aws-sdk-observabilityadmin 1.35.0 → 1.37.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 814a609f6b3c08c810a6a49fd30e7ee165851c33a20ea08014cc6b97e2a3c47a
-  data.tar.gz: d62933de1849263a6f4b72d727d7f82897432e4b943641aca9855cd4e2cbb3ef
+  metadata.gz: ebae83ff2ea6e68437ad38088d94614013763c230b35fdd930f27244064225c3
+  data.tar.gz: 80945fdab8195068587b90586d89121b6ee2cd34a494cebeaee0d5ab953453b1
 SHA512:
-  metadata.gz: 9183a3677da22296ee07e7ac08899f112fa02cae1a0c88b3f38c3a53800e34d920cb33839dc6fb630920fe837dd85886c3cda73cb591ec1f2ea94b436d57bce4
-  data.tar.gz: e6909376078f95080af7cdc6468f3357666791bc6712683bf7c0f50750b0e75693f6d576a5083db11c3d4d4b61995480f6c5edca23d4ba4c0e0c266ad6e08fb7
+  metadata.gz: e72fb31617dde646b1403ac93a528de9db2ab66608b8d999c8ecf71cfd3e4fa56512151c012885824572e8968f3a9f2c3d19c2ba459af419c867ce8b9157dcd8
+  data.tar.gz: 89a57a334e93ffaa76ef1dcd9183f6f3fcb486ae9f15e6916ebc98c049e152d03ba0bf71c99fcfc1a0409f1b7cbde15987bb179f948c23ef580acb2de29156b3

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.37.0 (2026-08-14)
+------------------
+
+* Feature - CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
+
+1.36.0 (2026-08-03)
+------------------
+
+* Feature - Launch CMK support for Telemetry Enablement Organization and Account Rules.
+
 1.35.0 (2026-07-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.35.0
+1.37.0

