@aws-sdk/client-cloudwatch-logs 3.216.0 → 3.222.0

package/dist-types/CloudWatchLogsClient.d.ts

@@ -12,6 +12,7 @@ import { CancelExportTaskCommandInput, CancelExportTaskCommandOutput } from "./c
 import { CreateExportTaskCommandInput, CreateExportTaskCommandOutput } from "./commands/CreateExportTaskCommand";
 import { CreateLogGroupCommandInput, CreateLogGroupCommandOutput } from "./commands/CreateLogGroupCommand";
 import { CreateLogStreamCommandInput, CreateLogStreamCommandOutput } from "./commands/CreateLogStreamCommand";
+import { DeleteDataProtectionPolicyCommandInput, DeleteDataProtectionPolicyCommandOutput } from "./commands/DeleteDataProtectionPolicyCommand";
 import { DeleteDestinationCommandInput, DeleteDestinationCommandOutput } from "./commands/DeleteDestinationCommand";
 import { DeleteLogGroupCommandInput, DeleteLogGroupCommandOutput } from "./commands/DeleteLogGroupCommand";
 import { DeleteLogStreamCommandInput, DeleteLogStreamCommandOutput } from "./commands/DeleteLogStreamCommand";
@@ -31,12 +32,14 @@ import { DescribeResourcePoliciesCommandInput, DescribeResourcePoliciesCommandOu
 import { DescribeSubscriptionFiltersCommandInput, DescribeSubscriptionFiltersCommandOutput } from "./commands/DescribeSubscriptionFiltersCommand";
 import { DisassociateKmsKeyCommandInput, DisassociateKmsKeyCommandOutput } from "./commands/DisassociateKmsKeyCommand";
 import { FilterLogEventsCommandInput, FilterLogEventsCommandOutput } from "./commands/FilterLogEventsCommand";
+import { GetDataProtectionPolicyCommandInput, GetDataProtectionPolicyCommandOutput } from "./commands/GetDataProtectionPolicyCommand";
 import { GetLogEventsCommandInput, GetLogEventsCommandOutput } from "./commands/GetLogEventsCommand";
 import { GetLogGroupFieldsCommandInput, GetLogGroupFieldsCommandOutput } from "./commands/GetLogGroupFieldsCommand";
 import { GetLogRecordCommandInput, GetLogRecordCommandOutput } from "./commands/GetLogRecordCommand";
 import { GetQueryResultsCommandInput, GetQueryResultsCommandOutput } from "./commands/GetQueryResultsCommand";
 import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
 import { ListTagsLogGroupCommandInput, ListTagsLogGroupCommandOutput } from "./commands/ListTagsLogGroupCommand";
+import { PutDataProtectionPolicyCommandInput, PutDataProtectionPolicyCommandOutput } from "./commands/PutDataProtectionPolicyCommand";
 import { PutDestinationCommandInput, PutDestinationCommandOutput } from "./commands/PutDestinationCommand";
 import { PutDestinationPolicyCommandInput, PutDestinationPolicyCommandOutput } from "./commands/PutDestinationPolicyCommand";
 import { PutLogEventsCommandInput, PutLogEventsCommandOutput } from "./commands/PutLogEventsCommand";
@@ -53,8 +56,8 @@ import { TestMetricFilterCommandInput, TestMetricFilterCommandOutput } from "./c
 import { UntagLogGroupCommandInput, UntagLogGroupCommandOutput } from "./commands/UntagLogGroupCommand";
 import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
 import { ClientInputEndpointParameters, ClientResolvedEndpointParameters, EndpointParameters } from "./endpoint/EndpointParameters";
-export declare type ServiceInputTypes = AssociateKmsKeyCommandInput | CancelExportTaskCommandInput | CreateExportTaskCommandInput | CreateLogGroupCommandInput | CreateLogStreamCommandInput | DeleteDestinationCommandInput | DeleteLogGroupCommandInput | DeleteLogStreamCommandInput | DeleteMetricFilterCommandInput | DeleteQueryDefinitionCommandInput | DeleteResourcePolicyCommandInput | DeleteRetentionPolicyCommandInput | DeleteSubscriptionFilterCommandInput | DescribeDestinationsCommandInput | DescribeExportTasksCommandInput | DescribeLogGroupsCommandInput | DescribeLogStreamsCommandInput | DescribeMetricFiltersCommandInput | DescribeQueriesCommandInput | DescribeQueryDefinitionsCommandInput | DescribeResourcePoliciesCommandInput | DescribeSubscriptionFiltersCommandInput | DisassociateKmsKeyCommandInput | FilterLogEventsCommandInput | GetLogEventsCommandInput | GetLogGroupFieldsCommandInput | GetLogRecordCommandInput | GetQueryResultsCommandInput | ListTagsForResourceCommandInput | ListTagsLogGroupCommandInput | PutDestinationCommandInput | PutDestinationPolicyCommandInput | PutLogEventsCommandInput | PutMetricFilterCommandInput | PutQueryDefinitionCommandInput | PutResourcePolicyCommandInput | PutRetentionPolicyCommandInput | PutSubscriptionFilterCommandInput | StartQueryCommandInput | StopQueryCommandInput | TagLogGroupCommandInput | TagResourceCommandInput | TestMetricFilterCommandInput | UntagLogGroupCommandInput | UntagResourceCommandInput;
-export declare type ServiceOutputTypes = AssociateKmsKeyCommandOutput | CancelExportTaskCommandOutput | CreateExportTaskCommandOutput | CreateLogGroupCommandOutput | CreateLogStreamCommandOutput | DeleteDestinationCommandOutput | DeleteLogGroupCommandOutput | DeleteLogStreamCommandOutput | DeleteMetricFilterCommandOutput | DeleteQueryDefinitionCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRetentionPolicyCommandOutput | DeleteSubscriptionFilterCommandOutput | DescribeDestinationsCommandOutput | DescribeExportTasksCommandOutput | DescribeLogGroupsCommandOutput | DescribeLogStreamsCommandOutput | DescribeMetricFiltersCommandOutput | DescribeQueriesCommandOutput | DescribeQueryDefinitionsCommandOutput | DescribeResourcePoliciesCommandOutput | DescribeSubscriptionFiltersCommandOutput | DisassociateKmsKeyCommandOutput | FilterLogEventsCommandOutput | GetLogEventsCommandOutput | GetLogGroupFieldsCommandOutput | GetLogRecordCommandOutput | GetQueryResultsCommandOutput | ListTagsForResourceCommandOutput | ListTagsLogGroupCommandOutput | PutDestinationCommandOutput | PutDestinationPolicyCommandOutput | PutLogEventsCommandOutput | PutMetricFilterCommandOutput | PutQueryDefinitionCommandOutput | PutResourcePolicyCommandOutput | PutRetentionPolicyCommandOutput | PutSubscriptionFilterCommandOutput | StartQueryCommandOutput | StopQueryCommandOutput | TagLogGroupCommandOutput | TagResourceCommandOutput | TestMetricFilterCommandOutput | UntagLogGroupCommandOutput | UntagResourceCommandOutput;
