account, such as Amazon
2147
+ # Route 53. An account can have up to 10 resource policies per Amazon
2148
+ # Web Services Region.
2120
2149
  #
2121
2150
  # @option params [String] :policy_name
2122
2151
  # Name of the new policy. This parameter is required.
@@ -2131,10 +2160,27 @@ module Aws::CloudWatchLogs
2131
2160
  # `"logArn"` with the ARN of your CloudWatch Logs resource, such as a
2132
2161
  # log group or log stream.
2133
2162
  #
2163
+ # CloudWatch Logs also supports [aws:SourceArn][1] and
2164
+ # [aws:SourceAccount][2] condition context keys.
2165
+ #
2166
+ # In the example resource policy, you would replace the value of
2167
+ # `SourceArn` with the resource making the call from Route 53 to
2168
+ # CloudWatch Logs and replace the value of `SourceAccount` with the
2169
+ # Amazon Web Services account ID making that call.
2170
+ #
2171
+ #
2172
+ #
2134
2173
  # `\{ "Version": "2012-10-17", "Statement": [ \{ "Sid":
2135
2174
  # "Route53LogsToCloudWatchLogs", "Effect": "Allow", "Principal": \{
2136
- # "Service": [ "route53.amazonaws.com" ] \},
2137
- # "Action":"logs:PutLogEvents", "Resource": "logArn" \} ] \} `
2175
+ # "Service": [ "route53.amazonaws.com" ] \}, "Action":
2176
+ # "logs:PutLogEvents", "Resource": "logArn", "Condition": \{ "ArnLike":
2177
+ # \{ "aws:SourceArn": "myRoute53ResourceArn" \}, "StringEquals": \{
2178
+ # "aws:SourceAccount": "myAwsAccountId" \} \} \} ] \}`
2179
+ #
2180
+ #
2181
+ #
2182
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourcearn
2183
+ # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourceaccount
2138
2184
  #
2139
2185
  # @return [Types::PutResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2140
2186
  #
@@ -2174,8 +2220,12 @@ module Aws::CloudWatchLogs
2174
2220
  # group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180,
2175
2221
  # 365, 400, 545, 731, 1827, and 3653.
2176
2222
  #
2177
- # If you omit `retentionInDays` in a `PutRetentionPolicy` operation, the
2178
- # events in the log group are always retained and never expire.
2223
+ # To set a log group to never have log events expire, use
2224
+ # [DeleteRetentionPolicy][1].
2225
+ #
2226
+ #
2227
+ #
2228
+ # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteRetentionPolicy.html
2179
2229
  #
2180
2230
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
2181
2231
  #
@@ -2213,7 +2263,7 @@ module Aws::CloudWatchLogs
2213
2263
  # * An Amazon Kinesis Firehose delivery stream that belongs to the same
2214
2264
  # account as the subscription filter, for same-account delivery.
2215
2265
  #
2216
- # * An AWS Lambda function that belongs to the same account as the
2266
+ # * An Lambda function that belongs to the same account as the
2217
2267
  # subscription filter, for same-account delivery.
2218
2268
  #
2219
2269
  # Each log group can have up to two subscription filters associated with
@@ -2261,8 +2311,8 @@ module Aws::CloudWatchLogs
2261
2311
  # * An Amazon Kinesis Firehose delivery stream belonging to the same
2262
2312
  # account as the subscription filter, for same-account delivery.
2263
2313
  #
2264
- # * An AWS Lambda function belonging to the same account as the
2265
- # subscription filter, for same-account delivery.
2314
+ # * A Lambda function belonging to the same account as the subscription
2315
+ # filter, for same-account delivery.