data/lib/aws-sdk-observabilityadmin/client.rb

@@ -521,6 +521,7 @@ module Aws::ObservabilityAdmin
     #             encryption_strategy: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, AWS_OWNED
     #             kms_key_arn: "ResourceArn",
     #             encryption_conflict_resolution_strategy: "ALLOW", # accepts ALLOW, SKIP
+    #             encryption_scope: "ENCRYPTED_SOURCE_ONLY", # accepts ENCRYPTED_SOURCE_ONLY, NEW_DESTINATION_LOG_GROUPS
     #           },
     #           backup_configuration: {
     #             region: "Region", # required
@@ -529,6 +530,10 @@ module Aws::ObservabilityAdmin
     #           log_group_name_configuration: {
     #             log_group_name_pattern: "LogGroupNamePattern", # required
     #           },
+    #           tag_propagation_configuration: {
+    #             destination_role_arn: "IamRoleArn", # required
+    #             tag_conflict_resolution_strategy: "IN_SYNC", # accepts IN_SYNC, ADD_ONLY, UPDATE_SYNC
+    #           },
     #         },
     #         destination_metrics_configuration: {
     #           backup_configuration: {
@@ -753,6 +758,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -876,6 +882,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -1041,6 +1048,8 @@ module Aws::ObservabilityAdmin
     #   * {Types::GetCentralizationRuleForOrganizationOutput#last_update_time_stamp #last_update_time_stamp} => Integer
     #   * {Types::GetCentralizationRuleForOrganizationOutput#rule_health #rule_health} => String
     #   * {Types::GetCentralizationRuleForOrganizationOutput#failure_reason #failure_reason} => String
+    #   * {Types::GetCentralizationRuleForOrganizationOutput#tag_propagation_status #tag_propagation_status} => String
+    #   * {Types::GetCentralizationRuleForOrganizationOutput#tag_propagation_failure_reason #tag_propagation_failure_reason} => String
     #   * {Types::GetCentralizationRuleForOrganizationOutput#centralization_rule #centralization_rule} => Types::CentralizationRule
     #
     # @example Request syntax with placeholder values
@@ -1059,6 +1068,8 @@ module Aws::ObservabilityAdmin
     #   resp.last_update_time_stamp #=> Integer
     #   resp.rule_health #=> String, one of "Healthy", "Unhealthy", "Provisioning"
     #   resp.failure_reason #=> String, one of "TRUSTED_ACCESS_NOT_ENABLED", "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION", "INTERNAL_SERVER_ERROR"
+    #   resp.tag_propagation_status #=> String, one of "Healthy", "Unhealthy"
+    #   resp.tag_propagation_failure_reason #=> String, one of "RoleNotAssumable", "RoleLacksPermissions"
     #   resp.centralization_rule.source.regions #=> Array
     #   resp.centralization_rule.source.regions[0] #=> String
     #   resp.centralization_rule.source.scope #=> String
@@ -1071,9 +1082,12 @@ module Aws::ObservabilityAdmin
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_strategy #=> String, one of "CUSTOMER_MANAGED", "AWS_OWNED"
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.kms_key_arn #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_conflict_resolution_strategy #=> String, one of "ALLOW", "SKIP"
+    #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_scope #=> String, one of "ENCRYPTED_SOURCE_ONLY", "NEW_DESTINATION_LOG_GROUPS"
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.region #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.kms_key_arn #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.log_group_name_configuration.log_group_name_pattern #=> String
+    #   resp.centralization_rule.destination.destination_logs_configuration.tag_propagation_configuration.destination_role_arn #=> String
+    #   resp.centralization_rule.destination.destination_logs_configuration.tag_propagation_configuration.tag_conflict_resolution_strategy #=> String, one of "IN_SYNC", "ADD_ONLY", "UPDATE_SYNC"
     #   resp.centralization_rule.destination.destination_metrics_configuration.backup_configuration.region #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/GetCentralizationRuleForOrganization AWS API Documentation
@@ -1321,6 +1335,7 @@ module Aws::ObservabilityAdmin
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types #=> Array
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types[0] #=> String, one of "APPLICATION_LOGS", "USAGE_LOGS", "SECURITY_FINDING_LOGS", "ACCESS_LOGS", "CONNECTION_LOGS", "S3_SERVER_ACCESS_LOGS", "ALB_ACCESS_LOGS", "ALB_CONNECTION_LOGS", "ALB_HEALTH_CHECK_LOGS"
     #   resp.telemetry_rule.destination_configuration.msk_monitoring_parameters.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
+    #   resp.telemetry_rule.destination_configuration.kms_key_arn #=> String
     #   resp.telemetry_rule.scope #=> String
     #   resp.telemetry_rule.selection_criteria #=> String
     #   resp.telemetry_rule.allow_field_updates #=> Boolean
@@ -1419,6 +1434,7 @@ module Aws::ObservabilityAdmin
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types #=> Array
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types[0] #=> String, one of "APPLICATION_LOGS", "USAGE_LOGS", "SECURITY_FINDING_LOGS", "ACCESS_LOGS", "CONNECTION_LOGS", "S3_SERVER_ACCESS_LOGS", "ALB_ACCESS_LOGS", "ALB_CONNECTION_LOGS", "ALB_HEALTH_CHECK_LOGS"
     #   resp.telemetry_rule.destination_configuration.msk_monitoring_parameters.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
+    #   resp.telemetry_rule.destination_configuration.kms_key_arn #=> String
     #   resp.telemetry_rule.scope #=> String
     #   resp.telemetry_rule.selection_criteria #=> String
     #   resp.telemetry_rule.allow_field_updates #=> Boolean
@@ -1489,6 +1505,8 @@ module Aws::ObservabilityAdmin
     #   resp.centralization_rule_summaries[0].last_update_time_stamp #=> Integer
     #   resp.centralization_rule_summaries[0].rule_health #=> String, one of "Healthy", "Unhealthy", "Provisioning"
     #   resp.centralization_rule_summaries[0].failure_reason #=> String, one of "TRUSTED_ACCESS_NOT_ENABLED", "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION", "INTERNAL_SERVER_ERROR"
+    #   resp.centralization_rule_summaries[0].tag_propagation_status #=> String, one of "Healthy", "Unhealthy"
+    #   resp.centralization_rule_summaries[0].tag_propagation_failure_reason #=> String, one of "RoleNotAssumable", "RoleLacksPermissions"
     #   resp.centralization_rule_summaries[0].destination_account_id #=> String
     #   resp.centralization_rule_summaries[0].destination_region #=> String
     #   resp.next_token #=> String
@@ -2213,6 +2231,7 @@ module Aws::ObservabilityAdmin
     #             encryption_strategy: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, AWS_OWNED
     #             kms_key_arn: "ResourceArn",
     #             encryption_conflict_resolution_strategy: "ALLOW", # accepts ALLOW, SKIP
+    #             encryption_scope: "ENCRYPTED_SOURCE_ONLY", # accepts ENCRYPTED_SOURCE_ONLY, NEW_DESTINATION_LOG_GROUPS
     #           },
     #           backup_configuration: {
     #             region: "Region", # required
@@ -2221,6 +2240,10 @@ module Aws::ObservabilityAdmin
     #           log_group_name_configuration: {
     #             log_group_name_pattern: "LogGroupNamePattern", # required
     #           },
+    #           tag_propagation_configuration: {
+    #             destination_role_arn: "IamRoleArn", # required
+    #             tag_conflict_resolution_strategy: "IN_SYNC", # accepts IN_SYNC, ADD_ONLY, UPDATE_SYNC
+    #           },
     #         },
     #         destination_metrics_configuration: {
     #           backup_configuration: {
@@ -2434,6 +2457,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -2551,6 +2575,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -2627,7 +2652,7 @@ module Aws::ObservabilityAdmin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-observabilityadmin'
-      context[:gem_version] = '1.35.0'
+      context[:gem_version] = '1.37.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-observabilityadmin/client_api.rb

