aws-sdk-observabilityadmin 1.35.0 → 1.36.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 814a609f6b3c08c810a6a49fd30e7ee165851c33a20ea08014cc6b97e2a3c47a
-  data.tar.gz: d62933de1849263a6f4b72d727d7f82897432e4b943641aca9855cd4e2cbb3ef
+  metadata.gz: 9cce1b87ef7ac5f8861b824abf5ee58bf9be6c908ac6c7e2c4391100f578738c
+  data.tar.gz: 33c21a594e424bc5c6959bc3e6e590bb882c7180d208ed13e4e0f03f6d05811b
 SHA512:
-  metadata.gz: 9183a3677da22296ee07e7ac08899f112fa02cae1a0c88b3f38c3a53800e34d920cb33839dc6fb630920fe837dd85886c3cda73cb591ec1f2ea94b436d57bce4
-  data.tar.gz: e6909376078f95080af7cdc6468f3357666791bc6712683bf7c0f50750b0e75693f6d576a5083db11c3d4d4b61995480f6c5edca23d4ba4c0e0c266ad6e08fb7
+  metadata.gz: c9fd20c427bccf47e09b9109abcd7dffd7b08fb1bc836f168f65fb84aa4d3d53fe6bbffc83cfd8002c65d73276428a9ca100102ea037cdbb57e31fe4689da963
+  data.tar.gz: 2a658ae7cb8972e9b88dd9732e8ee23f27257fc3cb1d66f5d4630d0a8e86660895f893ac4425df2e64a908dc7431f24c2e2965382101085b1e477a425f357575

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.36.0 (2026-08-03)
+------------------
+
+* Feature - Launch CMK support for Telemetry Enablement Organization and Account Rules.
+
 1.35.0 (2026-07-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.35.0
+1.36.0

data/lib/aws-sdk-observabilityadmin/client.rb

@@ -521,6 +521,7 @@ module Aws::ObservabilityAdmin
     #             encryption_strategy: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, AWS_OWNED
     #             kms_key_arn: "ResourceArn",
     #             encryption_conflict_resolution_strategy: "ALLOW", # accepts ALLOW, SKIP
+    #             encryption_scope: "ENCRYPTED_SOURCE_ONLY", # accepts ENCRYPTED_SOURCE_ONLY, NEW_DESTINATION_LOG_GROUPS
     #           },
     #           backup_configuration: {
     #             region: "Region", # required
@@ -753,6 +754,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -876,6 +878,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -1071,6 +1074,7 @@ module Aws::ObservabilityAdmin
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_strategy #=> String, one of "CUSTOMER_MANAGED", "AWS_OWNED"
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.kms_key_arn #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_conflict_resolution_strategy #=> String, one of "ALLOW", "SKIP"
+    #   resp.centralization_rule.destination.destination_logs_configuration.logs_encryption_configuration.encryption_scope #=> String, one of "ENCRYPTED_SOURCE_ONLY", "NEW_DESTINATION_LOG_GROUPS"
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.region #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.kms_key_arn #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.log_group_name_configuration.log_group_name_pattern #=> String
@@ -1321,6 +1325,7 @@ module Aws::ObservabilityAdmin
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types #=> Array
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types[0] #=> String, one of "APPLICATION_LOGS", "USAGE_LOGS", "SECURITY_FINDING_LOGS", "ACCESS_LOGS", "CONNECTION_LOGS", "S3_SERVER_ACCESS_LOGS", "ALB_ACCESS_LOGS", "ALB_CONNECTION_LOGS", "ALB_HEALTH_CHECK_LOGS"
     #   resp.telemetry_rule.destination_configuration.msk_monitoring_parameters.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
+    #   resp.telemetry_rule.destination_configuration.kms_key_arn #=> String
     #   resp.telemetry_rule.scope #=> String
     #   resp.telemetry_rule.selection_criteria #=> String
     #   resp.telemetry_rule.allow_field_updates #=> Boolean
@@ -1419,6 +1424,7 @@ module Aws::ObservabilityAdmin
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types #=> Array
     #   resp.telemetry_rule.destination_configuration.log_delivery_parameters.log_types[0] #=> String, one of "APPLICATION_LOGS", "USAGE_LOGS", "SECURITY_FINDING_LOGS", "ACCESS_LOGS", "CONNECTION_LOGS", "S3_SERVER_ACCESS_LOGS", "ALB_ACCESS_LOGS", "ALB_CONNECTION_LOGS", "ALB_HEALTH_CHECK_LOGS"
     #   resp.telemetry_rule.destination_configuration.msk_monitoring_parameters.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
+    #   resp.telemetry_rule.destination_configuration.kms_key_arn #=> String
     #   resp.telemetry_rule.scope #=> String
     #   resp.telemetry_rule.selection_criteria #=> String
     #   resp.telemetry_rule.allow_field_updates #=> Boolean
@@ -2213,6 +2219,7 @@ module Aws::ObservabilityAdmin
     #             encryption_strategy: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, AWS_OWNED
     #             kms_key_arn: "ResourceArn",
     #             encryption_conflict_resolution_strategy: "ALLOW", # accepts ALLOW, SKIP
+    #             encryption_scope: "ENCRYPTED_SOURCE_ONLY", # accepts ENCRYPTED_SOURCE_ONLY, NEW_DESTINATION_LOG_GROUPS
     #           },
     #           backup_configuration: {
     #             region: "Region", # required
@@ -2434,6 +2441,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -2551,6 +2559,7 @@ module Aws::ObservabilityAdmin
     #         msk_monitoring_parameters: {
     #           enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #       scope: "String",
     #       selection_criteria: "String",
@@ -2627,7 +2636,7 @@ module Aws::ObservabilityAdmin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-observabilityadmin'
-      context[:gem_version] = '1.35.0'
+      context[:gem_version] = '1.36.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-observabilityadmin/client_api.rb