2266
2316
  #
2267
2317
  #
2268
2318
  #
@@ -2419,11 +2469,18 @@ module Aws::CloudWatchLogs
2419
2469
  # For more information about tags, see [Tag Log Groups in Amazon
2420
2470
  # CloudWatch Logs][3] in the *Amazon CloudWatch Logs User Guide*.
2421
2471
  #
2472
+ # CloudWatch Logs doesn’t support IAM policies that prevent users from
2473
+ # assigning specified tags to log groups using the
2474
+ # `aws:Resource/key-name ` or `aws:TagKeys` condition keys. For more
2475
+ # information about using tags to control access, see [Controlling
2476
+ # access to Amazon Web Services resources using tags][4].
2477
+ #
2422
2478
  #
2423
2479
  #
2424
2480
  # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsLogGroup.html
2425
2481
  # [2]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UntagLogGroup.html
2426
2482
  # [3]: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html#log-group-tagging
2483
+ # [4]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html
2427
2484
  #
2428
2485
  # @option params [required, String] :log_group_name
2429
2486
  # The name of the log group.
@@ -2497,6 +2554,10 @@ module Aws::CloudWatchLogs
2497
2554
  # To list the tags for a log group, use [ListTagsLogGroup][1]. To add
2498
2555
  # tags, use [TagLogGroup][2].
2499
2556
  #
2557
+ # CloudWatch Logs doesn’t support IAM policies that prevent users from
2558
+ # assigning specified tags to log groups using the
2559
+ # `aws:Resource/key-name ` or `aws:TagKeys` condition keys.
2560
+ #
2500
2561
  #
2501
2562
  #
2502
2563
  # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsLogGroup.html
@@ -2539,7 +2600,7 @@ module Aws::CloudWatchLogs
2539
2600
  params: params,
2540
2601
  config: config)
2541
2602
  context[:gem_name] = 'aws-sdk-cloudwatchlogs'
2542
- context[:gem_version] = '1.43.0'
2603
+ context[:gem_version] = '1.47.0'
2543
2604
  Seahorse::Client::Request.new(handlers, context)
2544
2605
  end
2545
2606
 
@@ -25,8 +25,8 @@ module Aws::CloudWatchLogs
25
25
  # @!attribute [rw] kms_key_id
26
26
  # The Amazon Resource Name (ARN) of the CMK to use when encrypting log
27
27
  # data. This must be a symmetric CMK. For more information, see
28
- # [Amazon Resource Names - AWS Key Management Service (AWS KMS)][1]
29
- # and [Using Symmetric and Asymmetric Keys][2].
28
+ # [Amazon Resource Names - Key Management Service][1] and [Using
29
+ # Symmetric and Asymmetric Keys][2].
30
30
  #
31
31
  #
32
32
  #
@@ -102,7 +102,7 @@ module Aws::CloudWatchLogs
102
102
  #
103
103
  # @!attribute [rw] destination
104
104
  # The name of S3 bucket for the exported log data. The bucket must be
105
- # in the same AWS region.
105
+ # in the same Amazon Web Services region.
106
106
  # @return [String]
107
107
  #
108
108
  # @!attribute [rw] destination_prefix
@@ -153,8 +153,8 @@ module Aws::CloudWatchLogs
153
153
  #
154
154
  # @!attribute [rw] kms_key_id
155
155
  # The Amazon Resource Name (ARN) of the CMK to use when encrypting log
156
- # data. For more information, see [Amazon Resource Names - AWS Key
157
- # Management Service (AWS KMS)][1].
156
+ # data. For more information, see [Amazon Resource Names - Key
157
+ # Management Service][1].
158
158
  #
159
159
  #
160
160
  #
@@ -163,6 +163,16 @@ module Aws::CloudWatchLogs
163
163
  #
164
164
  # @!attribute [rw] tags
165
165
  # The key-value pairs to use for the tags.
166
+ #
167
+ # CloudWatch Logs doesn’t support IAM policies that prevent users from
168
+ # assigning specified tags to log groups using the
169
+ # `aws:Resource/key-name ` or `aws:TagKeys` condition keys. For more
170
+ # information about using tags to control access, see [Controlling
171
+ # access to Amazon Web Services resources using tags][1].