@@ -62,6 +62,7 @@ module Aws::ObservabilityAdmin
     EncryptedLogGroupStrategy = Shapes::StringShape.new(name: 'EncryptedLogGroupStrategy')
     Encryption = Shapes::StructureShape.new(name: 'Encryption')
     EncryptionConflictResolutionStrategy = Shapes::StringShape.new(name: 'EncryptionConflictResolutionStrategy')
+    EncryptionScope = Shapes::StringShape.new(name: 'EncryptionScope')
     EncryptionStrategy = Shapes::StringShape.new(name: 'EncryptionStrategy')
     FailureReason = Shapes::StringShape.new(name: 'FailureReason')
     FieldMap = Shapes::MapShape.new(name: 'FieldMap')
@@ -84,6 +85,7 @@ module Aws::ObservabilityAdmin
     GetTelemetryRuleForOrganizationOutput = Shapes::StructureShape.new(name: 'GetTelemetryRuleForOrganizationOutput')
     GetTelemetryRuleInput = Shapes::StructureShape.new(name: 'GetTelemetryRuleInput')
     GetTelemetryRuleOutput = Shapes::StructureShape.new(name: 'GetTelemetryRuleOutput')
+    IamRoleArn = Shapes::StringShape.new(name: 'IamRoleArn')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     IntegrationStatus = Shapes::StringShape.new(name: 'IntegrationStatus')
     IntegrationSummaries = Shapes::ListShape.new(name: 'IntegrationSummaries')
@@ -91,6 +93,7 @@ module Aws::ObservabilityAdmin
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     InvalidStateException = Shapes::StructureShape.new(name: 'InvalidStateException')
     IsReplicated = Shapes::BooleanShape.new(name: 'IsReplicated')
+    KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     LabelNameCondition = Shapes::StructureShape.new(name: 'LabelNameCondition')
     LabelNameConditionLabelNameString = Shapes::StringShape.new(name: 'LabelNameConditionLabelNameString')
     ListCentralizationRulesForOrganizationInput = Shapes::StructureShape.new(name: 'ListCentralizationRulesForOrganizationInput')
@@ -175,10 +178,14 @@ module Aws::ObservabilityAdmin
     StopTelemetryEnrichmentOutput = Shapes::StructureShape.new(name: 'StopTelemetryEnrichmentOutput')
     String = Shapes::StringShape.new(name: 'String')
     StringList = Shapes::ListShape.new(name: 'StringList')
+    TagConflictResolutionStrategy = Shapes::StringShape.new(name: 'TagConflictResolutionStrategy')
     TagKey = Shapes::StringShape.new(name: 'TagKey')
     TagKeyList = Shapes::ListShape.new(name: 'TagKeyList')
     TagMapInput = Shapes::MapShape.new(name: 'TagMapInput')
     TagMapOutput = Shapes::MapShape.new(name: 'TagMapOutput')
+    TagPropagationConfiguration = Shapes::StructureShape.new(name: 'TagPropagationConfiguration')
+    TagPropagationFailureReason = Shapes::StringShape.new(name: 'TagPropagationFailureReason')
+    TagPropagationStatus = Shapes::StringShape.new(name: 'TagPropagationStatus')
     TagResourceInput = Shapes::StructureShape.new(name: 'TagResourceInput')
     TagValue = Shapes::StringShape.new(name: 'TagValue')
     TelemetryConfiguration = Shapes::StructureShape.new(name: 'TelemetryConfiguration')
@@ -273,6 +280,8 @@ module Aws::ObservabilityAdmin
     CentralizationRuleSummary.add_member(:last_update_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "LastUpdateTimeStamp"))
     CentralizationRuleSummary.add_member(:rule_health, Shapes::ShapeRef.new(shape: RuleHealth, location_name: "RuleHealth"))
     CentralizationRuleSummary.add_member(:failure_reason, Shapes::ShapeRef.new(shape: CentralizationFailureReason, location_name: "FailureReason"))
+    CentralizationRuleSummary.add_member(:tag_propagation_status, Shapes::ShapeRef.new(shape: TagPropagationStatus, location_name: "TagPropagationStatus"))
+    CentralizationRuleSummary.add_member(:tag_propagation_failure_reason, Shapes::ShapeRef.new(shape: TagPropagationFailureReason, location_name: "TagPropagationFailureReason"))
     CentralizationRuleSummary.add_member(:destination_account_id, Shapes::ShapeRef.new(shape: String, location_name: "DestinationAccountId"))
     CentralizationRuleSummary.add_member(:destination_region, Shapes::ShapeRef.new(shape: Region, location_name: "DestinationRegion"))
     CentralizationRuleSummary.struct_class = Types::CentralizationRuleSummary
@@ -364,6 +373,7 @@ module Aws::ObservabilityAdmin
     DestinationLogsConfiguration.add_member(:logs_encryption_configuration, Shapes::ShapeRef.new(shape: LogsEncryptionConfiguration, location_name: "LogsEncryptionConfiguration"))
     DestinationLogsConfiguration.add_member(:backup_configuration, Shapes::ShapeRef.new(shape: LogsBackupConfiguration, location_name: "BackupConfiguration"))
     DestinationLogsConfiguration.add_member(:log_group_name_configuration, Shapes::ShapeRef.new(shape: LogGroupNameConfiguration, location_name: "LogGroupNameConfiguration"))
+    DestinationLogsConfiguration.add_member(:tag_propagation_configuration, Shapes::ShapeRef.new(shape: TagPropagationConfiguration, location_name: "TagPropagationConfiguration"))
     DestinationLogsConfiguration.struct_class = Types::DestinationLogsConfiguration
 
