@aws-sdk/client-cloudwatch-logs 3.215.0 → 3.218.0

package/dist-types/CloudWatchLogs.d.ts

@@ -5,6 +5,7 @@ import { CancelExportTaskCommandInput, CancelExportTaskCommandOutput } from "./c
 import { CreateExportTaskCommandInput, CreateExportTaskCommandOutput } from "./commands/CreateExportTaskCommand";
 import { CreateLogGroupCommandInput, CreateLogGroupCommandOutput } from "./commands/CreateLogGroupCommand";
 import { CreateLogStreamCommandInput, CreateLogStreamCommandOutput } from "./commands/CreateLogStreamCommand";
+import { DeleteDataProtectionPolicyCommandInput, DeleteDataProtectionPolicyCommandOutput } from "./commands/DeleteDataProtectionPolicyCommand";
 import { DeleteDestinationCommandInput, DeleteDestinationCommandOutput } from "./commands/DeleteDestinationCommand";
 import { DeleteLogGroupCommandInput, DeleteLogGroupCommandOutput } from "./commands/DeleteLogGroupCommand";
 import { DeleteLogStreamCommandInput, DeleteLogStreamCommandOutput } from "./commands/DeleteLogStreamCommand";
@@ -24,12 +25,14 @@ import { DescribeResourcePoliciesCommandInput, DescribeResourcePoliciesCommandOu
 import { DescribeSubscriptionFiltersCommandInput, DescribeSubscriptionFiltersCommandOutput } from "./commands/DescribeSubscriptionFiltersCommand";
 import { DisassociateKmsKeyCommandInput, DisassociateKmsKeyCommandOutput } from "./commands/DisassociateKmsKeyCommand";
 import { FilterLogEventsCommandInput, FilterLogEventsCommandOutput } from "./commands/FilterLogEventsCommand";
+import { GetDataProtectionPolicyCommandInput, GetDataProtectionPolicyCommandOutput } from "./commands/GetDataProtectionPolicyCommand";
 import { GetLogEventsCommandInput, GetLogEventsCommandOutput } from "./commands/GetLogEventsCommand";
 import { GetLogGroupFieldsCommandInput, GetLogGroupFieldsCommandOutput } from "./commands/GetLogGroupFieldsCommand";
 import { GetLogRecordCommandInput, GetLogRecordCommandOutput } from "./commands/GetLogRecordCommand";
 import { GetQueryResultsCommandInput, GetQueryResultsCommandOutput } from "./commands/GetQueryResultsCommand";
 import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
 import { ListTagsLogGroupCommandInput, ListTagsLogGroupCommandOutput } from "./commands/ListTagsLogGroupCommand";
+import { PutDataProtectionPolicyCommandInput, PutDataProtectionPolicyCommandOutput } from "./commands/PutDataProtectionPolicyCommand";
 import { PutDestinationCommandInput, PutDestinationCommandOutput } from "./commands/PutDestinationCommand";
 import { PutDestinationPolicyCommandInput, PutDestinationPolicyCommandOutput } from "./commands/PutDestinationPolicyCommand";
 import { PutLogEventsCommandInput, PutLogEventsCommandOutput } from "./commands/PutLogEventsCommand";
@@ -48,22 +51,23 @@ import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./command
 /**
  * <p>You can use Amazon CloudWatch Logs to monitor, store, and access your log files from
  *       EC2 instances, CloudTrail, and other sources. You can then retrieve the associated
- *       log data from CloudWatch Logs using the CloudWatch console, CloudWatch Logs commands in the
- *       Amazon Web Services CLI, CloudWatch Logs API, or CloudWatch Logs SDK.</p>
+ *       log data from CloudWatch Logs using the CloudWatch console. Alternatively, you can use
+ *       CloudWatch Logs commands in the Amazon Web Services CLI, CloudWatch Logs API, or CloudWatch
+ *       Logs SDK.</p>
  *          <p>You can use CloudWatch Logs to:</p>
  *          <ul>
  *             <li>
  *                <p>
- *                   <b>Monitor logs from EC2 instances in real-time</b>: You
+ *                   <b>Monitor logs from EC2 instances in real time</b>: You
  *           can use CloudWatch Logs to monitor applications and systems using log data. For example,
- *           CloudWatch Logs can track the number of errors that occur in your application logs and
- *           send you a notification whenever the rate of errors exceeds a threshold that you specify.
