@aws-sdk/client-cloudwatch-logs 3.454.0 → 3.460.0

package/dist-types/models/models_0.d.ts

@@ -71,6 +71,264 @@ export interface AccountPolicy {
      */
     accountId?: string;
 }
+/**
+ * @public
+ * <p>A tructures that contains information about one pattern token related to
+ *        an anomaly.</p>
+ *          <p>For more information about patterns and tokens, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateLogAnomalyDetector.html">CreateLogAnomalyDetector</a>.
+ *      </p>
+ */
+export interface PatternToken {
+    /**
+     * @public
+     * <p>For a dynamic token, this indicates where in the pattern that this token appears, related
+     *       to other dynamic tokens. The dynamic token that appears first has a value of <code>1</code>, the
+     *       one that appears second is <code>2</code>, and so on.</p>
+     */
+    dynamicTokenPosition?: number;
+    /**
+     * @public
+     * <p>Specifies whether this is a dynamic token.</p>
+     */
+    isDynamic?: boolean;
+    /**
+     * @public
+     * <p>The string represented by this token. If this is a dynamic token, the
+     *       value will be <code><*></code>
+     *          </p>
+     */
+    tokenString?: string;
+    /**
+     * @public
+     * <p>Contains the values found for a dynamic token, and the number of times each value was found.</p>
+     */
+    enumerations?: Record<string, number>;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const State: {
+    readonly Active: "Active";
+    readonly Baseline: "Baseline";
+    readonly Suppressed: "Suppressed";
+};
+/**
+ * @public
+ */
+export type State = (typeof State)[keyof typeof State];
+/**
+ * @public
+ * <p>This structure represents one anomaly that has been found by a logs anomaly detector.</p>
+ *          <p>For more information about patterns and anomalies, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateLogAnomalyDetector.html">CreateLogAnomalyDetector</a>.
+ *      </p>
+ */
+export interface Anomaly {
+    /**
+     * @public
+     * <p>The unique ID that CloudWatch Logs assigned to this anomaly.</p>
+     */
+    anomalyId: string | undefined;
+    /**
+     * @public
+     * <p>The ID of the pattern used to help identify this anomaly.</p>
+     */
+    patternId: string | undefined;
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector that identified this anomaly.</p>
+     */
+    anomalyDetectorArn: string | undefined;
+    /**
+     * @public
+     * <p>The pattern used to help identify this anomaly, in string format.</p>
+     */
+    patternString: string | undefined;
+    /**
+     * @public
+     * <p>The pattern used to help identify this anomaly, in regular expression format.</p>
+     */
+    patternRegex?: string;
+    /**
+     * @public
+     * <p>The priority level of this anomaly, as determined by CloudWatch Logs. Priority is computed based on log
+     *         severity labels such as <code>FATAL</code> and <code>ERROR</code> and the amount of deviation from the baseline.
+     *         Possible values are
+     *         <code>HIGH</code>, <code>MEDIUM</code>, and <code>LOW</code>.</p>
+     */
+    priority?: string;
+    /**
+     * @public
+     * <p>The date and time when the anomaly detector first saw this anomaly.
+     *         It is specified as epoch time, which is the number of seconds
+     *           since <code>January 1, 1970, 00:00:00 UTC</code>.</p>
+     */
+    firstSeen: number | undefined;
+    /**
+     * @public
+     * <p>The date and time when the anomaly detector most recently saw this anomaly.