     DestinationMetricsConfiguration.add_member(:backup_configuration, Shapes::ShapeRef.new(shape: MetricsBackupConfiguration, location_name: "BackupConfiguration"))
@@ -406,6 +416,8 @@ module Aws::ObservabilityAdmin
     GetCentralizationRuleForOrganizationOutput.add_member(:last_update_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "LastUpdateTimeStamp"))
     GetCentralizationRuleForOrganizationOutput.add_member(:rule_health, Shapes::ShapeRef.new(shape: RuleHealth, location_name: "RuleHealth"))
     GetCentralizationRuleForOrganizationOutput.add_member(:failure_reason, Shapes::ShapeRef.new(shape: CentralizationFailureReason, location_name: "FailureReason"))
+    GetCentralizationRuleForOrganizationOutput.add_member(:tag_propagation_status, Shapes::ShapeRef.new(shape: TagPropagationStatus, location_name: "TagPropagationStatus"))
+    GetCentralizationRuleForOrganizationOutput.add_member(:tag_propagation_failure_reason, Shapes::ShapeRef.new(shape: TagPropagationFailureReason, location_name: "TagPropagationFailureReason"))
     GetCentralizationRuleForOrganizationOutput.add_member(:centralization_rule, Shapes::ShapeRef.new(shape: CentralizationRule, location_name: "CentralizationRule"))
     GetCentralizationRuleForOrganizationOutput.struct_class = Types::GetCentralizationRuleForOrganizationOutput
 