- *           CloudWatch Logs uses your log data for monitoring so no code changes are required. For
- *           example, you can monitor application logs for specific literal terms (such as
- *           "NullReferenceException") or count the number of occurrences of a literal term at a
- *           particular position in log data (such as "404" status codes in an Apache access log). When
- *           the term you are searching for is found, CloudWatch Logs reports the data to a CloudWatch
- *           metric that you specify.</p>
+ *           CloudWatch Logs can track the number of errors that occur in your application logs. Then,
+ *           it can send you a notification whenever the rate of errors exceeds a threshold that you
+ *           specify. CloudWatch Logs uses your log data for monitoring so no code changes are
+ *           required. For example, you can monitor application logs for specific literal terms (such
+ *           as "NullReferenceException"). You can also count the number of occurrences of a literal
+ *           term at a particular position in log data (such as "404" status codes in an Apache access
+ *           log). When the term you are searching for is found, CloudWatch Logs reports the data to a
+ *           CloudWatch metric that you specify.</p>
  *             </li>
  *             <li>
  *                <p>
@@ -75,27 +79,28 @@ import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./command
  *                <p>
  *                   <b>Archive log data</b>: You can use CloudWatch Logs to
  *           store your log data in highly durable storage. You can change the log retention setting so
- *           that any log events older than this setting are automatically deleted. The CloudWatch Logs
- *           agent makes it easy to quickly send both rotated and non-rotated log data off of a host
- *           and into the log service. You can then access the raw log data when you need it.</p>
+ *           that any log events earlier than this setting are automatically deleted. The CloudWatch
+ *           Logs agent helps to quickly send both rotated and non-rotated log data off of a host and
+ *           into the log service. You can then access the raw log data when you need it.</p>
  *             </li>
  *          </ul>
  */
 export declare class CloudWatchLogs extends CloudWatchLogsClient {
     /**
-     * <p>Associates the specified Key Management Service customer master key (CMK) with the specified log group.</p>
-     *          <p>Associating an KMS CMK with a log group overrides any existing associations between the log group and a CMK.
-     *       After a CMK is associated with a log group, all newly ingested data for the log group is encrypted using the CMK.
-     *       This association is stored as long as the data encrypted with the CMK is still within CloudWatch Logs.
-     *       This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
+     * <p>Associates the specified KMS key with the specified log
+     *       group.</p>
+     *          <p>Associating a KMS key with a log group overrides any existing
+     *       associations between the log group and a KMS key. After a KMS key is associated with a log group, all newly ingested data for the log group is encrypted
+     *       using the KMS key. This association is stored as long as the data encrypted
+     *       with the KMS keyis still within CloudWatch Logs. This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
      *          <important>
-     *             <p>CloudWatch Logs supports only symmetric CMKs. Do not use an associate an asymmetric CMK
-     *         with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric
-     *           Keys</a>.</p>
+     *             <p>CloudWatch Logs supports only symmetric KMS keys. Do not use an associate
+     *         an asymmetric KMS key with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using
+     *           Symmetric and Asymmetric Keys</a>.</p>
      *          </important>
      *          <p>It can take up to 5 minutes for this operation to take effect.</p>
-     *          <p>If you attempt to associate a CMK with a log group but the CMK does not exist or the
-     *       CMK is disabled, you receive an <code>InvalidParameterException</code> error. </p>
+     *          <p>If you attempt to associate a KMS key with a log group but the KMS key does not exist or the KMS key is disabled, you receive an
+     *         <code>InvalidParameterException</code> error. </p>
      */
     associateKmsKey(args: AssociateKmsKeyCommandInput, options?: __HttpHandlerOptions): Promise<AssociateKmsKeyCommandOutput>;
     associateKmsKey(args: AssociateKmsKeyCommandInput, cb: (err: any, data?: AssociateKmsKeyCommandOutput) => void): void;
@@ -108,13 +113,13 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     cancelExportTask(args: CancelExportTaskCommandInput, cb: (err: any, data?: CancelExportTaskCommandOutput) => void): void;
     cancelExportTask(args: CancelExportTaskCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CancelExportTaskCommandOutput) => void): void;
     /**
-     * <p>Creates an export task, which allows you to efficiently export data from a
-     *       log group to an Amazon S3 bucket. When you perform a <code>CreateExportTask</code>
-     *       operation, you must use credentials that have permission to write to the S3 bucket
-     *       that you specify as the destination.</p>
-     *          <p>Exporting log data to Amazon S3 buckets that are encrypted by KMS is
-     *       supported. Exporting
-     *       log data to Amazon S3 buckets that have S3 Object Lock enabled with a retention period is also supported.</p>
+     * <p>Creates an export task so that you can efficiently export data from a log group to an
+     *       Amazon S3 bucket. When you perform a <code>CreateExportTask</code> operation, you must use
+     *       credentials that have permission to write to the S3 bucket that you specify as the
+     *       destination.</p>
+     *          <p>Exporting log data to S3 buckets that are encrypted by KMS is supported.