+     *        It is specified as epoch time, which is the number of seconds
+     *        since <code>January 1, 1970, 00:00:00 UTC</code>.</p>
+     */
+    lastSeen: number | undefined;
+    /**
+     * @public
+     * <p>A human-readable description of the anomaly. This description is generated by
+     *         CloudWatch Logs.</p>
+     */
+    description: string | undefined;
+    /**
+     * @public
+     * <p>Specifies whether this anomaly is still ongoing.</p>
+     */
+    active: boolean | undefined;
+    /**
+     * @public
+     * <p>Indicates the current state of this anomaly. If it is still being treated as an anomaly, the value
+     *         is <code>Active</code>. If you have suppressed this anomaly by using the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateAnomaly.html">UpdateAnomaly</a> operation,
+     *        the value is <code>Suppressed</code>. If this behavior is now considered to be normal, the value
+     *       is <code>Baseline</code>.</p>
+     */
+    state: State | undefined;
+    /**
+     * @public
+     * <p>A map showing times when the anomaly detector ran, and the number of occurrences of this anomaly that
+     *         were detected at each of those runs. The times are specified in epoch time, which is the number of seconds
+     *         since <code>January 1, 1970, 00:00:00 UTC</code>.</p>
+     */
+    histogram: Record<string, number> | undefined;
+    /**
+     * @public
+     * <p>An array of sample log event messages that are considered to be part of this anomaly.</p>
+     */
+    logSamples: string[] | undefined;
+    /**
+     * @public
+     * <p>An array of structures where each structure contains information about one token that makes up the pattern.</p>
+     */
+    patternTokens: PatternToken[] | undefined;
+    /**
+     * @public
+     * <p>An array of ARNS of the log groups that contained log events considered to be part of this anomaly.</p>
+     */
+    logGroupArnList: string[] | undefined;
+    /**
+     * @public
+     * <p>Indicates whether this anomaly is currently suppressed. To suppress an anomaly,
+     *         use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateAnomaly.html">UpdateAnomaly</a>.</p>
+     */
+    suppressed?: boolean;
+    /**
+     * @public
+     * <p>If the anomaly is suppressed, this indicates when it was suppressed.</p>
+     */
+    suppressedDate?: number;
+    /**
+     * @public
+     * <p>If the anomaly is suppressed, this indicates when the suppression will end. If this value is <code>0</code>,
+     *      the anomaly was suppressed with no expiration, with the <code>INFINITE</code> value.</p>
+     */
+    suppressedUntil?: number;
+    /**
+     * @public
+     * <p>If this anomaly is suppressed, this field is <code>true</code> if the suppression is because the
+     *       pattern is suppressed. If <code>false</code>, then only this particular anomaly is suppressed.</p>
+     */
+    isPatternLevelSuppression?: boolean;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const AnomalyDetectorStatus: {
+    readonly ANALYZING: "ANALYZING";
+    readonly DELETED: "DELETED";
+    readonly FAILED: "FAILED";
+    readonly INITIALIZING: "INITIALIZING";
+    readonly PAUSED: "PAUSED";
+    readonly TRAINING: "TRAINING";
+};
+/**
+ * @public
+ */
+export type AnomalyDetectorStatus = (typeof AnomalyDetectorStatus)[keyof typeof AnomalyDetectorStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const EvaluationFrequency: {
+    readonly FIFTEEN_MIN: "FIFTEEN_MIN";
+    readonly FIVE_MIN: "FIVE_MIN";
+    readonly ONE_HOUR: "ONE_HOUR";
+    readonly ONE_MIN: "ONE_MIN";
+    readonly TEN_MIN: "TEN_MIN";
+    readonly THIRTY_MIN: "THIRTY_MIN";
+};
+/**
+ * @public
+ */
+export type EvaluationFrequency = (typeof EvaluationFrequency)[keyof typeof EvaluationFrequency];
+/**
+ * @public
+ * <p>Contains information about one anomaly detector in the account.</p>
+ */
+export interface AnomalyDetector {
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector.</p>
+     */
+    anomalyDetectorArn?: string;
+    /**
+     * @public
+     * <p>The name of the anomaly detector.</p>
+     */
+    detectorName?: string;
+    /**
+     * @public
+     * <p>A list of the ARNs of the log groups that this anomaly detector watches.</p>
+     */
+    logGroupArnList?: string[];
+    /**
+     * @public
+     * <p>Specifies how often the anomaly detector runs and look for anomalies.</p>
+     */
+    evaluationFrequency?: EvaluationFrequency;
+    /**
+     * @public
+     * <p>A symbolic description of how CloudWatch Logs should interpret the data in each log
+     *       event. For example, a log event can contain timestamps, IP addresses, strings, and so on. You
+     *       use the filter pattern to specify what to look for in the log event message.</p>
+     */
+    filterPattern?: string;
+    /**
+     * @public
+     * <p>Specifies the current status of the anomaly detector. To pause an anomaly detector, use
+     *        the <code>enabled</code> parameter in the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateLogAnomalyDetector.html">UpdateLogAnomalyDetector</a>
+     *        operation.</p>
+     */
+    anomalyDetectorStatus?: AnomalyDetectorStatus;
+    /**
+     * @public
+     * <p>The ID of the KMS key assigned to this anomaly detector, if any.</p>
+     */
+    kmsKeyId?: string;
+    /**
+     * @public
+     * <p>The date and time when this anomaly detector was created.</p>
+     */
+    creationTimeStamp?: number;
+    /**
+     * @public
+     * <p>The date and time when this anomaly detector was most recently modified.</p>
+     */
+    lastModifiedTimeStamp?: number;
+    /**
+     * @public
+     * <p>The number of days used as the life cycle of anomalies. After this time, anomalies are automatically baselined