@@ -62,6 +62,7 @@ module Aws::ObservabilityAdmin
     EncryptedLogGroupStrategy = Shapes::StringShape.new(name: 'EncryptedLogGroupStrategy')
     Encryption = Shapes::StructureShape.new(name: 'Encryption')
     EncryptionConflictResolutionStrategy = Shapes::StringShape.new(name: 'EncryptionConflictResolutionStrategy')
+    EncryptionScope = Shapes::StringShape.new(name: 'EncryptionScope')
     EncryptionStrategy = Shapes::StringShape.new(name: 'EncryptionStrategy')
     FailureReason = Shapes::StringShape.new(name: 'FailureReason')
     FieldMap = Shapes::MapShape.new(name: 'FieldMap')
@@ -91,6 +92,7 @@ module Aws::ObservabilityAdmin
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     InvalidStateException = Shapes::StructureShape.new(name: 'InvalidStateException')
     IsReplicated = Shapes::BooleanShape.new(name: 'IsReplicated')
+    KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     LabelNameCondition = Shapes::StructureShape.new(name: 'LabelNameCondition')
     LabelNameConditionLabelNameString = Shapes::StringShape.new(name: 'LabelNameConditionLabelNameString')
     ListCentralizationRulesForOrganizationInput = Shapes::StructureShape.new(name: 'ListCentralizationRulesForOrganizationInput')
@@ -581,6 +583,7 @@ module Aws::ObservabilityAdmin
     LogsEncryptionConfiguration.add_member(:encryption_strategy, Shapes::ShapeRef.new(shape: EncryptionStrategy, required: true, location_name: "EncryptionStrategy"))
     LogsEncryptionConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: ResourceArn, location_name: "KmsKeyArn"))
     LogsEncryptionConfiguration.add_member(:encryption_conflict_resolution_strategy, Shapes::ShapeRef.new(shape: EncryptionConflictResolutionStrategy, location_name: "EncryptionConflictResolutionStrategy"))
+    LogsEncryptionConfiguration.add_member(:encryption_scope, Shapes::ShapeRef.new(shape: EncryptionScope, location_name: "EncryptionScope"))
     LogsEncryptionConfiguration.struct_class = Types::LogsEncryptionConfiguration
 