+     *       Exporting log data to Amazon S3 buckets that have S3 Object Lock enabled with a
+     *       retention period is also supported.</p>
      *          <p>Exporting to S3 buckets that are encrypted with AES-256 is supported. </p>
      *          <p>This is an asynchronous call. If all the required information is provided, this
      *       operation initiates an export task and responds with the ID of the task. After the task has started,
@@ -122,12 +127,12 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *       only have one active (<code>RUNNING</code> or <code>PENDING</code>) export task at a time.
      *       To cancel an export task, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CancelExportTask.html">CancelExportTask</a>.</p>
      *          <p>You can export logs from multiple log groups or multiple time ranges to the same S3
-     *       bucket. To separate out log data for each export task, you can specify a prefix to be used as
-     *       the Amazon S3 key prefix for all exported objects.</p>
+     *       bucket. To separate log data for each export task, specify a prefix to be used as the Amazon
+     *       S3 key prefix for all exported objects.</p>
      *
      *          <note>
-     *             <p>Time-based sorting on chunks of log data inside an exported file is not guaranteed. You can sort the
-     *       exported log fild data by using Linux utilities.</p>
+     *             <p>Time-based sorting on chunks of log data inside an exported file is not guaranteed. You can
+     *         sort the exported log field data by using Linux utilities.</p>
      *          </note>
      */
     createExportTask(args: CreateExportTaskCommandInput, options?: __HttpHandlerOptions): Promise<CreateExportTaskCommandOutput>;
@@ -138,7 +143,8 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *          <p>You must use the following guidelines when naming a log group:</p>
      *          <ul>
      *             <li>
-     *                <p>Log group names must be unique within a region for an Amazon Web Services account.</p>
+     *                <p>Log group names must be unique within a Region for an Amazon Web Services
+     *           account.</p>
      *             </li>
      *             <li>
      *                <p>Log group names can be between 1 and 512 characters long.</p>
@@ -148,18 +154,19 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *           '/' (forward slash), '.' (period), and '#' (number sign)</p>
      *             </li>
      *          </ul>
-     *          <p>When you create a log group, by default the log events in the log group never expire. To set
-     *     a retention policy so that events expire and are deleted after a specified time, use
-     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutRetentionPolicy.html">PutRetentionPolicy</a>.</p>
-     *          <p>If you associate a Key Management Service customer master key (CMK) with the log group, ingested data is encrypted using the CMK.
-     *       This association is stored as long as the data encrypted with the CMK is still within CloudWatch Logs.
-     *       This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
-     *          <p>If you attempt to associate a CMK with the log group but the CMK does not exist or the
-     *       CMK is disabled, you receive an <code>InvalidParameterException</code> error. </p>
+     *          <p>When you create a log group, by default the log events in the log group do not expire.
+     *       To set a retention policy so that events expire and are deleted after a specified time, use
+     *         <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutRetentionPolicy.html">PutRetentionPolicy</a>.</p>
+     *          <p>If you associate an KMS key with the log group, ingested data is
+     *       encrypted using the KMS key. This association is stored as long as the data
+     *       encrypted with the KMS key is still within CloudWatch Logs. This enables
+     *         CloudWatch Logs to decrypt this data whenever it is requested.</p>
+     *          <p>If you attempt to associate a KMS key with the log group but the KMS keydoes not exist or the KMS key is disabled, you receive an
+     *         <code>InvalidParameterException</code> error. </p>
      *          <important>
-     *             <p>CloudWatch Logs supports only symmetric CMKs. Do not associate an asymmetric CMK with
-     *         your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric
-     *           Keys</a>.</p>
+     *             <p>CloudWatch Logs supports only symmetric KMS keys. Do not associate an
+     *         asymmetric KMS key with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using
+     *           Symmetric and Asymmetric Keys</a>.</p>
      *          </important>
      */
     createLogGroup(args: CreateLogGroupCommandInput, options?: __HttpHandlerOptions): Promise<CreateLogGroupCommandOutput>;