+     *        and the anomaly detector model will treat new occurrences of similar event as normal. </p>
+     */
+    anomalyVisibilityTime?: number;
+}
 /**
  * @public
  */
@@ -405,13 +663,93 @@ export declare class ResourceAlreadyExistsException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ResourceAlreadyExistsException, __BaseException>);
 }
+/**
+ * @public
+ */
+export interface CreateLogAnomalyDetectorRequest {
+    /**
+     * @public
+     * <p>An array containing the ARNs of the log groups that this anomaly detector will watch. You must specify
+     *       at least one ARN.</p>
+     */
+    logGroupArnList: string[] | undefined;
+    /**
+     * @public
+     * <p>A name for this anomaly detector.</p>
+     */
+    detectorName?: string;
+    /**
+     * @public
+     * <p>Specifies how often the anomaly detector is to run and look for anomalies. Set this value
+     *       according to the frequency that the log group receives new logs. For example, if the log group
+     *       receives new log events every 10 minutes, then 15 minutes might be a good setting for
+     *         <code>evaluationFrequency</code> .</p>
+     */
+    evaluationFrequency?: EvaluationFrequency;
+    /**
+     * @public
+     * <p>You can use this parameter to limit the anomaly detection model to examine only log events
+     *       that match the pattern you specify here. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html">Filter and Pattern Syntax</a>.</p>
+     */
+    filterPattern?: string;
+    /**
+     * @public
+     * <p>Optionally assigns a KMS key to secure this anomaly detector and its findings. If a key is
+     *        assigned, the anomalies found and the model used by this detector are encrypted at rest with the key. If
+     *        a key is assigned to an anomaly detector, a user must have permissions for both this key and for the
+     *        anomaly detector to retrieve information about the anomalies that it finds.</p>
+     *          <p>For more information about using a KMS key and to see the required IAM
+     *        policy, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogsAnomalyDetection-KMS.html">Use a KMS key with an anomaly detector</a>.</p>
+     */
+    kmsKeyId?: string;
+    /**
+     * @public
+     * <p>The number of days to have visibility on an anomaly. After this time period has elapsed for an anomaly,
+     *        it will be automatically baselined and the anomaly detector will treat new occurrences of a similar anomaly as
+     *        normal. Therefore,
+     *        if you do not correct the cause of an
+     *        anomaly during the time period specified in <code>anomalyVisibilityTime</code>, it will be considered normal
+     *        going forward and will not be detected as an anomaly.</p>
+     */
+    anomalyVisibilityTime?: number;
+    /**
+     * @public
+     * <p>An optional list of key-value pairs to associate with the resource.</p>
+     *          <p>For more information about tagging, see
+     *        <a href="https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html">Tagging Amazon Web Services resources</a>
+     *          </p>
+     */
+    tags?: Record<string, string>;
+}
+/**
+ * @public
+ */
+export interface CreateLogAnomalyDetectorResponse {
+    /**
+     * @public
+     * <p>The ARN of the log anomaly detector that you just created.</p>
+     */
+    anomalyDetectorArn?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const LogGroupClass: {
+    readonly INFREQUENT_ACCESS: "INFREQUENT_ACCESS";
+    readonly STANDARD: "STANDARD";
+};
+/**
+ * @public
+ */
+export type LogGroupClass = (typeof LogGroupClass)[keyof typeof LogGroupClass];
 /**
  * @public
  */
 export interface CreateLogGroupRequest {
     /**
      * @public
-     * <p>The name of the log group.</p>
+     * <p>A name for the log group.</p>
      */
     logGroupName: string | undefined;
     /**
@@ -433,6 +771,24 @@ export interface CreateLogGroupRequest {
      *       <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Controlling access to Amazon Web Services resources using tags</a>.</p>
      */
     tags?: Record<string, string>;
+    /**
+     * @public
+     * <p>Use this parameter to specify the log group class for this log group. There are two classes:</p>
+     *          <ul>
+     *             <li>
+     *                <p>The <code>Standard</code> log class supports all CloudWatch Logs features.</p>
+     *             </li>
+     *             <li>
+     *                <p>The <code>Infrequent Access</code> log class supports a subset of CloudWatch Logs features
+     *         and incurs lower costs.</p>
+     *             </li>
+     *          </ul>
+     *          <p>If you omit this parameter, the default of <code>STANDARD</code> is used.</p>
+     *          <p>For details about the features supported by each class, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html">Log classes</a>
+     *          </p>
+     */
+    logGroupClass?: LogGroupClass;
 }
 /**
  * @public
@@ -561,6 +917,18 @@ export interface DeleteDestinationRequest {
      */
     destinationName: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DeleteLogAnomalyDetectorRequest {
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector to delete. You can find the ARNs of log anomaly detectors
+     *         in your account by using the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListLogAnomalyDetectors.html">ListLogAnomalyDetectors</a>
+     *       operation.</p>
+     */
+    anomalyDetectorArn: string | undefined;
+}
 /**
  * @public
  */
@@ -689,7 +1057,7 @@ export type OutputFormat = (typeof OutputFormat)[keyof typeof OutputFormat];
  * @public
  * <p>This structure contains information about one <i>delivery destination</i> in your account.
