@aws-sdk/client-cloudwatch-logs 3.848.0 → 3.855.0

package/dist-types/commands/GetLogObjectCommand.d.ts

@@ -0,0 +1,98 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import { CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CloudWatchLogsClient";
+import { GetLogObjectRequest, GetLogObjectResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetLogObjectCommand}.
+ */
+export interface GetLogObjectCommandInput extends GetLogObjectRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link GetLogObjectCommand}.
+ */
+export interface GetLogObjectCommandOutput extends GetLogObjectResponse, __MetadataBearer {
+}
+declare const GetLogObjectCommand_base: {
+    new (input: GetLogObjectCommandInput): import("@smithy/smithy-client").CommandImpl<GetLogObjectCommandInput, GetLogObjectCommandOutput, CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: GetLogObjectCommandInput): import("@smithy/smithy-client").CommandImpl<GetLogObjectCommandInput, GetLogObjectCommandOutput, CloudWatchLogsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Retrieves a large logging object (LLO) and streams it back. This API is used to fetch the content of large portions of log events that have been ingested through the PutOpenTelemetryLogs API.
+ *       When log events contain fields that would cause the total event size to exceed 1MB, CloudWatch Logs automatically processes up to 10 fields, starting with the largest fields. Each field is truncated as needed to keep
+ *       the total event size as close to 1MB as possible. The excess portions are stored as Large Log Objects (LLOs) and these fields are processed separately and LLO reference system fields (in the format <code>@ptr.$[path.to.field]</code>) are
+ *       added. The path in the reference field reflects the original JSON structure where the large field was located. For example, this could be <code>@ptr.$['input']['message']</code>, <code>@ptr.$['AAA']['BBB']['CCC']['DDD']</code>, <code>@ptr.$['AAA']</code>, or any other path matching your log structure.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { CloudWatchLogsClient, GetLogObjectCommand } from "@aws-sdk/client-cloudwatch-logs"; // ES Modules import
+ * // const { CloudWatchLogsClient, GetLogObjectCommand } = require("@aws-sdk/client-cloudwatch-logs"); // CommonJS import
+ * const client = new CloudWatchLogsClient(config);
+ * const input = { // GetLogObjectRequest
+ *   unmask: true || false,
+ *   logObjectPointer: "STRING_VALUE", // required
+ * };
+ * const command = new GetLogObjectCommand(input);
+ * const response = await client.send(command);
+ * // { // GetLogObjectResponse
+ * //   fieldStream: { // GetLogObjectResponseStream Union: only one key present
+ * //     fields: { // FieldsData
+ * //       data: new Uint8Array(),
+ * //     },
+ * //     InternalStreamingException: { // InternalStreamingException
+ * //       message: "STRING_VALUE",
+ * //     },
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param GetLogObjectCommandInput - {@link GetLogObjectCommandInput}
+ * @returns {@link GetLogObjectCommandOutput}
+ * @see {@link GetLogObjectCommandInput} for command's `input` shape.
+ * @see {@link GetLogObjectCommandOutput} for command's `response` shape.
+ * @see {@link CloudWatchLogsClientResolvedConfig | config} for CloudWatchLogsClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You don't have sufficient permissions to perform this action.</p>
+ *
+ * @throws {@link InvalidOperationException} (client fault)
+ *  <p>The operation is not valid on the specified resource.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>A parameter is specified incorrectly.</p>
+ *
+ * @throws {@link LimitExceededException} (client fault)
+ *  <p>You have reached the maximum number of resources that can be created.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The specified resource does not exist.</p>
+ *
+ * @throws {@link CloudWatchLogsServiceException}
+ * <p>Base exception class for all service exceptions from CloudWatchLogs service.</p>
+ *
+ *
+ * @public
+ */
+export declare class GetLogObjectCommand extends GetLogObjectCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: GetLogObjectRequest;
+            output: GetLogObjectResponse;
+        };
+        sdk: {
+            input: GetLogObjectCommandInput;
+            output: GetLogObjectCommandOutput;
+        };
+    };
+}

