aws-sdk-observabilityadmin 1.36.0 → 1.37.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9cce1b87ef7ac5f8861b824abf5ee58bf9be6c908ac6c7e2c4391100f578738c
-  data.tar.gz: 33c21a594e424bc5c6959bc3e6e590bb882c7180d208ed13e4e0f03f6d05811b
+  metadata.gz: ebae83ff2ea6e68437ad38088d94614013763c230b35fdd930f27244064225c3
+  data.tar.gz: 80945fdab8195068587b90586d89121b6ee2cd34a494cebeaee0d5ab953453b1
 SHA512:
-  metadata.gz: c9fd20c427bccf47e09b9109abcd7dffd7b08fb1bc836f168f65fb84aa4d3d53fe6bbffc83cfd8002c65d73276428a9ca100102ea037cdbb57e31fe4689da963
-  data.tar.gz: 2a658ae7cb8972e9b88dd9732e8ee23f27257fc3cb1d66f5d4630d0a8e86660895f893ac4425df2e64a908dc7431f24c2e2965382101085b1e477a425f357575
+  metadata.gz: e72fb31617dde646b1403ac93a528de9db2ab66608b8d999c8ecf71cfd3e4fa56512151c012885824572e8968f3a9f2c3d19c2ba459af419c867ce8b9157dcd8
+  data.tar.gz: 89a57a334e93ffaa76ef1dcd9183f6f3fcb486ae9f15e6916ebc98c049e152d03ba0bf71c99fcfc1a0409f1b7cbde15987bb179f948c23ef580acb2de29156b3

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.37.0 (2026-08-14)
+------------------
+
+* Feature - CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
+
 1.36.0 (2026-08-03)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.36.0
+1.37.0

data/lib/aws-sdk-observabilityadmin/client.rb

@@ -530,6 +530,10 @@ module Aws::ObservabilityAdmin
     #           log_group_name_configuration: {
     #             log_group_name_pattern: "LogGroupNamePattern", # required
     #           },
+    #           tag_propagation_configuration: {
+    #             destination_role_arn: "IamRoleArn", # required
+    #             tag_conflict_resolution_strategy: "IN_SYNC", # accepts IN_SYNC, ADD_ONLY, UPDATE_SYNC
+    #           },
     #         },
     #         destination_metrics_configuration: {
     #           backup_configuration: {
@@ -1044,6 +1048,8 @@ module Aws::ObservabilityAdmin
     #   * {Types::GetCentralizationRuleForOrganizationOutput#last_update_time_stamp #last_update_time_stamp} => Integer
     #   * {Types::GetCentralizationRuleForOrganizationOutput#rule_health #rule_health} => String
     #   * {Types::GetCentralizationRuleForOrganizationOutput#failure_reason #failure_reason} => String
+    #   * {Types::GetCentralizationRuleForOrganizationOutput#tag_propagation_status #tag_propagation_status} => String
+    #   * {Types::GetCentralizationRuleForOrganizationOutput#tag_propagation_failure_reason #tag_propagation_failure_reason} => String
     #   * {Types::GetCentralizationRuleForOrganizationOutput#centralization_rule #centralization_rule} => Types::CentralizationRule
     #
     # @example Request syntax with placeholder values
@@ -1062,6 +1068,8 @@ module Aws::ObservabilityAdmin
     #   resp.last_update_time_stamp #=> Integer
     #   resp.rule_health #=> String, one of "Healthy", "Unhealthy", "Provisioning"
     #   resp.failure_reason #=> String, one of "TRUSTED_ACCESS_NOT_ENABLED", "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION", "INTERNAL_SERVER_ERROR"
+    #   resp.tag_propagation_status #=> String, one of "Healthy", "Unhealthy"
+    #   resp.tag_propagation_failure_reason #=> String, one of "RoleNotAssumable", "RoleLacksPermissions"
     #   resp.centralization_rule.source.regions #=> Array
     #   resp.centralization_rule.source.regions[0] #=> String
     #   resp.centralization_rule.source.scope #=> String
@@ -1078,6 +1086,8 @@ module Aws::ObservabilityAdmin
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.region #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.backup_configuration.kms_key_arn #=> String
     #   resp.centralization_rule.destination.destination_logs_configuration.log_group_name_configuration.log_group_name_pattern #=> String
+    #   resp.centralization_rule.destination.destination_logs_configuration.tag_propagation_configuration.destination_role_arn #=> String
+    #   resp.centralization_rule.destination.destination_logs_configuration.tag_propagation_configuration.tag_conflict_resolution_strategy #=> String, one of "IN_SYNC", "ADD_ONLY", "UPDATE_SYNC"
     #   resp.centralization_rule.destination.destination_metrics_configuration.backup_configuration.region #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/GetCentralizationRuleForOrganization AWS API Documentation
@@ -1495,6 +1505,8 @@ module Aws::ObservabilityAdmin
     #   resp.centralization_rule_summaries[0].last_update_time_stamp #=> Integer
     #   resp.centralization_rule_summaries[0].rule_health #=> String, one of "Healthy", "Unhealthy", "Provisioning"
     #   resp.centralization_rule_summaries[0].failure_reason #=> String, one of "TRUSTED_ACCESS_NOT_ENABLED", "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION", "INTERNAL_SERVER_ERROR"
+    #   resp.centralization_rule_summaries[0].tag_propagation_status #=> String, one of "Healthy", "Unhealthy"
+    #   resp.centralization_rule_summaries[0].tag_propagation_failure_reason #=> String, one of "RoleNotAssumable", "RoleLacksPermissions"
     #   resp.centralization_rule_summaries[0].destination_account_id #=> String
     #   resp.centralization_rule_summaries[0].destination_region #=> String
     #   resp.next_token #=> String
@@ -2228,6 +2240,10 @@ module Aws::ObservabilityAdmin
     #           log_group_name_configuration: {
     #             log_group_name_pattern: "LogGroupNamePattern", # required
     #           },
+    #           tag_propagation_configuration: {
+    #             destination_role_arn: "IamRoleArn", # required
+    #             tag_conflict_resolution_strategy: "IN_SYNC", # accepts IN_SYNC, ADD_ONLY, UPDATE_SYNC
+    #           },
     #         },
     #         destination_metrics_configuration: {
     #           backup_configuration: {
@@ -2636,7 +2652,7 @@ module Aws::ObservabilityAdmin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-observabilityadmin'
-      context[:gem_version] = '1.36.0'
+      context[:gem_version] = '1.37.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-observabilityadmin/client_api.rb