@@ -581,6 +593,7 @@ module Aws::ObservabilityAdmin
     LogsEncryptionConfiguration.add_member(:encryption_strategy, Shapes::ShapeRef.new(shape: EncryptionStrategy, required: true, location_name: "EncryptionStrategy"))
     LogsEncryptionConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "KmsKeyArn"))
     LogsEncryptionConfiguration.add_member(:encryption_conflict_resolution_strategy, Shapes::ShapeRef.new(shape: EncryptionConflictResolutionStrategy, location_name: "EncryptionConflictResolutionStrategy"))
+    LogsEncryptionConfiguration.add_member(:encryption_scope, Shapes::ShapeRef.new(shape: EncryptionScope, location_name: "EncryptionScope"))
     LogsEncryptionConfiguration.struct_class = Types::LogsEncryptionConfiguration
 
     MetricsBackupConfiguration.add_member(:region, Shapes::ShapeRef.new(shape: Region, required: true, location_name: "Region"))
@@ -678,6 +691,10 @@ module Aws::ObservabilityAdmin
     TagMapOutput.key = Shapes::ShapeRef.new(shape: String)
     TagMapOutput.value = Shapes::ShapeRef.new(shape: String)
 
+    TagPropagationConfiguration.add_member(:destination_role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, required: true, location_name: "DestinationRoleArn"))
+    TagPropagationConfiguration.add_member(:tag_conflict_resolution_strategy, Shapes::ShapeRef.new(shape: TagConflictResolutionStrategy, location_name: "TagConflictResolutionStrategy"))
+    TagPropagationConfiguration.struct_class = Types::TagPropagationConfiguration
+
     TagResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceARN"))
     TagResourceInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMapInput, required: true, location_name: "Tags"))
     TagResourceInput.struct_class = Types::TagResourceInput
@@ -705,6 +722,7 @@ module Aws::ObservabilityAdmin
     TelemetryDestinationConfiguration.add_member(:waf_logging_parameters, Shapes::ShapeRef.new(shape: WAFLoggingParameters, location_name: "WAFLoggingParameters"))
     TelemetryDestinationConfiguration.add_member(:log_delivery_parameters, Shapes::ShapeRef.new(shape: LogDeliveryParameters, location_name: "LogDeliveryParameters"))
     TelemetryDestinationConfiguration.add_member(:msk_monitoring_parameters, Shapes::ShapeRef.new(shape: MskMonitoringParameters, location_name: "MskMonitoringParameters"))
+    TelemetryDestinationConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     TelemetryDestinationConfiguration.struct_class = Types::TelemetryDestinationConfiguration
 
     TelemetryPipeline.add_member(:created_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "CreatedTimeStamp"))