+export declare type ServiceInputTypes = AssociateKmsKeyCommandInput | CancelExportTaskCommandInput | CreateExportTaskCommandInput | CreateLogGroupCommandInput | CreateLogStreamCommandInput | DeleteDataProtectionPolicyCommandInput | DeleteDestinationCommandInput | DeleteLogGroupCommandInput | DeleteLogStreamCommandInput | DeleteMetricFilterCommandInput | DeleteQueryDefinitionCommandInput | DeleteResourcePolicyCommandInput | DeleteRetentionPolicyCommandInput | DeleteSubscriptionFilterCommandInput | DescribeDestinationsCommandInput | DescribeExportTasksCommandInput | DescribeLogGroupsCommandInput | DescribeLogStreamsCommandInput | DescribeMetricFiltersCommandInput | DescribeQueriesCommandInput | DescribeQueryDefinitionsCommandInput | DescribeResourcePoliciesCommandInput | DescribeSubscriptionFiltersCommandInput | DisassociateKmsKeyCommandInput | FilterLogEventsCommandInput | GetDataProtectionPolicyCommandInput | GetLogEventsCommandInput | GetLogGroupFieldsCommandInput | GetLogRecordCommandInput | GetQueryResultsCommandInput | ListTagsForResourceCommandInput | ListTagsLogGroupCommandInput | PutDataProtectionPolicyCommandInput | PutDestinationCommandInput | PutDestinationPolicyCommandInput | PutLogEventsCommandInput | PutMetricFilterCommandInput | PutQueryDefinitionCommandInput | PutResourcePolicyCommandInput | PutRetentionPolicyCommandInput | PutSubscriptionFilterCommandInput | StartQueryCommandInput | StopQueryCommandInput | TagLogGroupCommandInput | TagResourceCommandInput | TestMetricFilterCommandInput | UntagLogGroupCommandInput | UntagResourceCommandInput;
+export declare type ServiceOutputTypes = AssociateKmsKeyCommandOutput | CancelExportTaskCommandOutput | CreateExportTaskCommandOutput | CreateLogGroupCommandOutput | CreateLogStreamCommandOutput | DeleteDataProtectionPolicyCommandOutput | DeleteDestinationCommandOutput | DeleteLogGroupCommandOutput | DeleteLogStreamCommandOutput | DeleteMetricFilterCommandOutput | DeleteQueryDefinitionCommandOutput | DeleteResourcePolicyCommandOutput | DeleteRetentionPolicyCommandOutput | DeleteSubscriptionFilterCommandOutput | DescribeDestinationsCommandOutput | DescribeExportTasksCommandOutput | DescribeLogGroupsCommandOutput | DescribeLogStreamsCommandOutput | DescribeMetricFiltersCommandOutput | DescribeQueriesCommandOutput | DescribeQueryDefinitionsCommandOutput | DescribeResourcePoliciesCommandOutput | DescribeSubscriptionFiltersCommandOutput | DisassociateKmsKeyCommandOutput | FilterLogEventsCommandOutput | GetDataProtectionPolicyCommandOutput | GetLogEventsCommandOutput | GetLogGroupFieldsCommandOutput | GetLogRecordCommandOutput | GetQueryResultsCommandOutput | ListTagsForResourceCommandOutput | ListTagsLogGroupCommandOutput | PutDataProtectionPolicyCommandOutput | PutDestinationCommandOutput | PutDestinationPolicyCommandOutput | PutLogEventsCommandOutput | PutMetricFilterCommandOutput | PutQueryDefinitionCommandOutput | PutResourcePolicyCommandOutput | PutRetentionPolicyCommandOutput | PutSubscriptionFilterCommandOutput | StartQueryCommandOutput | StopQueryCommandOutput | TagLogGroupCommandOutput | TagResourceCommandOutput | TestMetricFilterCommandOutput | UntagLogGroupCommandOutput | UntagResourceCommandOutput;
 export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
     /**
      * The HTTP handler to use. Fetch in browser and Https in Nodejs.
@@ -170,22 +173,23 @@ export interface CloudWatchLogsClientResolvedConfig extends CloudWatchLogsClient
 /**
  * <p>You can use Amazon CloudWatch Logs to monitor, store, and access your log files from
  *       EC2 instances, CloudTrail, and other sources. You can then retrieve the associated
- *       log data from CloudWatch Logs using the CloudWatch console, CloudWatch Logs commands in the
- *       Amazon Web Services CLI, CloudWatch Logs API, or CloudWatch Logs SDK.</p>
+ *       log data from CloudWatch Logs using the CloudWatch console. Alternatively, you can use
+ *       CloudWatch Logs commands in the Amazon Web Services CLI, CloudWatch Logs API, or CloudWatch
+ *       Logs SDK.</p>
  *          <p>You can use CloudWatch Logs to:</p>
  *          <ul>
  *             <li>
  *                <p>
- *                   <b>Monitor logs from EC2 instances in real-time</b>: You
+ *                   <b>Monitor logs from EC2 instances in real time</b>: You
  *           can use CloudWatch Logs to monitor applications and systems using log data. For example,
- *           CloudWatch Logs can track the number of errors that occur in your application logs and
- *           send you a notification whenever the rate of errors exceeds a threshold that you specify.
- *           CloudWatch Logs uses your log data for monitoring so no code changes are required. For
- *           example, you can monitor application logs for specific literal terms (such as
- *           "NullReferenceException") or count the number of occurrences of a literal term at a
- *           particular position in log data (such as "404" status codes in an Apache access log). When
- *           the term you are searching for is found, CloudWatch Logs reports the data to a CloudWatch
- *           metric that you specify.</p>
+ *           CloudWatch Logs can track the number of errors that occur in your application logs. Then,
+ *           it can send you a notification whenever the rate of errors exceeds a threshold that you
+ *           specify. CloudWatch Logs uses your log data for monitoring so no code changes are
+ *           required. For example, you can monitor application logs for specific literal terms (such
+ *           as "NullReferenceException"). You can also count the number of occurrences of a literal
+ *           term at a particular position in log data (such as "404" status codes in an Apache access
+ *           log). When the term you are searching for is found, CloudWatch Logs reports the data to a
+ *           CloudWatch metric that you specify.</p>
  *             </li>
  *             <li>
  *                <p>
@@ -197,9 +201,9 @@ export interface CloudWatchLogsClientResolvedConfig extends CloudWatchLogsClient
  *                <p>
  *                   <b>Archive log data</b>: You can use CloudWatch Logs to
  *           store your log data in highly durable storage. You can change the log retention setting so
- *           that any log events older than this setting are automatically deleted. The CloudWatch Logs
- *           agent makes it easy to quickly send both rotated and non-rotated log data off of a host
- *           and into the log service. You can then access the raw log data when you need it.</p>
+ *           that any log events earlier than this setting are automatically deleted. The CloudWatch
+ *           Logs agent helps to quickly send both rotated and non-rotated log data off of a host and
+ *           into the log service. You can then access the raw log data when you need it.</p>
  *             </li>
  *          </ul>
  */