@@ -180,13 +187,20 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *                <p>Log stream names can be between 1 and 512 characters long.</p>
      *             </li>
      *             <li>
-     *                <p>The ':' (colon) and '*' (asterisk) characters are not allowed.</p>
+     *                <p>Don't use ':' (colon) or '*' (asterisk) characters.</p>
      *             </li>
      *          </ul>
      */
     createLogStream(args: CreateLogStreamCommandInput, options?: __HttpHandlerOptions): Promise<CreateLogStreamCommandOutput>;
     createLogStream(args: CreateLogStreamCommandInput, cb: (err: any, data?: CreateLogStreamCommandOutput) => void): void;
     createLogStream(args: CreateLogStreamCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateLogStreamCommandOutput) => void): void;
+    /**
+     * <p>Deletes the data protection policy from the specified log group. </p>
+     *          <p>For more information about data protection policies, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDataProtectionPolicy.html">PutDataProtectionPolicy</a>.</p>
+     */
+    deleteDataProtectionPolicy(args: DeleteDataProtectionPolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeleteDataProtectionPolicyCommandOutput>;
+    deleteDataProtectionPolicy(args: DeleteDataProtectionPolicyCommandInput, cb: (err: any, data?: DeleteDataProtectionPolicyCommandOutput) => void): void;
+    deleteDataProtectionPolicy(args: DeleteDataProtectionPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteDataProtectionPolicyCommandOutput) => void): void;
     /**
      * <p>Deletes the specified destination, and eventually disables all the
      *       subscription filters that publish to it. This operation does not delete the
@@ -268,6 +282,9 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *             </code> condition key to control access.
      *       For more information about using tags to control access, see
      *       <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Controlling access to Amazon Web Services resources using tags</a>.</p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+     *     view data from the linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     describeLogGroups(args: DescribeLogGroupsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeLogGroupsCommandOutput>;
     describeLogGroups(args: DescribeLogGroupsCommandInput, cb: (err: any, data?: DescribeLogGroupsCommandOutput) => void): void;
@@ -277,6 +294,9 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *       You can list all the log streams or filter the results by prefix.
      *       You can also control how the results are ordered.</p>
      *          <p>This operation has a limit of five transactions per second, after which transactions are throttled.</p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+     *       view data from the linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     describeLogStreams(args: DescribeLogStreamsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeLogStreamsCommandOutput>;
     describeLogStreams(args: DescribeLogStreamsCommandInput, cb: (err: any, data?: DescribeLogStreamsCommandOutput) => void): void;
@@ -290,9 +310,9 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     describeMetricFilters(args: DescribeMetricFiltersCommandInput, cb: (err: any, data?: DescribeMetricFiltersCommandOutput) => void): void;
     describeMetricFilters(args: DescribeMetricFiltersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeMetricFiltersCommandOutput) => void): void;
     /**
-     * <p>Returns a list of CloudWatch Logs Insights queries that are scheduled, executing, or have
-     *       been executed recently in this account. You can request all queries or limit it to queries of
-     *       a specific log group or queries with a certain status.</p>
+     * <p>Returns a list of CloudWatch Logs Insights queries that are scheduled, running, or have
+     *       been run recently in this account. You can request all queries or limit it to queries of a
+     *       specific log group or queries with a certain status.</p>
      */
     describeQueries(args: DescribeQueriesCommandInput, options?: __HttpHandlerOptions): Promise<DescribeQueriesCommandOutput>;
     describeQueries(args: DescribeQueriesCommandInput, cb: (err: any, data?: DescribeQueriesCommandOutput) => void): void;
@@ -319,9 +339,11 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     describeSubscriptionFilters(args: DescribeSubscriptionFiltersCommandInput, cb: (err: any, data?: DescribeSubscriptionFiltersCommandOutput) => void): void;
     describeSubscriptionFilters(args: DescribeSubscriptionFiltersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeSubscriptionFiltersCommandOutput) => void): void;
     /**
-     * <p>Disassociates the associated Key Management Service customer master key (CMK) from the specified log group.</p>
-     *          <p>After the KMS CMK is disassociated from the log group, CloudWatch Logs stops encrypting newly ingested data for the log group.