@@ -85,6 +85,7 @@ module Aws::ObservabilityAdmin
     GetTelemetryRuleForOrganizationOutput = Shapes::StructureShape.new(name: 'GetTelemetryRuleForOrganizationOutput')
     GetTelemetryRuleInput = Shapes::StructureShape.new(name: 'GetTelemetryRuleInput')
     GetTelemetryRuleOutput = Shapes::StructureShape.new(name: 'GetTelemetryRuleOutput')
+    IamRoleArn = Shapes::StringShape.new(name: 'IamRoleArn')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     IntegrationStatus = Shapes::StringShape.new(name: 'IntegrationStatus')
     IntegrationSummaries = Shapes::ListShape.new(name: 'IntegrationSummaries')
@@ -177,10 +178,14 @@ module Aws::ObservabilityAdmin
     StopTelemetryEnrichmentOutput = Shapes::StructureShape.new(name: 'StopTelemetryEnrichmentOutput')
     String = Shapes::StringShape.new(name: 'String')
     StringList = Shapes::ListShape.new(name: 'StringList')
+    TagConflictResolutionStrategy = Shapes::StringShape.new(name: 'TagConflictResolutionStrategy')
     TagKey = Shapes::StringShape.new(name: 'TagKey')
     TagKeyList = Shapes::ListShape.new(name: 'TagKeyList')
     TagMapInput = Shapes::MapShape.new(name: 'TagMapInput')
     TagMapOutput = Shapes::MapShape.new(name: 'TagMapOutput')
+    TagPropagationConfiguration = Shapes::StructureShape.new(name: 'TagPropagationConfiguration')
+    TagPropagationFailureReason = Shapes::StringShape.new(name: 'TagPropagationFailureReason')
+    TagPropagationStatus = Shapes::StringShape.new(name: 'TagPropagationStatus')
     TagResourceInput = Shapes::StructureShape.new(name: 'TagResourceInput')
     TagValue = Shapes::StringShape.new(name: 'TagValue')
     TelemetryConfiguration = Shapes::StructureShape.new(name: 'TelemetryConfiguration')
@@ -275,6 +280,8 @@ module Aws::ObservabilityAdmin
     CentralizationRuleSummary.add_member(:last_update_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "LastUpdateTimeStamp"))
     CentralizationRuleSummary.add_member(:rule_health, Shapes::ShapeRef.new(shape: RuleHealth, location_name: "RuleHealth"))
     CentralizationRuleSummary.add_member(:failure_reason, Shapes::ShapeRef.new(shape: CentralizationFailureReason, location_name: "FailureReason"))
+    CentralizationRuleSummary.add_member(:tag_propagation_status, Shapes::ShapeRef.new(shape: TagPropagationStatus, location_name: "TagPropagationStatus"))
+    CentralizationRuleSummary.add_member(:tag_propagation_failure_reason, Shapes::ShapeRef.new(shape: TagPropagationFailureReason, location_name: "TagPropagationFailureReason"))
     CentralizationRuleSummary.add_member(:destination_account_id, Shapes::ShapeRef.new(shape: String, location_name: "DestinationAccountId"))
     CentralizationRuleSummary.add_member(:destination_region, Shapes::ShapeRef.new(shape: Region, location_name: "DestinationRegion"))
     CentralizationRuleSummary.struct_class = Types::CentralizationRuleSummary
@@ -366,6 +373,7 @@ module Aws::ObservabilityAdmin
     DestinationLogsConfiguration.add_member(:logs_encryption_configuration, Shapes::ShapeRef.new(shape: LogsEncryptionConfiguration, location_name: "LogsEncryptionConfiguration"))
     DestinationLogsConfiguration.add_member(:backup_configuration, Shapes::ShapeRef.new(shape: LogsBackupConfiguration, location_name: "BackupConfiguration"))
     DestinationLogsConfiguration.add_member(:log_group_name_configuration, Shapes::ShapeRef.new(shape: LogGroupNameConfiguration, location_name: "LogGroupNameConfiguration"))
+    DestinationLogsConfiguration.add_member(:tag_propagation_configuration, Shapes::ShapeRef.new(shape: TagPropagationConfiguration, location_name: "TagPropagationConfiguration"))
     DestinationLogsConfiguration.struct_class = Types::DestinationLogsConfiguration
 