package/dist-types/commands/AssociateKmsKeyCommand.d.ts

@@ -8,19 +8,20 @@ export interface AssociateKmsKeyCommandInput extends AssociateKmsKeyRequest {
 export interface AssociateKmsKeyCommandOutput extends __MetadataBearer {
 }
 /**
- * <p>Associates the specified Key Management Service customer master key (CMK) with the specified log group.</p>
- *          <p>Associating an KMS CMK with a log group overrides any existing associations between the log group and a CMK.
- *       After a CMK is associated with a log group, all newly ingested data for the log group is encrypted using the CMK.
- *       This association is stored as long as the data encrypted with the CMK is still within CloudWatch Logs.
- *       This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
+ * <p>Associates the specified KMS key with the specified log
+ *       group.</p>
+ *          <p>Associating a KMS key with a log group overrides any existing
+ *       associations between the log group and a KMS key. After a KMS key is associated with a log group, all newly ingested data for the log group is encrypted
+ *       using the KMS key. This association is stored as long as the data encrypted
+ *       with the KMS keyis still within CloudWatch Logs. This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
  *          <important>
- *             <p>CloudWatch Logs supports only symmetric CMKs. Do not use an associate an asymmetric CMK
- *         with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric
- *           Keys</a>.</p>
+ *             <p>CloudWatch Logs supports only symmetric KMS keys. Do not use an associate
+ *         an asymmetric KMS key with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using
+ *           Symmetric and Asymmetric Keys</a>.</p>
  *          </important>
  *          <p>It can take up to 5 minutes for this operation to take effect.</p>
- *          <p>If you attempt to associate a CMK with a log group but the CMK does not exist or the
- *       CMK is disabled, you receive an <code>InvalidParameterException</code> error. </p>
+ *          <p>If you attempt to associate a KMS key with a log group but the KMS key does not exist or the KMS key is disabled, you receive an
+ *         <code>InvalidParameterException</code> error. </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/CreateExportTaskCommand.d.ts