     MetricsBackupConfiguration.add_member(:region, Shapes::ShapeRef.new(shape: Region, required: true, location_name: "Region"))
@@ -705,6 +708,7 @@ module Aws::ObservabilityAdmin
     TelemetryDestinationConfiguration.add_member(:waf_logging_parameters, Shapes::ShapeRef.new(shape: WAFLoggingParameters, location_name: "WAFLoggingParameters"))
     TelemetryDestinationConfiguration.add_member(:log_delivery_parameters, Shapes::ShapeRef.new(shape: LogDeliveryParameters, location_name: "LogDeliveryParameters"))
     TelemetryDestinationConfiguration.add_member(:msk_monitoring_parameters, Shapes::ShapeRef.new(shape: MskMonitoringParameters, location_name: "MskMonitoringParameters"))
+    TelemetryDestinationConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     TelemetryDestinationConfiguration.struct_class = Types::TelemetryDestinationConfiguration
 
     TelemetryPipeline.add_member(:created_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "CreatedTimeStamp"))

data/lib/aws-sdk-observabilityadmin/types.rb

@@ -1651,11 +1651,13 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
-    # Configuration parameters for Amazon Bedrock AgentCore logging,
-    # including `logType` settings.
+    # The configuration parameters for log delivery, including `logType`
+    # settings. Applies to resource types that support configurable log
+    # delivery, such as Amazon Bedrock Knowledge Bases and Elastic Load
+    # Balancing Application Load Balancers.
     #
     # @!attribute [rw] log_types
-    #   The type of log that the source is sending.
+    #   The types of logs to collect from the resource.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/LogDeliveryParameters AWS API Documentation
@@ -1754,10 +1756,11 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
-    # Configuration for encrypting centralized log groups. This
-    # configuration is only applied to destination log groups for which the
-    # corresponding source log groups are encrypted using Customer Managed
-    # KMS Keys.
+    # Configuration for encrypting centralized destination log groups. By
+    # default, this configuration applies only to destination log groups
+    # whose corresponding source log groups are encrypted using customer
+    # managed KMS keys. To encrypt all destination log groups created by the
+    # rule, set `EncryptionScope` to `NEW_DESTINATION_LOG_GROUPS`.
     #
     # @!attribute [rw] encryption_strategy
     #   Configuration that determines the encryption strategy of the
@@ -1779,12 +1782,32 @@ module Aws::ObservabilityAdmin
     #   log group.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_scope
+    #   Determines which newly created destination log groups are encrypted
+    #   with the configured `KmsKeyArn` when `EncryptionStrategy` is
+    #   `CUSTOMER_MANAGED`.
+    #
+    #   If you set this to `ENCRYPTED_SOURCE_ONLY` (the default), only
+    #   destination log groups whose source log group is encrypted with a
+    #   customer managed KMS key use the configured `KmsKeyArn`. Destination
+    #   log groups derived from Amazon Web Services owned encrypted source
+    #   log groups remain Amazon Web Services owned encrypted.
+    #
+    #   If you set this to `NEW_DESTINATION_LOG_GROUPS`, every new
+    #   destination log group created by this rule uses the configured
+    #   `KmsKeyArn`, regardless of the source log group's encryption
+    #   posture.
+    #
+    #   This field is not valid when `EncryptionStrategy` is `AWS_OWNED`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/LogsEncryptionConfiguration AWS API Documentation
     #
     class LogsEncryptionConfiguration < Struct.new(
       :encryption_strategy,
       :kms_key_arn,
-      :encryption_conflict_resolution_strategy)
+      :encryption_conflict_resolution_strategy,
+      :encryption_scope)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2263,8 +2286,9 @@ module Aws::ObservabilityAdmin
     #   @return [Types::WAFLoggingParameters]
     #
     # @!attribute [rw] log_delivery_parameters
-    #   Configuration parameters specific to Amazon Bedrock AgentCore
-    #   logging when Amazon Bedrock AgentCore is the resource type.
+    #   The configuration parameters for log delivery when the resource type
+    #   supports configurable log types, such as Amazon Bedrock Knowledge
+    #   Bases or Elastic Load Balancing Application Load Balancers.
     #   @return [Types::LogDeliveryParameters]
     #
     # @!attribute [rw] msk_monitoring_parameters
@@ -2272,6 +2296,12 @@ module Aws::ObservabilityAdmin
     #   resource type.
     #   @return [Types::MskMonitoringParameters]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed Amazon Web
+    #   Services KMS key used to encrypt the log groups created during
+    #   telemetry rule remediation.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/TelemetryDestinationConfiguration AWS API Documentation
     #
     class TelemetryDestinationConfiguration < Struct.new(
@@ -2283,7 +2313,8 @@ module Aws::ObservabilityAdmin
       :elb_load_balancer_logging_parameters,
       :waf_logging_parameters,
       :log_delivery_parameters,
-      :msk_monitoring_parameters)
+      :msk_monitoring_parameters,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2453,8 +2484,9 @@ module Aws::ObservabilityAdmin
     #
     # @!attribute [rw] resource_type
     #   The type of Amazon Web Services resource to configure telemetry for
-    #   (e.g., "AWS::EC2::VPC", "AWS::EKS::Cluster",
-    #   "AWS::WAFv2::WebACL").
+    #   (for example, `AWS::EC2::VPC`, `AWS::EKS::Cluster`,
+    #   `AWS::ElasticLoadBalancingV2::LoadBalancer`, or
+    #   `AWS::Bedrock::KnowledgeBase`).
     #   @return [String]
     #
     # @!attribute [rw] telemetry_type