     DestinationMetricsConfiguration.add_member(:backup_configuration, Shapes::ShapeRef.new(shape: MetricsBackupConfiguration, location_name: "BackupConfiguration"))
@@ -408,6 +416,8 @@ module Aws::ObservabilityAdmin
     GetCentralizationRuleForOrganizationOutput.add_member(:last_update_time_stamp, Shapes::ShapeRef.new(shape: Long, location_name: "LastUpdateTimeStamp"))
     GetCentralizationRuleForOrganizationOutput.add_member(:rule_health, Shapes::ShapeRef.new(shape: RuleHealth, location_name: "RuleHealth"))
     GetCentralizationRuleForOrganizationOutput.add_member(:failure_reason, Shapes::ShapeRef.new(shape: CentralizationFailureReason, location_name: "FailureReason"))
+    GetCentralizationRuleForOrganizationOutput.add_member(:tag_propagation_status, Shapes::ShapeRef.new(shape: TagPropagationStatus, location_name: "TagPropagationStatus"))
+    GetCentralizationRuleForOrganizationOutput.add_member(:tag_propagation_failure_reason, Shapes::ShapeRef.new(shape: TagPropagationFailureReason, location_name: "TagPropagationFailureReason"))
     GetCentralizationRuleForOrganizationOutput.add_member(:centralization_rule, Shapes::ShapeRef.new(shape: CentralizationRule, location_name: "CentralizationRule"))
     GetCentralizationRuleForOrganizationOutput.struct_class = Types::GetCentralizationRuleForOrganizationOutput
 
@@ -681,6 +691,10 @@ module Aws::ObservabilityAdmin
     TagMapOutput.key = Shapes::ShapeRef.new(shape: String)
     TagMapOutput.value = Shapes::ShapeRef.new(shape: String)
 