  *      A delivery destination is an Amazon Web Services resource that represents an
- *      shared id="AWS"/> service that logs can be sent to. CloudWatch Logs, Amazon S3, are supported as Kinesis Data Firehose delivery destinations.</p>
+ *      Amazon Web Services service that logs can be sent to. CloudWatch Logs, Amazon S3, are supported as Kinesis Data Firehose delivery destinations.</p>
  *          <p>To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:</p>
  *          <ul>
  *             <li>
@@ -755,7 +1123,7 @@ export interface DeliveryDestination {
  *        Amazon Web Services destination. The destination can be CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.</p>
  *          <p>Only some Amazon Web Services services support being configured as a delivery source. These services are listed
  *        as <b>Supported [V2 Permissions]</b> in the table at
- *        <a href="https://docs.aws.amazon.com/     AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-vended-logs-permissions">Enabling
+ *        <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html">Enabling
  *          logging from Amazon Web Services services.</a>
  *          </p>
  *          <p>To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:</p>
@@ -1226,6 +1594,23 @@ export interface DescribeLogGroupsRequest {
      *       and all log groups in all source accounts that are linked to the monitoring account. </p>
      */
     includeLinkedAccounts?: boolean;
+    /**
+     * @public
+     * <p>Specifies the log group class for this log group. There are two classes:</p>
+     *          <ul>
+     *             <li>
+     *                <p>The <code>Standard</code> log class supports all CloudWatch Logs features.</p>
+     *             </li>
+     *             <li>
+     *                <p>The <code>Infrequent Access</code> log class supports a subset of CloudWatch Logs features
+     *         and incurs lower costs.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For details about the features supported by each class, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html">Log classes</a>
+     *          </p>
+     */
+    logGroupClass?: LogGroupClass;
 }
 /**
  * @public
@@ -1294,6 +1679,23 @@ export interface LogGroup {
      *     settings.</p>
      */
     inheritedProperties?: InheritedProperty[];
+    /**
+     * @public
+     * <p>This specifies the log group class for this log group. There are two classes:</p>
+     *          <ul>
+     *             <li>
+     *                <p>The <code>Standard</code> log class supports all CloudWatch Logs features.</p>
+     *             </li>
+     *             <li>
+     *                <p>The <code>Infrequent Access</code> log class supports a subset of CloudWatch Logs features
+     *         and incurs lower costs.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For details about the features supported by each class, see
+     *       <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html">Log classes</a>
+     *          </p>
+     */
+    logGroupClass?: LogGroupClass;
 }
 /**
  * @public
@@ -2289,6 +2691,77 @@ export interface GetDeliverySourceResponse {
      */
     deliverySource?: DeliverySource;
 }
+/**
+ * @public
+ */
+export interface GetLogAnomalyDetectorRequest {
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector to retrieve information about. You can find the ARNs of log anomaly detectors
+     *        in your account by using the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListLogAnomalyDetectors.html">ListLogAnomalyDetectors</a>
+     *        operation.</p>
+     */
+    anomalyDetectorArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetLogAnomalyDetectorResponse {
+    /**
+     * @public
+     * <p>The name of the log anomaly detector</p>
+     */
+    detectorName?: string;
+    /**
+     * @public
+     * <p>An array of structures, where each structure contains the ARN of a log group
+     *       associated with this anomaly detector.</p>
+     */
+    logGroupArnList?: string[];
+    /**
+     * @public
+     * <p>Specifies how often the anomaly detector runs and look for anomalies. Set this value
+     *        according to the frequency that the log group receives new logs. For example, if the log group
+     *        receives new log events every 10 minutes, then setting <code>evaluationFrequency</code> to
+     *        <code>FIFTEEN_MIN</code> might be appropriate.</p>
+     */
+    evaluationFrequency?: EvaluationFrequency;
+    /**