-     *       All previously ingested data remains encrypted, and CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.</p>
+     * <p>Disassociates the associated KMS key from the specified log
+     *       group.</p>
+     *          <p>After the KMS key is disassociated from the log group, CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data
+     *       remains encrypted, and CloudWatch Logs requires permissions for the KMS key
+     *       whenever the encrypted data is requested.</p>
      *          <p>Note that it can take up to 5 minutes for this operation to take effect.</p>
      */
     disassociateKmsKey(args: DisassociateKmsKeyCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateKmsKeyCommandOutput>;
@@ -331,17 +353,27 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      * <p>Lists log events from the specified log group. You can list all the log events or filter the results
      *       using a filter pattern, a time range, and the name of the log stream.</p>
      *          <p>You must have the <code>logs;FilterLogEvents</code> permission to perform this operation.</p>
+     *
      *          <p>By default, this operation returns as many log events as can fit in 1 MB (up to 10,000
-     *       log events) or all the events found within the time range that you specify. If the results
-     *       include a token, then there are more log events available, and you can get additional results
-     *       by specifying the token in a subsequent call. This operation can return empty results
-     *     while there are more log events available through the token.</p>
+     *       log events) or all the events found within the specified time range. If the results include a
+     *       token, that means there are more log events available. You can get additional results by
+     *       specifying the token in a subsequent call. This operation can return empty results while there
+     *       are more log events available through the token.</p>
      *          <p>The returned log events are sorted by event timestamp, the timestamp when the event was ingested
      *     by CloudWatch Logs, and the ID of the <code>PutLogEvents</code> request.</p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+     *       view data from the linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     filterLogEvents(args: FilterLogEventsCommandInput, options?: __HttpHandlerOptions): Promise<FilterLogEventsCommandOutput>;
     filterLogEvents(args: FilterLogEventsCommandInput, cb: (err: any, data?: FilterLogEventsCommandOutput) => void): void;
     filterLogEvents(args: FilterLogEventsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: FilterLogEventsCommandOutput) => void): void;
+    /**
+     * <p>Returns information about a log group data protection policy.</p>
+     */
+    getDataProtectionPolicy(args: GetDataProtectionPolicyCommandInput, options?: __HttpHandlerOptions): Promise<GetDataProtectionPolicyCommandOutput>;
+    getDataProtectionPolicy(args: GetDataProtectionPolicyCommandInput, cb: (err: any, data?: GetDataProtectionPolicyCommandOutput) => void): void;
+    getDataProtectionPolicy(args: GetDataProtectionPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetDataProtectionPolicyCommandOutput) => void): void;
     /**
      * <p>Lists log events from the specified log stream. You can list all of the log events or
      *       filter using a time range.</p>
@@ -349,19 +381,27 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *          <p>By default, this operation returns as many log events as can fit in a response size of 1MB (up to 10,000 log events).
      *       You can get additional log events by specifying one of the tokens in a subsequent call.
      *       This operation can return empty results while there are more log events available through the token.</p>
+     *
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+     *       view data from the linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     getLogEvents(args: GetLogEventsCommandInput, options?: __HttpHandlerOptions): Promise<GetLogEventsCommandOutput>;
     getLogEvents(args: GetLogEventsCommandInput, cb: (err: any, data?: GetLogEventsCommandOutput) => void): void;
     getLogEvents(args: GetLogEventsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetLogEventsCommandOutput) => void): void;
     /**
-     * <p>Returns a list of the fields that are included in log events in the specified log group, along with the percentage of log events
-     *     that contain each field. The search is limited to a time period that you specify.</p>
-     *          <p>In the results, fields that start with @ are fields generated by CloudWatch Logs. For
-     *       example, <code>@timestamp</code> is the timestamp of each log event. For more information about the fields that are
-     *       generated by CloudWatch logs, see
-     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_AnalyzeLogData-discoverable-fields.html">Supported Logs and Discovered Fields</a>.</p>
+     * <p>Returns a list of the fields that are included in log events in the specified log group.