+    TagPropagationConfiguration.add_member(:destination_role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, required: true, location_name: "DestinationRoleArn"))
+    TagPropagationConfiguration.add_member(:tag_conflict_resolution_strategy, Shapes::ShapeRef.new(shape: TagConflictResolutionStrategy, location_name: "TagConflictResolutionStrategy"))
+    TagPropagationConfiguration.struct_class = Types::TagPropagationConfiguration
+
     TagResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "ResourceARN"))
     TagResourceInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMapInput, required: true, location_name: "Tags"))
     TagResourceInput.struct_class = Types::TagResourceInput

data/lib/aws-sdk-observabilityadmin/types.rb

@@ -247,6 +247,18 @@ module Aws::ObservabilityAdmin
     #   UNHEALTHY.
     #   @return [String]
     #
+    # @!attribute [rw] tag_propagation_status
+    #   The health status of tag propagation for this rule. This status is
+    #   independent of the overall `RuleHealth` for log delivery. Returns
+    #   `Healthy` when the most recent tag-propagation attempt succeeded, or
+    #   `Unhealthy` when the most recent attempt failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_propagation_failure_reason
+    #   The reason tag propagation is unhealthy for this rule. Only present
+    #   when `TagPropagationStatus` is `Unhealthy`.
+    #   @return [String]
+    #
     # @!attribute [rw] destination_account_id
     #   The primary destination account of the organization centralization
     #   rule.
@@ -268,6 +280,8 @@ module Aws::ObservabilityAdmin
       :last_update_time_stamp,
       :rule_health,
       :failure_reason,
+      :tag_propagation_status,
+      :tag_propagation_failure_reason,
       :destination_account_id,
       :destination_region)
       SENSITIVE = []
@@ -686,12 +700,20 @@ module Aws::ObservabilityAdmin
     #   when log groups are created.
     #   @return [Types::LogGroupNameConfiguration]
     #
+    # @!attribute [rw] tag_propagation_configuration
+    #   Specifies the tag propagation configuration for this centralization
+    #   rule. When present, `LogGroupNameConfiguration` must use a
+    #   `LogGroupNamePattern` that contains `${source.logGroup}`,
+    #   `${source.accountId}`, and `${source.region}`.
+    #   @return [Types::TagPropagationConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/DestinationLogsConfiguration AWS API Documentation
     #
     class DestinationLogsConfiguration < Struct.new(
       :logs_encryption_configuration,
       :backup_configuration,
-      :log_group_name_configuration)
+      :log_group_name_configuration,
+      :tag_propagation_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -863,6 +885,18 @@ module Aws::ObservabilityAdmin
     #   UNHEALTHY.
     #   @return [String]
     #
+    # @!attribute [rw] tag_propagation_status
+    #   The health status of tag propagation for this rule. This status is
+    #   independent of the overall `RuleHealth` for log delivery. Returns
+    #   `Healthy` when the most recent tag-propagation attempt succeeded, or
+    #   `Unhealthy` when the most recent attempt failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_propagation_failure_reason
+    #   The reason tag propagation is unhealthy for this rule. Only present
+    #   when `TagPropagationStatus` is `Unhealthy`.
+    #   @return [String]
+    #
     # @!attribute [rw] centralization_rule
     #   The configuration details for the organization centralization rule.
     #   @return [Types::CentralizationRule]
@@ -878,6 +912,8 @@ module Aws::ObservabilityAdmin
       :last_update_time_stamp,
       :rule_health,
       :failure_reason,
+      :tag_propagation_status,
+      :tag_propagation_failure_reason,
       :centralization_rule)
       SENSITIVE = []
       include Aws::Structure
@@ -2176,6 +2212,43 @@ module Aws::ObservabilityAdmin
       include Aws::Structure
     end
 
+    # Specifies configuration for propagating resource tags from source log
+    # groups to centralized destination log groups. The service uses a
+    # customer-managed IAM role in the destination account to add, update,
+    # and remove tags on destination log groups.
+    #
+    # @!attribute [rw] destination_role_arn
+    #   The ARN of a customer-managed IAM role in the destination account.
+    #   The service assumes this role to propagate tags to destination log
+    #   groups. You must have `iam:PassRole` permission on this role.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_conflict_resolution_strategy
+    #   The strategy for resolving conflicts when a tag key exists on both
+    #   the source and destination log groups. If not specified, defaults to
+    #   `UPDATE_SYNC`.
+    #
+    #   * `ADD_ONLY` – Only adds new tags from the source without modifying
+    #     existing destination tags.
+    #
+    #   * `UPDATE_SYNC` – Adds new tags and updates existing tags from the
+    #     source. Does not remove destination tags that are absent from the
+    #     source.
+    #
+    #   * `IN_SYNC` – Keeps destination tags fully synchronized with source
+    #     tags, including removing destination tags that do not exist on the
+    #     source.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/observabilityadmin-2018-05-10/TagPropagationConfiguration AWS API Documentation
+    #
+    class TagPropagationConfiguration < Struct.new(
+      :destination_role_arn,
+      :tag_conflict_resolution_strategy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the telemetry rule resource to
     #   tag.