+     * @public
+     * <p>A symbolic description of how CloudWatch Logs should interpret the data in each log
+     *       event. For example, a log event can contain timestamps, IP addresses, strings, and so on. You
+     *       use the filter pattern to specify what to look for in the log event message.</p>
+     */
+    filterPattern?: string;
+    /**
+     * @public
+     * <p>Specifies whether the anomaly detector is currently active. To change its status, use
+     *         the <code>enabled</code> parameter in the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateLogAnomalyDetector.html">UpdateLogAnomalyDetector</a>
+     *       operation.</p>
+     */
+    anomalyDetectorStatus?: AnomalyDetectorStatus;
+    /**
+     * @public
+     * <p>The ID of the KMS key assigned to this anomaly detector, if any.</p>
+     */
+    kmsKeyId?: string;
+    /**
+     * @public
+     * <p>The date and time when this anomaly detector was created.</p>
+     */
+    creationTimeStamp?: number;
+    /**
+     * @public
+     * <p>The date and time when this anomaly detector was most recently modified.</p>
+     */
+    lastModifiedTimeStamp?: number;
+    /**
+     * @public
+     * <p>The number of days used as the life cycle of anomalies. After this time, anomalies are automatically baselined
+     *        and the anomaly detector model will treat new occurrences of similar event as normal. </p>
+     */
+    anomalyVisibilityTime?: number;
+}
 /**
  * @public
  */
@@ -2635,6 +3108,99 @@ export declare class InvalidSequenceTokenException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<InvalidSequenceTokenException, __BaseException>);
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const SuppressionState: {
+    readonly SUPPRESSED: "SUPPRESSED";
+    readonly UNSUPPRESSED: "UNSUPPRESSED";
+};
+/**
+ * @public
+ */
+export type SuppressionState = (typeof SuppressionState)[keyof typeof SuppressionState];
+/**
+ * @public
+ */
+export interface ListAnomaliesRequest {
+    /**
+     * @public
+     * <p>Use this to optionally limit the results to only the anomalies found by a certain
+     *       anomaly detector.</p>
+     */
+    anomalyDetectorArn?: string;
+    /**
+     * @public
+     * <p>You can specify this parameter if you want to the operation to return only anomalies that
+     *       are currently either suppressed or unsuppressed.</p>
+     */
+    suppressionState?: SuppressionState;
+    /**
+     * @public
+     * <p>The maximum number of items to return. If you don't specify a value, the default maximum value of
+     *        50 items is used.</p>
+     */
+    limit?: number;
+    /**
+     * @public
+     * <p>The token for the next set of items to return. The token expires after 24 hours.</p>
+     */
+    nextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListAnomaliesResponse {
+    /**
+     * @public
+     * <p>An array of structures, where each structure contains information about one anomaly that a log
+     *       anomaly detector has found.</p>
+     */
+    anomalies?: Anomaly[];
+    /**
+     * @public
+     * <p>The token for the next set of items to return. The token expires after 24 hours.</p>
+     */
+    nextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListLogAnomalyDetectorsRequest {
+    /**
+     * @public
+     * <p>Use this to optionally filter the results to only include anomaly detectors that are associated with the
+     *       specified log group.</p>
+     */
+    filterLogGroupArn?: string;
+    /**
+     * @public
+     * <p>The maximum number of items to return. If you don't specify a value, the default maximum value of
+     *        50 items is used.</p>
+     */
+    limit?: number;
+    /**
+     * @public
+     * <p>The token for the next set of items to return. The token expires after 24 hours.</p>
+     */
+    nextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListLogAnomalyDetectorsResponse {
+    /**
+     * @public
+     * <p>An array of structures, where each structure in the array contains information about one anomaly detector.</p>
+     */
+    anomalyDetectors?: AnomalyDetector[];
+    /**
+     * @public
+     * <p>The token for the next set of items to return. The token expires after 24 hours.</p>
+     */
+    nextToken?: string;
+}
 /**
  * @public
  */
@@ -3149,7 +3715,9 @@ export interface PutQueryDefinitionRequest {
     queryString: string | undefined;
     /**
      * @public
-     * <p>Used as an idempotency token, to avoid returning an exception if the service receives the same request twice because of a network