172
+ #
173
+ #
174
+ #
175
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html
166
176
  # @return [Hash<String,String>]
167
177
  #
168
178
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/CreateLogGroupRequest AWS API Documentation
@@ -959,8 +969,8 @@ module Aws::CloudWatchLogs
959
969
  # @return [String]
960
970
  #
961
971
  # @!attribute [rw] access_policy
962
- # An IAM policy document that governs which AWS accounts can create
963
- # subscription filters against this destination.
972
+ # An IAM policy document that governs which Amazon Web Services
973
+ # accounts can create subscription filters against this destination.
964
974
  # @return [String]
965
975
  #
966
976
  # @!attribute [rw] arn
@@ -1304,9 +1314,6 @@ module Aws::CloudWatchLogs
1304
1314
  # @!attribute [rw] next_token
1305
1315
  # The token for the next set of items to return. (You received this
1306
1316
  # token from a previous call.)
1307
- #
1308
- # Using this token works only when you specify `true` for
1309
- # `startFromHead`.
1310
1317
  # @return [String]
1311
1318
  #
1312
1319
  # @!attribute [rw] limit
@@ -1320,8 +1327,9 @@ module Aws::CloudWatchLogs
1320
1327
  # the value is false, the latest log events are returned first. The
1321
1328
  # default value is false.
1322
1329
  #
1323
- # If you are using `nextToken` in this operation, you must specify
1324
- # `true` for `startFromHead`.
1330
+ # If you are using a previous `nextForwardToken` value as the
1331
+ # `nextToken` in this operation, you must specify `true` for
1332
+ # `startFromHead`.
1325
1333
  # @return [Boolean]
1326
1334
  #
1327
1335
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/GetLogEventsRequest AWS API Documentation
@@ -1608,8 +1616,12 @@ module Aws::CloudWatchLogs
1608
1616
  # group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150,
1609
1617
  # 180, 365, 400, 545, 731, 1827, and 3653.
1610
1618
  #
1611
- # If you omit `retentionInDays` in a `PutRetentionPolicy` operation,
1612
- # the events in the log group are always retained and never expire.
1619
+ # To set a log group to never have log events expire, use
1620
+ # [DeleteRetentionPolicy][1].
1621
+ #
1622
+ #
1623
+ #
1624
+ # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteRetentionPolicy.html
1613
1625
  # @return [Integer]
1614
1626
  #
1615
1627
  # @!attribute [rw] metric_filter_count
@@ -1873,7 +1885,7 @@ module Aws::CloudWatchLogs
1873
1885
  # You can also set up a billing alarm to alert you if your charges
1874
1886
  # are
1875
1887
  # higher than expected. For more information, see [ Creating a Billing
1876
- # Alarm to Monitor Your Estimated AWS Charges][1].
1888
+ # Alarm to Monitor Your Estimated Amazon Web Services Charges][1].
1877
1889
  #
1878
1890
  #
1879
1891
  #
@@ -2221,10 +2233,28 @@ module Aws::CloudWatchLogs
2221
2233
  # Replace `"logArn"` with the ARN of your CloudWatch Logs resource,
2222
2234
  # such as a log group or log stream.
2223
2235
  #
2236
+ # CloudWatch Logs also supports [aws:SourceArn][1] and
2237
+ # [aws:SourceAccount][2] condition context keys.
2238
+ #
2239
+ # In the example resource policy, you would replace the value of
2240
+ # `SourceArn` with the resource making the call from Route 53 to
2241
+ # CloudWatch Logs and replace the value of `SourceAccount` with the
2242
+ # Amazon Web Services account ID making that call.