data/lib/aws-sdk-observabilityadmin.rb

@@ -55,7 +55,7 @@ module Aws::ObservabilityAdmin
   autoload :EndpointProvider, 'aws-sdk-observabilityadmin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-observabilityadmin/endpoints'
 
-  GEM_VERSION = '1.35.0'
+  GEM_VERSION = '1.36.0'
 
 end
 

data/sig/params.rbs

@@ -25,7 +25,8 @@ module Aws
       logs_encryption_configuration: {
         encryption_strategy: ("CUSTOMER_MANAGED" | "AWS_OWNED"),
         kms_key_arn: ::String?,
-        encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")?
+        encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")?,
+        encryption_scope: ("ENCRYPTED_SOURCE_ONLY" | "NEW_DESTINATION_LOG_GROUPS")?
       }?,
       backup_configuration: {
         region: ::String,
@@ -93,7 +94,8 @@ module Aws
       }?,
       msk_monitoring_parameters: {
         enhanced_monitoring: ("DEFAULT" | "PER_BROKER" | "PER_TOPIC_PER_BROKER" | "PER_TOPIC_PER_PARTITION")?
-      }?
+      }?,
+      kms_key_arn: ::String?
     }
 
       type telemetry_rule = {

data/sig/types.rbs

@@ -489,6 +489,7 @@ module Aws::ObservabilityAdmin
       attr_accessor encryption_strategy: ("CUSTOMER_MANAGED" | "AWS_OWNED")
       attr_accessor kms_key_arn: ::String
       attr_accessor encryption_conflict_resolution_strategy: ("ALLOW" | "SKIP")
+      attr_accessor encryption_scope: ("ENCRYPTED_SOURCE_ONLY" | "NEW_DESTINATION_LOG_GROUPS")
       SENSITIVE: []
     end
 
@@ -616,6 +617,7 @@ module Aws::ObservabilityAdmin
       attr_accessor waf_logging_parameters: Types::WAFLoggingParameters
       attr_accessor log_delivery_parameters: Types::LogDeliveryParameters
       attr_accessor msk_monitoring_parameters: Types::MskMonitoringParameters
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-observabilityadmin
 version: !ruby/object:Gem::Version
-  version: 1.35.0
+  version: 1.36.0
 platform: ruby
 authors:
 - Amazon Web Services