+     *       Includes the percentage of log events that contain each field. The search is limited to a time
+     *       period that you specify.</p>
+     *          <p>In the results, fields that start with <code>@</code> are fields generated by CloudWatch
+     *       Logs. For example, <code>@timestamp</code> is the timestamp of each log event. For more
+     *       information about the fields that are generated by CloudWatch logs, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_AnalyzeLogData-discoverable-fields.html">Supported
+     *         Logs and Discovered Fields</a>.</p>
      *          <p>The response results are sorted by the frequency percentage, starting
      *     with the highest percentage.</p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+     *       view data from the linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     getLogGroupFields(args: GetLogGroupFieldsCommandInput, options?: __HttpHandlerOptions): Promise<GetLogGroupFieldsCommandOutput>;
     getLogGroupFields(args: GetLogGroupFieldsCommandInput, cb: (err: any, data?: GetLogGroupFieldsCommandOutput) => void): void;
@@ -382,11 +422,13 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *       in a <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogRecord.html">GetLogRecord</a>
      *       operation to get the full log record.</p>
      *          <p>
-     *             <code>GetQueryResults</code>
-     *       does not start a query execution. To run a query, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a>.</p>
+     *             <code>GetQueryResults</code> does not start running a query. To run a query, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a>.</p>
      *          <p>If the value of the <code>Status</code> field in the output is <code>Running</code>, this operation
      *       returns only partial results. If you see a value of <code>Scheduled</code> or <code>Running</code> for the status,
      *       you can retry the operation later to see the final results. </p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account to start
+     *       queries in linked source accounts. For more information, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
      */
     getQueryResults(args: GetQueryResultsCommandInput, options?: __HttpHandlerOptions): Promise<GetQueryResultsCommandOutput>;
     getQueryResults(args: GetQueryResultsCommandInput, cb: (err: any, data?: GetQueryResultsCommandOutput) => void): void;
@@ -410,11 +452,31 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     listTagsLogGroup(args: ListTagsLogGroupCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsLogGroupCommandOutput>;
     listTagsLogGroup(args: ListTagsLogGroupCommandInput, cb: (err: any, data?: ListTagsLogGroupCommandOutput) => void): void;
     listTagsLogGroup(args: ListTagsLogGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsLogGroupCommandOutput) => void): void;
+    /**
+     * <p>Creates a data protection policy for the specified log group. A data protection policy can help safeguard sensitive
+     *       data that's ingested by the log group by auditing and masking the sensitive log data.</p>
+     *          <important>
+     *             <p>Sensitive data is detected and masked when it is ingested into the log group. When you set a
+     *       data protection policy, log events ingested into the log group before that time are not masked.</p>
+     *          </important>
+     *          <p>By default, when a user views a log event that includes masked data, the sensitive data is replaced by asterisks.
+     *       A user who has the <code>logs:Unmask</code> permission can use a
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogEvents.html">GetLogEvents</a> or
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_FilterLogEvents.html">FilterLogEvents</a>
+     *       operation with the <code>unmask</code> parameter set to <code>true</code> to view the unmasked
+     *       log events. Users with the <code>logs:Unmask</code> can also view unmasked data in the CloudWatch Logs
+     *       console by running a CloudWatch Logs Insights query with the <code>unmask</code> query command.</p>
+     *          <p>For more information, including a list of types of data that can be audited and masked, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html">Protect sensitive log data with masking</a>.</p>
+     */
+    putDataProtectionPolicy(args: PutDataProtectionPolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutDataProtectionPolicyCommandOutput>;
+    putDataProtectionPolicy(args: PutDataProtectionPolicyCommandInput, cb: (err: any, data?: PutDataProtectionPolicyCommandOutput) => void): void;
+    putDataProtectionPolicy(args: PutDataProtectionPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutDataProtectionPolicyCommandOutput) => void): void;
     /**
      * <p>Creates or updates a destination. This operation is used only to create destinations for cross-account subscriptions.</p>
-     *          <p>A destination encapsulates a physical resource (such
-     *       as an Amazon Kinesis stream) and enables you to subscribe to a real-time stream of log events
-     *       for a different account, ingested using <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
+     *          <p>A destination encapsulates a physical resource (such as an Amazon Kinesis stream). With
+     *       a destination, you can subscribe to a real-time stream of log events for a different account,
+     *       ingested using <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
      *          <p>Through an access policy, a destination controls what is written to it.