+     * <p>Used as an idempotency token, to avoid returning an exception if the service receives the same
+     *       request twice because of a network
+     *
      *     error.</p>
      */
     clientToken?: string;
@@ -3598,3 +4166,117 @@ export interface UntagResourceRequest {
      */
     tagKeys: string[] | undefined;
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const SuppressionUnit: {
+    readonly HOURS: "HOURS";
+    readonly MINUTES: "MINUTES";
+    readonly SECONDS: "SECONDS";
+};
+/**
+ * @public
+ */
+export type SuppressionUnit = (typeof SuppressionUnit)[keyof typeof SuppressionUnit];
+/**
+ * @public
+ * <p>If you are suppressing an anomaly temporariliy, this structure defines how long the suppression period
+ *       is to be.</p>
+ */
+export interface SuppressionPeriod {
+    /**
+     * @public
+     * <p>Specifies the number of seconds, minutes or hours to suppress this anomaly. There is no maximum.</p>
+     */
+    value?: number;
+    /**
+     * @public
+     * <p>Specifies whether the value of <code>value</code> is in seconds, minutes, or hours.</p>
+     */
+    suppressionUnit?: SuppressionUnit;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const SuppressionType: {
+    readonly INFINITE: "INFINITE";
+    readonly LIMITED: "LIMITED";
+};
+/**
+ * @public
+ */
+export type SuppressionType = (typeof SuppressionType)[keyof typeof SuppressionType];
+/**
+ * @public
+ */
+export interface UpdateAnomalyRequest {
+    /**
+     * @public
+     * <p>If you are suppressing or unsuppressing an anomaly, specify its unique ID here. You can find anomaly IDs by
+     *         using the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListAnomalies.html">ListAnomalies</a> operation.</p>
+     */
+    anomalyId?: string;
+    /**
+     * @public
+     * <p>If you are suppressing or unsuppressing an pattern, specify its unique ID here. You can find pattern IDs by
+     *        using the <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListAnomalies.html">ListAnomalies</a> operation.</p>
+     */
+    patternId?: string;
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector that this operation is to act on.</p>
+     */
+    anomalyDetectorArn: string | undefined;
+    /**
+     * @public
+     * <p>Use this to specify whether the suppression to be temporary or infinite. If you specify <code>LIMITED</code>,
+     *         you must also specify a <code>suppressionPeriod</code>. If you specify <code>INFINITE</code>,
+     *         any value for <code>suppressionPeriod</code> is ignored. </p>
+     */
+    suppressionType?: SuppressionType;
+    /**
+     * @public
+     * <p>If you are temporarily suppressing an anomaly or pattern, use this structure to specify
+     *       how long the suppression is to last.</p>
+     */
+    suppressionPeriod?: SuppressionPeriod;
+}
+/**
+ * @public
+ */
+export interface UpdateLogAnomalyDetectorRequest {
+    /**
+     * @public
+     * <p>The ARN of the anomaly detector that you want to update.</p>
+     */
+    anomalyDetectorArn: string | undefined;
+    /**
+     * @public
+     * <p>Specifies how often the anomaly detector runs and look for anomalies. Set this value
+     *        according to the frequency that the log group receives new logs. For example, if the log group
+     *        receives new log events every 10 minutes, then setting <code>evaluationFrequency</code> to
+     *        <code>FIFTEEN_MIN</code> might be appropriate.</p>
+     */
+    evaluationFrequency?: EvaluationFrequency;
+    /**
+     * @public
+     * <p>A symbolic description of how CloudWatch Logs should interpret the data in each log
+     *       event. For example, a log event can contain timestamps, IP addresses, strings, and so on. You
+     *       use the filter pattern to specify what to look for in the log event message.</p>
+     */
+    filterPattern?: string;
+    /**
+     * @public
+     * <p>The number of days to use as the life cycle of anomalies. After this time, anomalies are automatically baselined
+     *        and the anomaly detector model will treat new occurrences of similar event as normal. Therefore, if you do not correct the cause of an
+     *        anomaly during this time, it will be considered normal going forward and will not be detected.</p>
+     */
+    anomalyVisibilityTime?: number;
+    /**
+     * @public
+     * <p>Use this parameter to pause or restart the anomaly detector. </p>
+     */
+    enabled: boolean | undefined;
+}