package/dist-types/commands/PutAccountPolicyCommand.d.ts

@@ -27,8 +27,9 @@ declare const PutAccountPolicyCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Creates an account-level data protection policy, subscription filter policy, or field
- *       index policy that applies to all log groups or a subset of log groups in the account.</p>
+ * <p>Creates an account-level data protection policy, subscription filter policy, field index
+ *       policy, transformer policy, or metric extraction policy that applies to all log groups or a
+ *       subset of log groups in the account.</p>
  *          <p>To use this operation, you must be signed on with the correct permissions depending on the
  *       type of policy that you are creating.</p>
  *          <ul>
@@ -50,6 +51,11 @@ declare const PutAccountPolicyCommand_base: {
  *                <p>To create a field index policy, you must have the <code>logs:PutIndexPolicy</code> and
  *             <code>logs:PutAccountPolicy</code> permissions.</p>
  *             </li>
+ *             <li>
+ *                <p>To create a metric extraction policy, you must have the
+ *             <code>logs:PutMetricExtractionPolicy</code> and
+ *             <code>logs:PutAccountPolicy</code> permissions.</p>
+ *             </li>
  *          </ul>
  *          <p>
  *             <b>Data protection policy</b>
@@ -182,6 +188,57 @@ declare const PutAccountPolicyCommand_base: {
  *          <p>If you want to create a field index policy for a single log group, you can use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutIndexPolicy.html">PutIndexPolicy</a> instead of <code>PutAccountPolicy</code>. If you do so, that log
  *       group will use only that log-group level policy, and will ignore the account-level policy that
  *       you create with <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutAccountPolicy.html">PutAccountPolicy</a>.</p>
+ *          <p>
+ *             <b>Metric extraction policy</b>
+ *          </p>
+ *          <p>A metric extraction policy controls whether CloudWatch Metrics can be created through the
+ *       Embedded Metrics Format (EMF) for log groups in your account. By default, EMF metric creation
+ *       is enabled for all log groups. You can use metric extraction policies to disable EMF metric
+ *       creation for your entire account or specific log groups.</p>
+ *          <p>When a policy disables EMF metric creation for a log group, log events in the EMF format
+ *       are still ingested, but no CloudWatch Metrics are created from them.</p>
+ *          <important>
+ *             <p>Creating a policy disables metrics for AWS features that use EMF to create metrics, such
+ *         as CloudWatch Container Insights and CloudWatch Application Signals. To prevent turning off
+ *         those features by accident, we recommend that you exclude the underlying log-groups through a
+ *         selection-criteria such as <code>LogGroupNamePrefix NOT IN ["/aws/containerinsights",
+ *         "/aws/ecs/containerinsights", "/aws/application-signals/data"]</code>.</p>
+ *          </important>
+ *          <p>Each account can have either one account-level metric extraction policy that applies to
+ *       all log groups, or up to 5 policies that are each scoped to a subset of log groups with the
+ *       <code>selectionCriteria</code> parameter. The selection criteria supports filtering by <code>LogGroupName</code> and
+ *       <code>LogGroupNamePrefix</code> using the operators <code>IN</code> and <code>NOT IN</code>. You can specify up to 50 values in each
+ *       <code>IN</code> or <code>NOT IN</code> list.</p>
+ *          <p>The selection criteria can be specified in these formats:</p>
+ *          <p>
+ *             <code>LogGroupName IN ["log-group-1", "log-group-2"]</code>
+ *          </p>
+ *          <p>
+ *             <code>LogGroupNamePrefix NOT IN ["/aws/prefix1", "/aws/prefix2"]</code>
+ *          </p>
+ *          <p>If you have multiple account-level metric extraction policies with selection criteria, no
+ *       two of them can have overlapping criteria. For example, if you have one policy with selection
+ *       criteria <code>LogGroupNamePrefix IN ["my-log"]</code>, you can't have another metric extraction policy
+ *       with selection criteria <code>LogGroupNamePrefix IN ["/my-log-prod"]</code> or <code>LogGroupNamePrefix IN
+ *       ["/my-logging"]</code>, as the set of log groups matching these prefixes would be a subset of the log
+ *       groups matching the first policy's prefix, creating an overlap.</p>
+ *          <p>When using <code>NOT IN</code>, only one policy with this operator is allowed per account.</p>
+ *          <p>When combining policies with <code>IN</code> and <code>NOT IN</code> operators, the overlap check ensures that
+ *       policies don't have conflicting effects. Two policies with <code>IN</code> and <code>NOT IN</code> operators do not
+ *       overlap if and only if every value in the <code>IN </code>policy is completely contained within some value
+ *       in the <code>NOT IN</code> policy. For example:</p>
+ *          <ul>
+ *             <li>
+ *                <p>If you have a <code>NOT IN</code> policy for prefix <code>"/aws/lambda"</code>, you can create an <code>IN</code> policy for
+ *           the exact log group name <code>"/aws/lambda/function1"</code> because the set of log groups matching
+ *           <code>"/aws/lambda/function1"</code> is a subset of the log groups matching <code>"/aws/lambda"</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>If you have a <code>NOT IN</code> policy for prefix <code>"/aws/lambda"</code>, you cannot create an <code>IN</code> policy
+ *           for prefix <code>"/aws"</code> because the set of log groups matching <code>"/aws"</code> is not a subset of the log
+ *           groups matching <code>"/aws/lambda"</code>.</p>
+ *             </li>
+ *          </ul>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -191,7 +248,7 @@ declare const PutAccountPolicyCommand_base: {
  * const input = { // PutAccountPolicyRequest
  *   policyName: "STRING_VALUE", // required
  *   policyDocument: "STRING_VALUE", // required
- *   policyType: "DATA_PROTECTION_POLICY" || "SUBSCRIPTION_FILTER_POLICY" || "FIELD_INDEX_POLICY" || "TRANSFORMER_POLICY", // required
+ *   policyType: "DATA_PROTECTION_POLICY" || "SUBSCRIPTION_FILTER_POLICY" || "FIELD_INDEX_POLICY" || "TRANSFORMER_POLICY" || "METRIC_EXTRACTION_POLICY", // required
  *   scope: "ALL",
  *   selectionCriteria: "STRING_VALUE",
  * };
@@ -202,7 +259,7 @@ declare const PutAccountPolicyCommand_base: {
  * //     policyName: "STRING_VALUE",
  * //     policyDocument: "STRING_VALUE",
  * //     lastUpdatedTime: Number("long"),
- * //     policyType: "DATA_PROTECTION_POLICY" || "SUBSCRIPTION_FILTER_POLICY" || "FIELD_INDEX_POLICY" || "TRANSFORMER_POLICY",
+ * //     policyType: "DATA_PROTECTION_POLICY" || "SUBSCRIPTION_FILTER_POLICY" || "FIELD_INDEX_POLICY" || "TRANSFORMER_POLICY" || "METRIC_EXTRACTION_POLICY",
  * //     scope: "ALL",
  * //     selectionCriteria: "STRING_VALUE",
  * //     accountId: "STRING_VALUE",