2243
+ #
2244
+ #
2245
+ #
2224
2246
  # `\{ "Version": "2012-10-17", "Statement": [ \{ "Sid":
2225
2247
  # "Route53LogsToCloudWatchLogs", "Effect": "Allow", "Principal": \{
2226
- # "Service": [ "route53.amazonaws.com" ] \},
2227
- # "Action":"logs:PutLogEvents", "Resource": "logArn" \} ] \} `
2248
+ # "Service": [ "route53.amazonaws.com" ] \}, "Action":
2249
+ # "logs:PutLogEvents", "Resource": "logArn", "Condition": \{
2250
+ # "ArnLike": \{ "aws:SourceArn": "myRoute53ResourceArn" \},
2251
+ # "StringEquals": \{ "aws:SourceAccount": "myAwsAccountId" \} \} \} ]
2252
+ # \}`
2253
+ #
2254
+ #
2255
+ #
2256
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourcearn
2257
+ # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourceaccount
2228
2258
  # @return [String]
2229
2259
  #
2230
2260
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/PutResourcePolicyRequest AWS API Documentation
@@ -2265,8 +2295,12 @@ module Aws::CloudWatchLogs
2265
2295
  # group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150,
2266
2296
  # 180, 365, 400, 545, 731, 1827, and 3653.
2267
2297
  #
2268
- # If you omit `retentionInDays` in a `PutRetentionPolicy` operation,
2269
- # the events in the log group are always retained and never expire.
2298
+ # To set a log group to never have log events expire, use
2299
+ # [DeleteRetentionPolicy][1].
2300
+ #
2301
+ #
2302
+ #
2303
+ # [1]: https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteRetentionPolicy.html
2270
2304
  # @return [Integer]
2271
2305
  #
2272
2306
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/PutRetentionPolicyRequest AWS API Documentation
@@ -2327,7 +2361,7 @@ module Aws::CloudWatchLogs
2327
2361
  # * An Amazon Kinesis Firehose delivery stream belonging to the same
2328
2362
  # account as the subscription filter, for same-account delivery.
2329
2363
  #
2330
- # * An AWS Lambda function belonging to the same account as the
2364
+ # * A Lambda function belonging to the same account as the
2331
2365
  # subscription filter, for same-account delivery.
2332
2366
  #
2333
2367
  #
@@ -2845,7 +2879,8 @@ module Aws::CloudWatchLogs
2845
2879
  include Aws::Structure
2846
2880
  end
2847
2881
 
2848
- # The most likely cause is an invalid AWS access key ID or secret key.
2882
+ # The most likely cause is an invalid Amazon Web Services access key ID
2883
+ # or secret key.
2849
2884
  #
2850
2885
  # @see http://docs.aws.amazon.com/goto/WebAPI/logs-2014-03-28/UnrecognizedClientException AWS API Documentation
2851
2886
  #
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-cloudwatchlogs/customizations'
48
48
  # @!group service
49
49
  module Aws::CloudWatchLogs
50
50
 
51
- GEM_VERSION = '1.43.0'
51
+ GEM_VERSION = '1.47.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-cloudwatchlogs
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.43.0
4
+ version: 1.47.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-07-30 00:00:00.000000000 Z
11
+ date: 2021-11-04 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
19
19
  version: '3'
20
20
  - - ">="
21
21
  - !ruby/object:Gem::Version
22
- version: 3.119.0
22
+ version: 3.122.0
23
23
  type: :runtime
24
24
  prerelease: false
25
25
  version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
29
29
  version: '3'
30
30
  - - ">="
31
31
  - !ruby/object:Gem::Version
32
- version: 3.119.0
32
+ version: 3.122.0
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: aws-sigv4
35
35
  requirement: !ruby/object:Gem::Requirement
@@ -76,7 +76,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
76
76
  requirements:
77
77
  - - ">="
78
78
  - !ruby/object:Gem::Version
79
- version: '0'
79
+ version: '2.3'
80
80
  required_rubygems_version: !ruby/object:Gem::Requirement
81
81
  requirements:
82
82
  - - ">="