data/lib/aws-sdk-observabilityadmin/types.rb

@@ -247,6 +247,18 @@ module Aws::ObservabilityAdmin
     #   UNHEALTHY.
     #   @return [String]
     #
+    # @!attribute [rw] tag_propagation_status
+    #   The health status of tag propagation for this rule. This status is
+    #   independent of the overall `RuleHealth` for log delivery. Returns
+    #   `Healthy` when the most recent tag-propagation attempt succeeded, or
+    #   `Unhealthy` when the most recent attempt failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_propagation_failure_reason
+    #   The reason tag propagation is unhealthy for this rule. Only present
+    #   when `TagPropagationStatus` is `Unhealthy`.
+    #   @return [String]
+    #
     # @!attribute [rw] destination_account_id
     #   The primary destination account of the organization centralization
     #   rule.
@@ -268,6 +280,8 @@ module Aws::ObservabilityAdmin
       :last_update_time_stamp,
       :rule_health,
       :failure_reason,
+      :tag_propagation_status,
+      :tag_propagation_failure_reason,
       :destination_account_id,
       :destination_region)
       SENSITIVE = []
@@ -686,12 +700,20 @@ module Aws::ObservabilityAdmin
     #   when log groups are created.
     #   @return [Types::LogGroupNameConfiguration]
     #
+    # @!attribute [rw] tag_propagation_configuration
+    #   Specifies the tag propagation configuration for this centralization
+    #   rule. When present, `LogGroupNameConfiguration` must use a
+    #   `LogGroupNamePattern` that contains `${source.logGroup}`,
+    #   `${source.accountId}`, and `${source.region}`.
+    #   @return [Types::TagPropagationConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/DestinationLogsConfiguration AWS API Documentation
     #
     class DestinationLogsConfiguration < Struct.new(
       :logs_encryption_configuration,
       :backup_configuration,
-      :log_group_name_configuration)
+      :log_group_name_configuration,
+      :tag_propagation_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -863,6 +885,18 @@ module Aws::ObservabilityAdmin
     #   UNHEALTHY.
     #   @return [String]
     #
+    # @!attribute [rw] tag_propagation_status
+    #   The health status of tag propagation for this rule. This status is
+    #   independent of the overall `RuleHealth` for log delivery. Returns
+    #   `Healthy` when the most recent tag-propagation attempt succeeded, or
+    #   `Unhealthy` when the most recent attempt failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_propagation_failure_reason
+    #   The reason tag propagation is unhealthy for this rule. Only present
+    #   when `TagPropagationStatus` is `Unhealthy`.
+    #   @return [String]
+    #
     # @!attribute [rw] centralization_rule
     #   The configuration details for the organization centralization rule.
     #   @return [Types::CentralizationRule]
@@ -878,6 +912,8 @@ module Aws::ObservabilityAdmin
       :last_update_time_stamp,
       :rule_health,
       :failure_reason,
+      :tag_propagation_status,
+      :tag_propagation_failure_reason,
       :centralization_rule)
       SENSITIVE = []
       include Aws::Structure
@@ -1651,11 +1687,13 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
-    # Configuration parameters for Amazon Bedrock AgentCore logging,
-    # including `logType` settings.
+    # The configuration parameters for log delivery, including `logType`
+    # settings. Applies to resource types that support configurable log
+    # delivery, such as Amazon Bedrock Knowledge Bases and Elastic Load
+    # Balancing Application Load Balancers.
     #
     # @!attribute [rw] log_types
-    #   The type of log that the source is sending.
+    #   The types of logs to collect from the resource.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/LogDeliveryParameters AWS API Documentation
@@ -1754,10 +1792,11 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
-    # Configuration for encrypting centralized log groups. This
-    # configuration is only applied to destination log groups for which the
-    # corresponding source log groups are encrypted using Customer Managed
-    # KMS Keys.
+    # Configuration for encrypting centralized destination log groups. By
+    # default, this configuration applies only to destination log groups
+    # whose corresponding source log groups are encrypted using customer
+    # managed KMS keys. To encrypt all destination log groups created by the
+    # rule, set `EncryptionScope` to `NEW_DESTINATION_LOG_GROUPS`.
     #
     # @!attribute [rw] encryption_strategy
     #   Configuration that determines the encryption strategy of the
@@ -1779,12 +1818,32 @@ module Aws::ObservabilityAdmin
     #   log group.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_scope