@@ -8,13 +8,13 @@ export interface CreateExportTaskCommandInput extends CreateExportTaskRequest {
 export interface CreateExportTaskCommandOutput extends CreateExportTaskResponse, __MetadataBearer {
 }
 /**
- * <p>Creates an export task, which allows you to efficiently export data from a
- *       log group to an Amazon S3 bucket. When you perform a <code>CreateExportTask</code>
- *       operation, you must use credentials that have permission to write to the S3 bucket
- *       that you specify as the destination.</p>
- *          <p>Exporting log data to Amazon S3 buckets that are encrypted by KMS is
- *       supported. Exporting
- *       log data to Amazon S3 buckets that have S3 Object Lock enabled with a retention period is also supported.</p>
+ * <p>Creates an export task so that you can efficiently export data from a log group to an
+ *       Amazon S3 bucket. When you perform a <code>CreateExportTask</code> operation, you must use
+ *       credentials that have permission to write to the S3 bucket that you specify as the
+ *       destination.</p>
+ *          <p>Exporting log data to S3 buckets that are encrypted by KMS is supported.
+ *       Exporting log data to Amazon S3 buckets that have S3 Object Lock enabled with a
+ *       retention period is also supported.</p>
  *          <p>Exporting to S3 buckets that are encrypted with AES-256 is supported. </p>
  *          <p>This is an asynchronous call. If all the required information is provided, this
  *       operation initiates an export task and responds with the ID of the task. After the task has started,
@@ -22,12 +22,12 @@ export interface CreateExportTaskCommandOutput extends CreateExportTaskResponse,
  *       only have one active (<code>RUNNING</code> or <code>PENDING</code>) export task at a time.
  *       To cancel an export task, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CancelExportTask.html">CancelExportTask</a>.</p>
  *          <p>You can export logs from multiple log groups or multiple time ranges to the same S3
- *       bucket. To separate out log data for each export task, you can specify a prefix to be used as
- *       the Amazon S3 key prefix for all exported objects.</p>
+ *       bucket. To separate log data for each export task, specify a prefix to be used as the Amazon
+ *       S3 key prefix for all exported objects.</p>
  *
  *          <note>
- *             <p>Time-based sorting on chunks of log data inside an exported file is not guaranteed. You can sort the
- *       exported log fild data by using Linux utilities.</p>
+ *             <p>Time-based sorting on chunks of log data inside an exported file is not guaranteed. You can
+ *         sort the exported log field data by using Linux utilities.</p>
  *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/CreateLogGroupCommand.d.ts

@@ -12,7 +12,8 @@ export interface CreateLogGroupCommandOutput extends __MetadataBearer {
  *          <p>You must use the following guidelines when naming a log group:</p>
  *          <ul>
  *             <li>
- *                <p>Log group names must be unique within a region for an Amazon Web Services account.</p>
+ *                <p>Log group names must be unique within a Region for an Amazon Web Services
+ *           account.</p>
  *             </li>
  *             <li>
  *                <p>Log group names can be between 1 and 512 characters long.</p>
@@ -22,18 +23,19 @@ export interface CreateLogGroupCommandOutput extends __MetadataBearer {
  *           '/' (forward slash), '.' (period), and '#' (number sign)</p>
  *             </li>
  *          </ul>
- *          <p>When you create a log group, by default the log events in the log group never expire. To set
- *     a retention policy so that events expire and are deleted after a specified time, use
- *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutRetentionPolicy.html">PutRetentionPolicy</a>.</p>
- *          <p>If you associate a Key Management Service customer master key (CMK) with the log group, ingested data is encrypted using the CMK.
- *       This association is stored as long as the data encrypted with the CMK is still within CloudWatch Logs.
- *       This enables CloudWatch Logs to decrypt this data whenever it is requested.</p>
- *          <p>If you attempt to associate a CMK with the log group but the CMK does not exist or the
- *       CMK is disabled, you receive an <code>InvalidParameterException</code> error. </p>
+ *          <p>When you create a log group, by default the log events in the log group do not expire.
+ *       To set a retention policy so that events expire and are deleted after a specified time, use
+ *         <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutRetentionPolicy.html">PutRetentionPolicy</a>.</p>
+ *          <p>If you associate an KMS key with the log group, ingested data is
+ *       encrypted using the KMS key. This association is stored as long as the data
+ *       encrypted with the KMS key is still within CloudWatch Logs. This enables
+ *         CloudWatch Logs to decrypt this data whenever it is requested.</p>
+ *          <p>If you attempt to associate a KMS key with the log group but the KMS keydoes not exist or the KMS key is disabled, you receive an
+ *         <code>InvalidParameterException</code> error. </p>
  *          <important>
- *             <p>CloudWatch Logs supports only symmetric CMKs. Do not associate an asymmetric CMK with
- *         your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using Symmetric and Asymmetric
- *           Keys</a>.</p>
+ *             <p>CloudWatch Logs supports only symmetric KMS keys. Do not associate an
+ *         asymmetric KMS key with your log group. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Using
+ *           Symmetric and Asymmetric Keys</a>.</p>
  *          </important>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/CreateLogStreamCommand.d.ts