      *       By default, <code>PutDestination</code> does not set any access policy with the destination,
      *       which means a cross-account user cannot call <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutSubscriptionFilter.html">PutSubscriptionFilter</a> against
@@ -454,15 +516,16 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *                <p>None of the log events in the batch can be more than 2 hours in the future.</p>
      *             </li>
      *             <li>
-     *                <p>None of the log events in the batch can be older than 14 days or older than the retention
-     *           period of the log group.</p>
+     *                <p>None of the log events in the batch can be more than 14 days in the past. Also,
+     *           none of the log events can be from earlier than the retention period of the log
+     *           group.</p>
      *             </li>
      *             <li>
      *                <p>The log events in the batch must be in chronological order by their timestamp. The
-     *           timestamp is the time the event occurred, expressed as the number of milliseconds after
-     *           Jan 1, 1970 00:00:00 UTC. (In Amazon Web Services Tools for PowerShell and the Amazon Web Services SDK for .NET, the
-     *           timestamp is specified in .NET format: yyyy-mm-ddThh:mm:ss. For example,
-     *           2017-09-15T13:45:30.) </p>
+     *           timestamp is the time that the event occurred, expressed as the number of milliseconds
+     *           after <code>Jan 1, 1970 00:00:00 UTC</code>. (In Amazon Web Services Tools for PowerShell
+     *           and the Amazon Web Services SDK for .NET, the timestamp is specified in .NET format:
+     *             <code>yyyy-mm-ddThh:mm:ss</code>. For example, <code>2017-09-15T13:45:30</code>.) </p>
      *             </li>
      *             <li>
      *                <p>A batch of log events in a single request cannot span more than 24 hours. Otherwise, the operation fails.</p>
@@ -471,17 +534,19 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *                <p>The maximum number of log events in a batch is 10,000.</p>
      *             </li>
      *             <li>
-     *                <p>There is a quota of 5 requests per second per log stream. Additional requests are throttled. This quota can't be changed.</p>
+     *                <p>There is a quota of five requests per second per log stream. Additional requests
+     *           are throttled. This quota can't be changed.</p>
      *             </li>
      *          </ul>
-     *          <p>If a call to <code>PutLogEvents</code> returns "UnrecognizedClientException" the most likely cause is an invalid Amazon Web Services access key ID or secret key. </p>
+     *          <p>If a call to <code>PutLogEvents</code> returns "UnrecognizedClientException" the most
+     *       likely cause is a non-valid Amazon Web Services access key ID or secret key. </p>
      */
     putLogEvents(args: PutLogEventsCommandInput, options?: __HttpHandlerOptions): Promise<PutLogEventsCommandOutput>;
     putLogEvents(args: PutLogEventsCommandInput, cb: (err: any, data?: PutLogEventsCommandOutput) => void): void;
     putLogEvents(args: PutLogEventsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutLogEventsCommandOutput) => void): void;
     /**
-     * <p>Creates or updates a metric filter and associates it with the specified log group.
-     *       Metric filters allow you to configure rules to extract metric data from log events ingested
+     * <p>Creates or updates a metric filter and associates it with the specified log group. With
+     *       metric filters, you can configure rules to extract metric data from log events ingested
      *       through <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
      *          <p>The maximum number of metric filters that can be associated with a log group is
      *       100.</p>
@@ -494,9 +559,9 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *       found for
      *       a dimension is treated as a separate metric and accrues charges as a separate custom metric.
      *     </p>
-     *             <p>To help prevent accidental high charges, Amazon disables a metric filter
-     *         if it generates 1000 different name/value pairs for the dimensions that you
-     *         have specified within a certain amount of time.</p>
+     *             <p>CloudWatch Logs disables a metric filter if it generates 1,000 different name/value pairs for
+     *         your specified dimensions within a certain amount of time. This helps to prevent accidental
+     *         high charges.</p>
      *             <p>You can also set up a billing alarm to alert you if your charges are higher than
      *         expected. For more information,
      *         see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html">
@@ -511,13 +576,13 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      * <p>Creates or updates a query definition for CloudWatch Logs Insights. For
      *       more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html">Analyzing Log Data with CloudWatch Logs Insights</a>.</p>
      *
-     *          <p>To update a query definition, specify its
-     *         <code>queryDefinitionId</code> in your request. The values of <code>name</code>, <code>queryString</code>,
-     *       and <code>logGroupNames</code> are changed to the values that you specify in your update
-     *       operation. No current values are retained from the current query definition. For example, if
-     *       you update a current query definition that includes log groups, and you don't specify the
-     *         <code>logGroupNames</code> parameter in your update operation, the query definition changes
-     *       to contain no log groups.</p>
+     *          <p>To update a query definition, specify its <code>queryDefinitionId</code> in your request.
+     *       The values of <code>name</code>, <code>queryString</code>, and <code>logGroupNames</code> are
+     *       changed to the values that you specify in your update operation. No current values are
+     *       retained from the current query definition. For example, imagine updating a current query
+     *       definition that includes log groups. If you don't specify the <code>logGroupNames</code>
+     *       parameter in your update operation, the query definition changes to contain no log
+     *       groups.</p>
      *          <p>You must have the <code>logs:PutQueryDefinition</code> permission to be able to perform
      *     this operation.</p>
      */
@@ -533,19 +598,20 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
     putResourcePolicy(args: PutResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
     /**
-     * <p>Sets the retention of the specified log group. A retention policy allows you to
+     * <p>Sets the retention of the specified log group. With a retention policy, you can
      *       configure the number of days for which to retain log events in the specified log
      *       group.</p>
      *          <note>
-     *             <p>CloudWatch Logs doesn’t immediately delete log events when they reach their retention setting.