+    #   Determines which newly created destination log groups are encrypted
+    #   with the configured `KmsKeyArn` when `EncryptionStrategy` is
+    #   `CUSTOMER_MANAGED`.
+    #
+    #   If you set this to `ENCRYPTED_SOURCE_ONLY` (the default), only
+    #   destination log groups whose source log group is encrypted with a
+    #   customer managed KMS key use the configured `KmsKeyArn`. Destination
+    #   log groups derived from Amazon Web Services owned encrypted source
+    #   log groups remain Amazon Web Services owned encrypted.
+    #
+    #   If you set this to `NEW_DESTINATION_LOG_GROUPS`, every new
+    #   destination log group created by this rule uses the configured
+    #   `KmsKeyArn`, regardless of the source log group's encryption
+    #   posture.
+    #
+    #   This field is not valid when `EncryptionStrategy` is `AWS_OWNED`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/LogsEncryptionConfiguration AWS API Documentation
     #
     class LogsEncryptionConfiguration < Struct.new(
       :encryption_strategy,
       :kms_key_arn,
-      :encryption_conflict_resolution_strategy)
+      :encryption_conflict_resolution_strategy,
+      :encryption_scope)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2153,6 +2212,43 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
+    # Specifies configuration for propagating resource tags from source log
+    # groups to centralized destination log groups. The service uses a
+    # customer-managed IAM role in the destination account to add, update,
+    # and remove tags on destination log groups.
+    #
+    # @!attribute [rw] destination_role_arn
+    #   The ARN of a customer-managed IAM role in the destination account.
+    #   The service assumes this role to propagate tags to destination log
+    #   groups. You must have `iam:PassRole` permission on this role.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_conflict_resolution_strategy
+    #   The strategy for resolving conflicts when a tag key exists on both
+    #   the source and destination log groups. If not specified, defaults to
+    #   `UPDATE_SYNC`.
+    #
+    #   * `ADD_ONLY` – Only adds new tags from the source without modifying
+    #     existing destination tags.
+    #
+    #   * `UPDATE_SYNC` – Adds new tags and updates existing tags from the
+    #     source. Does not remove destination tags that are absent from the
+    #     source.
+    #
+    #   * `IN_SYNC` – Keeps destination tags fully synchronized with source
+    #     tags, including removing destination tags that do not exist on the
+    #     source.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/TagPropagationConfiguration AWS API Documentation
+    #
+    class TagPropagationConfiguration < Struct.new(
+      :destination_role_arn,
+      :tag_conflict_resolution_strategy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the telemetry rule resource to
     #   tag.
@@ -2263,8 +2359,9 @@ module Aws::ObservabilityAdmin
     #   @return [Types::WAFLoggingParameters]
     #
     # @!attribute [rw] log_delivery_parameters
-    #   Configuration parameters specific to Amazon Bedrock AgentCore
-    #   logging when Amazon Bedrock AgentCore is the resource type.
+    #   The configuration parameters for log delivery when the resource type
+    #   supports configurable log types, such as Amazon Bedrock Knowledge
+    #   Bases or Elastic Load Balancing Application Load Balancers.
     #   @return [Types::LogDeliveryParameters]
     #
     # @!attribute [rw] msk_monitoring_parameters
@@ -2272,6 +2369,12 @@ module Aws::ObservabilityAdmin
     #   resource type.
     #   @return [Types::MskMonitoringParameters]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed Amazon Web
+    #   Services KMS key used to encrypt the log groups created during
+    #   telemetry rule remediation.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/TelemetryDestinationConfiguration AWS API Documentation
     #
     class TelemetryDestinationConfiguration < Struct.new(
@@ -2283,7 +2386,8 @@ module Aws::ObservabilityAdmin
       :elb_load_balancer_logging_parameters,
       :waf_logging_parameters,
       :log_delivery_parameters,
-      :msk_monitoring_parameters)
+      :msk_monitoring_parameters,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2453,8 +2557,9 @@ module Aws::ObservabilityAdmin
     #
     # @!attribute [rw] resource_type
     #   The type of Amazon Web Services resource to configure telemetry for
-    #   (e.g., "AWS::EC2::VPC", "AWS::EKS::Cluster",
-    #   "AWS::WAFv2::WebACL").
+    #   (for example, `AWS::EC2::VPC`, `AWS::EKS::Cluster`,
+    #   `AWS::ElasticLoadBalancingV2::LoadBalancer`, or
+    #   `AWS::Bedrock::KnowledgeBase`).
     #   @return [String]
     #
     # @!attribute [rw] telemetry_type