@@ -22,7 +22,7 @@ export interface CreateLogStreamCommandOutput extends __MetadataBearer {
  *                <p>Log stream names can be between 1 and 512 characters long.</p>
  *             </li>
  *             <li>
- *                <p>The ':' (colon) and '*' (asterisk) characters are not allowed.</p>
+ *                <p>Don't use ':' (colon) or '*' (asterisk) characters.</p>
  *             </li>
  *          </ul>
  * @example

package/dist-types/commands/DeleteDataProtectionPolicyCommand.d.ts

@@ -0,0 +1,38 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CloudWatchLogsClient";
+import { DeleteDataProtectionPolicyRequest } from "../models/models_0";
+export interface DeleteDataProtectionPolicyCommandInput extends DeleteDataProtectionPolicyRequest {
+}
+export interface DeleteDataProtectionPolicyCommandOutput extends __MetadataBearer {
+}
+/**
+ * <p>Deletes the data protection policy from the specified log group. </p>
+ *          <p>For more information about data protection policies, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDataProtectionPolicy.html">PutDataProtectionPolicy</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { CloudWatchLogsClient, DeleteDataProtectionPolicyCommand } from "@aws-sdk/client-cloudwatch-logs"; // ES Modules import
+ * // const { CloudWatchLogsClient, DeleteDataProtectionPolicyCommand } = require("@aws-sdk/client-cloudwatch-logs"); // CommonJS import
+ * const client = new CloudWatchLogsClient(config);
+ * const command = new DeleteDataProtectionPolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DeleteDataProtectionPolicyCommandInput} for command's `input` shape.
+ * @see {@link DeleteDataProtectionPolicyCommandOutput} for command's `response` shape.
+ * @see {@link CloudWatchLogsClientResolvedConfig | config} for CloudWatchLogsClient's `config` shape.
+ *
+ */
+export declare class DeleteDataProtectionPolicyCommand extends $Command<DeleteDataProtectionPolicyCommandInput, DeleteDataProtectionPolicyCommandOutput, CloudWatchLogsClientResolvedConfig> {
+    readonly input: DeleteDataProtectionPolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: DeleteDataProtectionPolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: CloudWatchLogsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DeleteDataProtectionPolicyCommandInput, DeleteDataProtectionPolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/DescribeLogGroupsCommand.d.ts

@@ -17,6 +17,9 @@ export interface DescribeLogGroupsCommandOutput extends DescribeLogGroupsRespons
  *             </code> condition key to control access.
  *       For more information about using tags to control access, see
  *       <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Controlling access to Amazon Web Services resources using tags</a>.</p>
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+ *     view data from the linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DescribeLogStreamsCommand.d.ts

@@ -12,6 +12,9 @@ export interface DescribeLogStreamsCommandOutput extends DescribeLogStreamsRespo
  *       You can list all the log streams or filter the results by prefix.
  *       You can also control how the results are ordered.</p>
  *          <p>This operation has a limit of five transactions per second, after which transactions are throttled.</p>
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+ *       view data from the linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DescribeQueriesCommand.d.ts

@@ -8,9 +8,9 @@ export interface DescribeQueriesCommandInput extends DescribeQueriesRequest {
 export interface DescribeQueriesCommandOutput extends DescribeQueriesResponse, __MetadataBearer {
 }
 /**
- * <p>Returns a list of CloudWatch Logs Insights queries that are scheduled, executing, or have
- *       been executed recently in this account. You can request all queries or limit it to queries of
- *       a specific log group or queries with a certain status.</p>
+ * <p>Returns a list of CloudWatch Logs Insights queries that are scheduled, running, or have
+ *       been run recently in this account. You can request all queries or limit it to queries of a
+ *       specific log group or queries with a certain status.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisassociateKmsKeyCommand.d.ts

@@ -8,9 +8,11 @@ export interface DisassociateKmsKeyCommandInput extends DisassociateKmsKeyReques
 export interface DisassociateKmsKeyCommandOutput extends __MetadataBearer {
 }
 /**
- * <p>Disassociates the associated Key Management Service customer master key (CMK) from the specified log group.</p>
- *          <p>After the KMS CMK is disassociated from the log group, CloudWatch Logs stops encrypting newly ingested data for the log group.
- *       All previously ingested data remains encrypted, and CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.</p>
+ * <p>Disassociates the associated KMS key from the specified log
+ *       group.</p>
+ *          <p>After the KMS key is disassociated from the log group, CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data
+ *       remains encrypted, and CloudWatch Logs requires permissions for the KMS key
+ *       whenever the encrypted data is requested.</p>
  *          <p>Note that it can take up to 5 minutes for this operation to take effect.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/FilterLogEventsCommand.d.ts

@@ -11,13 +11,17 @@ export interface FilterLogEventsCommandOutput extends FilterLogEventsResponse, _
  * <p>Lists log events from the specified log group. You can list all the log events or filter the results
  *       using a filter pattern, a time range, and the name of the log stream.</p>
  *          <p>You must have the <code>logs;FilterLogEvents</code> permission to perform this operation.</p>
+ *
  *          <p>By default, this operation returns as many log events as can fit in 1 MB (up to 10,000
- *       log events) or all the events found within the time range that you specify. If the results
- *       include a token, then there are more log events available, and you can get additional results
- *       by specifying the token in a subsequent call. This operation can return empty results
- *     while there are more log events available through the token.</p>
+ *       log events) or all the events found within the specified time range. If the results include a
+ *       token, that means there are more log events available. You can get additional results by
+ *       specifying the token in a subsequent call. This operation can return empty results while there
+ *       are more log events available through the token.</p>
  *          <p>The returned log events are sorted by event timestamp, the timestamp when the event was ingested
  *     by CloudWatch Logs, and the ID of the <code>PutLogEvents</code> request.</p>
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+ *       view data from the linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetDataProtectionPolicyCommand.d.ts

@@ -0,0 +1,37 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CloudWatchLogsClient";
+import { GetDataProtectionPolicyRequest, GetDataProtectionPolicyResponse } from "../models/models_0";
+export interface GetDataProtectionPolicyCommandInput extends GetDataProtectionPolicyRequest {
+}
+export interface GetDataProtectionPolicyCommandOutput extends GetDataProtectionPolicyResponse, __MetadataBearer {
+}
+/**
+ * <p>Returns information about a log group data protection policy.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { CloudWatchLogsClient, GetDataProtectionPolicyCommand } from "@aws-sdk/client-cloudwatch-logs"; // ES Modules import
+ * // const { CloudWatchLogsClient, GetDataProtectionPolicyCommand } = require("@aws-sdk/client-cloudwatch-logs"); // CommonJS import
+ * const client = new CloudWatchLogsClient(config);
+ * const command = new GetDataProtectionPolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link GetDataProtectionPolicyCommandInput} for command's `input` shape.
+ * @see {@link GetDataProtectionPolicyCommandOutput} for command's `response` shape.
+ * @see {@link CloudWatchLogsClientResolvedConfig | config} for CloudWatchLogsClient's `config` shape.
+ *
+ */
+export declare class GetDataProtectionPolicyCommand extends $Command<GetDataProtectionPolicyCommandInput, GetDataProtectionPolicyCommandOutput, CloudWatchLogsClientResolvedConfig> {
+    readonly input: GetDataProtectionPolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: GetDataProtectionPolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: CloudWatchLogsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetDataProtectionPolicyCommandInput, GetDataProtectionPolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/GetLogEventsCommand.d.ts

@@ -14,6 +14,10 @@ export interface GetLogEventsCommandOutput extends GetLogEventsResponse, __Metad
  *          <p>By default, this operation returns as many log events as can fit in a response size of 1MB (up to 10,000 log events).
  *       You can get additional log events by specifying one of the tokens in a subsequent call.
  *       This operation can return empty results while there are more log events available through the token.</p>
+ *
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+ *       view data from the linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetLogGroupFieldsCommand.d.ts

@@ -8,14 +8,18 @@ export interface GetLogGroupFieldsCommandInput extends GetLogGroupFieldsRequest
 export interface GetLogGroupFieldsCommandOutput extends GetLogGroupFieldsResponse, __MetadataBearer {
 }
 /**
- * <p>Returns a list of the fields that are included in log events in the specified log group, along with the percentage of log events
- *     that contain each field. The search is limited to a time period that you specify.</p>
- *          <p>In the results, fields that start with @ are fields generated by CloudWatch Logs. For
- *       example, <code>@timestamp</code> is the timestamp of each log event. For more information about the fields that are
- *       generated by CloudWatch logs, see
- *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_AnalyzeLogData-discoverable-fields.html">Supported Logs and Discovered Fields</a>.</p>
+ * <p>Returns a list of the fields that are included in log events in the specified log group.
+ *       Includes the percentage of log events that contain each field. The search is limited to a time
+ *       period that you specify.</p>
+ *          <p>In the results, fields that start with <code>@</code> are fields generated by CloudWatch
+ *       Logs. For example, <code>@timestamp</code> is the timestamp of each log event. For more
+ *       information about the fields that are generated by CloudWatch logs, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_AnalyzeLogData-discoverable-fields.html">Supported
+ *         Logs and Discovered Fields</a>.</p>
  *          <p>The response results are sorted by the frequency percentage, starting
  *     with the highest percentage.</p>
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account and
+ *       view data from the linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetQueryResultsCommand.d.ts