-     *       It typically takes up to 72 hours after that before log events are deleted, but in rare situations might take longer.</p>
-     *             <p>This means that if you change a log group to have a longer retention setting when it contains log events
-     *         that are past the expiration date, but haven’t been actually deleted, those log events will take
-     *         up to 72 hours to be deleted after the new retention date is reached. To make sure
-     *         that log data is deleted permanently, keep a log group at its lower retention setting until 72 hours has passed
-     *         after the end of the previous
-     *         retention period, or you have confirmed that the older log events are deleted.
-     *       </p>
+     *             <p>CloudWatch Logs doesn’t immediately delete log events when they reach their retention
+     *         setting. It typically takes up to 72 hours after that before log events are deleted, but in
+     *         rare situations might take longer.</p>
+     *             <p>To illustrate, imagine that you change a log group to have a longer retention setting
+     *         when it contains log events that are past the expiration date, but haven’t been deleted.
+     *         Those log events will take up to 72 hours to be deleted after the new retention date is
+     *         reached. To make sure that log data is deleted permanently, keep a log group at its lower
+     *         retention setting until 72 hours after the previous retention period ends. Alternatively,
+     *         wait to change the retention setting until you confirm that the earlier log events are
+     *         deleted. </p>
      *          </note>
      */
     putRetentionPolicy(args: PutRetentionPolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutRetentionPolicyCommandOutput>;
@@ -553,27 +619,26 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
     putRetentionPolicy(args: PutRetentionPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutRetentionPolicyCommandOutput) => void): void;
     /**
      * <p>Creates or updates a subscription filter and associates it with the specified log
-     *       group. Subscription filters allow you to subscribe to a real-time stream of log events
-     *       ingested through <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a> and have them delivered to a specific
-     *       destination. When log events are sent to the
-     *       receiving service, they are Base64 encoded
-     *       and compressed with the gzip format.</p>
+     *       group. With subscription filters, you can subscribe to a real-time stream of log events
+     *       ingested through <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>
+     *       and have them delivered to a specific destination. When log events are sent to the receiving
+     *       service, they are Base64 encoded and compressed with the GZIP format.</p>
      *          <p>The following destinations are supported for subscription filters:</p>
      *          <ul>
      *             <li>
-     *                <p>An Amazon Kinesis stream belonging to the same account as the subscription filter,
-     *           for same-account delivery.</p>
+     *                <p>An Amazon Kinesis data stream belonging to the same account as the subscription
+     *           filter, for same-account delivery.</p>
      *             </li>
      *             <li>
      *                <p>A logical destination that belongs to a different account, for cross-account delivery.</p>
      *             </li>
      *             <li>
-     *                <p>An Amazon Kinesis Firehose delivery stream that belongs to the same account as the
-     *           subscription filter, for same-account delivery.</p>
+     *                <p>An Amazon Kinesis Data Firehose delivery stream that belongs to the same account as
+     *           the subscription filter, for same-account delivery.</p>
      *             </li>
      *             <li>
-     *                <p>An Lambda function that belongs to the same account as the subscription filter,
-     *           for same-account delivery.</p>
+     *                <p>An Lambda function that belongs to the same account as the
+     *           subscription filter, for same-account delivery.</p>
      *             </li>
      *          </ul>
      *          <p>Each log group can have up to two subscription filters associated with it. If you are
@@ -590,12 +655,17 @@ export declare class CloudWatchLogs extends CloudWatchLogsClient {
      *       and time range to query and the query string to use.</p>
      *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_QuerySyntax.html">CloudWatch Logs Insights Query Syntax</a>.</p>
      *
-     *          <p>Queries time out after 15 minutes of execution. If your queries are timing out, reduce the
+     *          <p>Queries time out after 15 minutes of runtime. If your queries are timing out, reduce the
      *       time range being searched or partition your query into a number of queries.</p>
      *
-     *          <p>
-     *         You are limited to 20 concurrent CloudWatch Logs insights queries, including queries that have been added to dashboards.
-     *     </p>
+     *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a
+     *       monitoring account to start a query in a linked source account. For more information, see
+     *         <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch
+     *         cross-account observability</a>. For a cross-account <code>StartQuery</code> operation,
+     *       the query definition must be defined in the monitoring account.</p>
+     *
+     *          <p>You can have up to 20 concurrent CloudWatch Logs insights queries, including queries
+     *       that have been added to dashboards. </p>
      */
     startQuery(args: StartQueryCommandInput, options?: __HttpHandlerOptions): Promise<StartQueryCommandOutput>;
     startQuery(args: StartQueryCommandInput, cb: (err: any, data?: StartQueryCommandOutput) => void): void;