data/lib/aws-sdk-observabilityadmin.rb

@@ -55,7 +55,7 @@ module Aws::ObservabilityAdmin
   autoload :EndpointProvider, 'aws-sdk-observabilityadmin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-observabilityadmin/endpoints'
 
-  GEM_VERSION = '1.35.0'
+  GEM_VERSION = '1.37.0'
 
 end
 

data/sig/client.rbs

@@ -186,6 +186,8 @@ module Aws
         def last_update_time_stamp: () -> ::Integer
         def rule_health: () -> ("Healthy" | "Unhealthy" | "Provisioning")
         def failure_reason: () -> ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+        def tag_propagation_status: () -> ("Healthy" | "Unhealthy")
+        def tag_propagation_failure_reason: () -> ("RoleNotAssumable" | "RoleLacksPermissions")
         def centralization_rule: () -> Types::CentralizationRule
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/ObservabilityAdmin/Client.html#get_centralization_rule_for_organization-instance_method

data/sig/params.rbs

@@ -25,7 +25,8 @@ module Aws
       logs_encryption_configuration: {
         encryption_strategy: ("CUSTOMER_MANAGED" | "AWS_OWNED"),
         kms_key_arn: ::String?,
-        encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")?
+        encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")?,
+        encryption_scope: ("ENCRYPTED_SOURCE_ONLY" | "NEW_DESTINATION_LOG_GROUPS")?
       }?,
       backup_configuration: {
         region: ::String,
@@ -33,6 +34,10 @@ module Aws
       }?,
       log_group_name_configuration: {
         log_group_name_pattern: ::String
+      }?,
+      tag_propagation_configuration: {
+        destination_role_arn: ::String,
+        tag_conflict_resolution_strategy: ("IN_SYNC" | "ADD_ONLY" | "UPDATE_SYNC")?
       }?
     }
 
@@ -93,7 +98,8 @@ module Aws
       }?,
       msk_monitoring_parameters: {
         enhanced_monitoring: ("DEFAULT" | "PER_BROKER" | "PER_TOPIC_PER_BROKER" | "PER_TOPIC_PER_PARTITION")?
-      }?
+      }?,
+      kms_key_arn: ::String?
     }
 
       type telemetry_rule = {

data/sig/types.rbs

@@ -67,6 +67,8 @@ module Aws::ObservabilityAdmin
       attr_accessor last_update_time_stamp: ::Integer
       attr_accessor rule_health: ("Healthy" | "Unhealthy" | "Provisioning")
       attr_accessor failure_reason: ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+      attr_accessor tag_propagation_status: ("Healthy" | "Unhealthy")
+      attr_accessor tag_propagation_failure_reason: ("RoleNotAssumable" | "RoleLacksPermissions")
       attr_accessor destination_account_id: ::String
       attr_accessor destination_region: ::String
       SENSITIVE: []
@@ -197,6 +199,7 @@ module Aws::ObservabilityAdmin
       attr_accessor logs_encryption_configuration: Types::LogsEncryptionConfiguration
       attr_accessor backup_configuration: Types::LogsBackupConfiguration
       attr_accessor log_group_name_configuration: Types::LogGroupNameConfiguration
+      attr_accessor tag_propagation_configuration: Types::TagPropagationConfiguration
       SENSITIVE: []
     end
 
@@ -246,6 +249,8 @@ module Aws::ObservabilityAdmin
       attr_accessor last_update_time_stamp: ::Integer
       attr_accessor rule_health: ("Healthy" | "Unhealthy" | "Provisioning")
       attr_accessor failure_reason: ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+      attr_accessor tag_propagation_status: ("Healthy" | "Unhealthy")
+      attr_accessor tag_propagation_failure_reason: ("RoleNotAssumable" | "RoleLacksPermissions")
       attr_accessor centralization_rule: Types::CentralizationRule
       SENSITIVE: []
     end
@@ -489,6 +494,7 @@ module Aws::ObservabilityAdmin
       attr_accessor encryption_strategy: ("CUSTOMER_MANAGED" | "AWS_OWNED")
       attr_accessor kms_key_arn: ::String
       attr_accessor encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")
+      attr_accessor encryption_scope: ("ENCRYPTED_SOURCE_ONLY" | "NEW_DESTINATION_LOG_GROUPS")
       SENSITIVE: []
     end
 
@@ -589,6 +595,12 @@ module Aws::ObservabilityAdmin
       SENSITIVE: []
     end
 
+    class TagPropagationConfiguration
+      attr_accessor destination_role_arn: ::String
+      attr_accessor tag_conflict_resolution_strategy: ("IN_SYNC" | "ADD_ONLY" | "UPDATE_SYNC")
+      SENSITIVE: []
+    end
+
     class TagResourceInput
       attr_accessor resource_arn: ::String
       attr_accessor tags: ::Hash[::String, ::String]
@@ -616,6 +628,7 @@ module Aws::ObservabilityAdmin
       attr_accessor waf_logging_parameters: Types::WAFLoggingParameters
       attr_accessor log_delivery_parameters: Types::LogDeliveryParameters
       attr_accessor msk_monitoring_parameters: Types::MskMonitoringParameters
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-observabilityadmin
 version: !ruby/object:Gem::Version
-  version: 1.35.0
+  version: 1.37.0
 platform: ruby
 authors:
 - Amazon Web Services