@@ -14,11 +14,13 @@ export interface GetQueryResultsCommandOutput extends GetQueryResultsResponse, _
  *       in a <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogRecord.html">GetLogRecord</a>
  *       operation to get the full log record.</p>
  *          <p>
- *             <code>GetQueryResults</code>
- *       does not start a query execution. To run a query, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a>.</p>
+ *             <code>GetQueryResults</code> does not start running a query. To run a query, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a>.</p>
  *          <p>If the value of the <code>Status</code> field in the output is <code>Running</code>, this operation
  *       returns only partial results. If you see a value of <code>Scheduled</code> or <code>Running</code> for the status,
  *       you can retry the operation later to see the final results. </p>
+ *          <p>If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account to start
+ *       queries in linked source accounts. For more information, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html">CloudWatch cross-account observability</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutDataProtectionPolicyCommand.d.ts

@@ -0,0 +1,51 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CloudWatchLogsClient";
+import { PutDataProtectionPolicyRequest, PutDataProtectionPolicyResponse } from "../models/models_0";
+export interface PutDataProtectionPolicyCommandInput extends PutDataProtectionPolicyRequest {
+}
+export interface PutDataProtectionPolicyCommandOutput extends PutDataProtectionPolicyResponse, __MetadataBearer {
+}
+/**
+ * <p>Creates a data protection policy for the specified log group. A data protection policy can help safeguard sensitive
+ *       data that's ingested by the log group by auditing and masking the sensitive log data.</p>
+ *          <important>
+ *             <p>Sensitive data is detected and masked when it is ingested into the log group. When you set a
+ *       data protection policy, log events ingested into the log group before that time are not masked.</p>
+ *          </important>
+ *          <p>By default, when a user views a log event that includes masked data, the sensitive data is replaced by asterisks.
+ *       A user who has the <code>logs:Unmask</code> permission can use a
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogEvents.html">GetLogEvents</a> or
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_FilterLogEvents.html">FilterLogEvents</a>
+ *       operation with the <code>unmask</code> parameter set to <code>true</code> to view the unmasked
+ *       log events. Users with the <code>logs:Unmask</code> can also view unmasked data in the CloudWatch Logs
+ *       console by running a CloudWatch Logs Insights query with the <code>unmask</code> query command.</p>
+ *          <p>For more information, including a list of types of data that can be audited and masked, see
+ *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html">Protect sensitive log data with masking</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { CloudWatchLogsClient, PutDataProtectionPolicyCommand } from "@aws-sdk/client-cloudwatch-logs"; // ES Modules import
+ * // const { CloudWatchLogsClient, PutDataProtectionPolicyCommand } = require("@aws-sdk/client-cloudwatch-logs"); // CommonJS import
+ * const client = new CloudWatchLogsClient(config);
+ * const command = new PutDataProtectionPolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link PutDataProtectionPolicyCommandInput} for command's `input` shape.
+ * @see {@link PutDataProtectionPolicyCommandOutput} for command's `response` shape.
+ * @see {@link CloudWatchLogsClientResolvedConfig | config} for CloudWatchLogsClient's `config` shape.
+ *
+ */
+export declare class PutDataProtectionPolicyCommand extends $Command<PutDataProtectionPolicyCommandInput, PutDataProtectionPolicyCommandOutput, CloudWatchLogsClientResolvedConfig> {
+    readonly input: PutDataProtectionPolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: PutDataProtectionPolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: CloudWatchLogsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<PutDataProtectionPolicyCommandInput, PutDataProtectionPolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/PutDestinationCommand.d.ts

@@ -9,9 +9,9 @@ export interface PutDestinationCommandOutput extends PutDestinationResponse, __M
 }
 /**
  * <p>Creates or updates a destination. This operation is used only to create destinations for cross-account subscriptions.</p>
- *          <p>A destination encapsulates a physical resource (such
- *       as an Amazon Kinesis stream) and enables you to subscribe to a real-time stream of log events
- *       for a different account, ingested using <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
+ *          <p>A destination encapsulates a physical resource (such as an Amazon Kinesis stream). With
+ *       a destination, you can subscribe to a real-time stream of log events for a different account,
+ *       ingested using <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
  *          <p>Through an access policy, a destination controls what is written to it.
  *       By default, <code>PutDestination</code> does not set any access policy with the destination,
  *       which means a cross-account user cannot call <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutSubscriptionFilter.html">PutSubscriptionFilter</a> against