data/lib/aws-sdk-observabilityadmin.rb

@@ -55,7 +55,7 @@ module Aws::ObservabilityAdmin
   autoload :EndpointProvider, 'aws-sdk-observabilityadmin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-observabilityadmin/endpoints'
 
-  GEM_VERSION = '1.36.0'
+  GEM_VERSION = '1.37.0'
 
 end
 

data/sig/client.rbs

@@ -186,6 +186,8 @@ module Aws
         def last_update_time_stamp: () -> ::Integer
         def rule_health: () -> ("Healthy" | "Unhealthy" | "Provisioning")
         def failure_reason: () -> ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+        def tag_propagation_status: () -> ("Healthy" | "Unhealthy")
+        def tag_propagation_failure_reason: () -> ("RoleNotAssumable" | "RoleLacksPermissions")
         def centralization_rule: () -> Types::CentralizationRule
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/ObservabilityAdmin/Client.html#get_centralization_rule_for_organization-instance_method

data/sig/params.rbs

@@ -34,6 +34,10 @@ module Aws
       }?,
       log_group_name_configuration: {
         log_group_name_pattern: ::String
+      }?,
+      tag_propagation_configuration: {
+        destination_role_arn: ::String,
+        tag_conflict_resolution_strategy: ("IN_SYNC" | "ADD_ONLY" | "UPDATE_SYNC")?
       }?
     }
 

data/sig/types.rbs

@@ -67,6 +67,8 @@ module Aws::ObservabilityAdmin
       attr_accessor last_update_time_stamp: ::Integer
       attr_accessor rule_health: ("Healthy" | "Unhealthy" | "Provisioning")
       attr_accessor failure_reason: ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+      attr_accessor tag_propagation_status: ("Healthy" | "Unhealthy")
+      attr_accessor tag_propagation_failure_reason: ("RoleNotAssumable" | "RoleLacksPermissions")
       attr_accessor destination_account_id: ::String
       attr_accessor destination_region: ::String
       SENSITIVE: []
@@ -197,6 +199,7 @@ module Aws::ObservabilityAdmin
       attr_accessor logs_encryption_configuration: Types::LogsEncryptionConfiguration
       attr_accessor backup_configuration: Types::LogsBackupConfiguration
       attr_accessor log_group_name_configuration: Types::LogGroupNameConfiguration
+      attr_accessor tag_propagation_configuration: Types::TagPropagationConfiguration
       SENSITIVE: []
     end
 
@@ -246,6 +249,8 @@ module Aws::ObservabilityAdmin
       attr_accessor last_update_time_stamp: ::Integer
       attr_accessor rule_health: ("Healthy" | "Unhealthy" | "Provisioning")
       attr_accessor failure_reason: ("TRUSTED_ACCESS_NOT_ENABLED" | "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION" | "INTERNAL_SERVER_ERROR")
+      attr_accessor tag_propagation_status: ("Healthy" | "Unhealthy")
+      attr_accessor tag_propagation_failure_reason: ("RoleNotAssumable" | "RoleLacksPermissions")
       attr_accessor centralization_rule: Types::CentralizationRule
       SENSITIVE: []
     end
@@ -590,6 +595,12 @@ module Aws::ObservabilityAdmin
       SENSITIVE: []
     end
 
+    class TagPropagationConfiguration
+      attr_accessor destination_role_arn: ::String
+      attr_accessor tag_conflict_resolution_strategy: ("IN_SYNC" | "ADD_ONLY" | "UPDATE_SYNC")
+      SENSITIVE: []
+    end
+
     class TagResourceInput
       attr_accessor resource_arn: ::String
       attr_accessor tags: ::Hash[::String, ::String]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-observabilityadmin
 version: !ruby/object:Gem::Version
-  version: 1.36.0
+  version: 1.37.0
 platform: ruby
 authors:
 - Amazon Web Services