package/dist-types/commands/PutLogEventsCommand.d.ts

@@ -25,15 +25,16 @@ export interface PutLogEventsCommandOutput extends PutLogEventsResponse, __Metad
  *                <p>None of the log events in the batch can be more than 2 hours in the future.</p>
  *             </li>
  *             <li>
- *                <p>None of the log events in the batch can be older than 14 days or older than the retention
- *           period of the log group.</p>
+ *                <p>None of the log events in the batch can be more than 14 days in the past. Also,
+ *           none of the log events can be from earlier than the retention period of the log
+ *           group.</p>
  *             </li>
  *             <li>
  *                <p>The log events in the batch must be in chronological order by their timestamp. The
- *           timestamp is the time the event occurred, expressed as the number of milliseconds after
- *           Jan 1, 1970 00:00:00 UTC. (In Amazon Web Services Tools for PowerShell and the Amazon Web Services SDK for .NET, the
- *           timestamp is specified in .NET format: yyyy-mm-ddThh:mm:ss. For example,
- *           2017-09-15T13:45:30.) </p>
+ *           timestamp is the time that the event occurred, expressed as the number of milliseconds
+ *           after <code>Jan 1, 1970 00:00:00 UTC</code>. (In Amazon Web Services Tools for PowerShell
+ *           and the Amazon Web Services SDK for .NET, the timestamp is specified in .NET format:
+ *             <code>yyyy-mm-ddThh:mm:ss</code>. For example, <code>2017-09-15T13:45:30</code>.) </p>
  *             </li>
  *             <li>
  *                <p>A batch of log events in a single request cannot span more than 24 hours. Otherwise, the operation fails.</p>
@@ -42,10 +43,12 @@ export interface PutLogEventsCommandOutput extends PutLogEventsResponse, __Metad
  *                <p>The maximum number of log events in a batch is 10,000.</p>
  *             </li>
  *             <li>
- *                <p>There is a quota of 5 requests per second per log stream. Additional requests are throttled. This quota can't be changed.</p>
+ *                <p>There is a quota of five requests per second per log stream. Additional requests
+ *           are throttled. This quota can't be changed.</p>
  *             </li>
  *          </ul>
- *          <p>If a call to <code>PutLogEvents</code> returns "UnrecognizedClientException" the most likely cause is an invalid Amazon Web Services access key ID or secret key. </p>
+ *          <p>If a call to <code>PutLogEvents</code> returns "UnrecognizedClientException" the most
+ *       likely cause is a non-valid Amazon Web Services access key ID or secret key. </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutMetricFilterCommand.d.ts

@@ -8,8 +8,8 @@ export interface PutMetricFilterCommandInput extends PutMetricFilterRequest {
 export interface PutMetricFilterCommandOutput extends __MetadataBearer {
 }
 /**
- * <p>Creates or updates a metric filter and associates it with the specified log group.
- *       Metric filters allow you to configure rules to extract metric data from log events ingested
+ * <p>Creates or updates a metric filter and associates it with the specified log group. With
+ *       metric filters, you can configure rules to extract metric data from log events ingested
  *       through <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html">PutLogEvents</a>.</p>
  *          <p>The maximum number of metric filters that can be associated with a log group is
  *       100.</p>
@@ -22,9 +22,9 @@ export interface PutMetricFilterCommandOutput extends __MetadataBearer {
  *       found for
  *       a dimension is treated as a separate metric and accrues charges as a separate custom metric.
  *     </p>
- *             <p>To help prevent accidental high charges, Amazon disables a metric filter
- *         if it generates 1000 different name/value pairs for the dimensions that you
- *         have specified within a certain amount of time.</p>
+ *             <p>CloudWatch Logs disables a metric filter if it generates 1,000 different name/value pairs for
+ *         your specified dimensions within a certain amount of time. This helps to prevent accidental
+ *         high charges.</p>
  *             <p>You can also set up a billing alarm to alert you if your charges are higher than
  *         expected. For more information,
  *         see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html">

package/dist-types/commands/PutQueryDefinitionCommand.d.ts

@@ -11,13 +11,13 @@ export interface PutQueryDefinitionCommandOutput extends PutQueryDefinitionRespo
  * <p>Creates or updates a query definition for CloudWatch Logs Insights. For
  *       more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html">Analyzing Log Data with CloudWatch Logs Insights</a>.</p>
  *
- *          <p>To update a query definition, specify its
- *         <code>queryDefinitionId</code> in your request. The values of <code>name</code>, <code>queryString</code>,
- *       and <code>logGroupNames</code> are changed to the values that you specify in your update
- *       operation. No current values are retained from the current query definition. For example, if
- *       you update a current query definition that includes log groups, and you don't specify the
- *         <code>logGroupNames</code> parameter in your update operation, the query definition changes
- *       to contain no log groups.</p>
+ *          <p>To update a query definition, specify its <code>queryDefinitionId</code> in your request.
+ *       The values of <code>name</code>, <code>queryString</code>, and <code>logGroupNames</code> are
+ *       changed to the values that you specify in your update operation. No current values are
+ *       retained from the current query definition. For example, imagine updating a current query
+ *       definition that includes log groups. If you don't specify the <code>logGroupNames</code>
+ *       parameter in your update operation, the query definition changes to contain no log
+ *       groups.</p>
  *          <p>You must have the <code>logs:PutQueryDefinition</code> permission to be able to perform
  *     this operation.</p>
  * @example