package/dist-types/commands/UntagLogGroupCommand.d.ts

@@ -33,10 +33,9 @@ declare const UntagLogGroupCommand_base: {
  *          </important>
  *          <p>Removes the specified tags from the specified log group.</p>
  *          <p>To list the tags for a log group, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html">ListTagsForResource</a>. To add tags, use <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_TagResource.html">TagResource</a>.</p>
- *          <p>CloudWatch Logs doesn't support IAM policies that prevent users from assigning specified
- *       tags to log groups using the <code>aws:Resource/<i>key-name</i>
- *             </code> or
- *         <code>aws:TagKeys</code> condition keys. </p>
+ *          <p>When using IAM policies to control tag management for CloudWatch Logs log groups, the
+ *       condition keys <code>aws:Resource/key-name</code> and <code>aws:TagKeys</code> cannot be used to restrict which tags
+ *       users can assign. </p>
  *
  * @deprecated Please use the generic tagging API UntagResource
  * @example

package/dist-types/commands/index.d.ts

@@ -50,6 +50,7 @@ export * from "./GetIntegrationCommand";
 export * from "./GetLogAnomalyDetectorCommand";
 export * from "./GetLogEventsCommand";
 export * from "./GetLogGroupFieldsCommand";
+export * from "./GetLogObjectCommand";
 export * from "./GetLogRecordCommand";
 export * from "./GetQueryResultsCommand";
 export * from "./GetTransformerCommand";

package/dist-types/models/models_0.d.ts

@@ -19,6 +19,7 @@ export declare class AccessDeniedException extends __BaseException {
 export declare const PolicyType: {
     readonly DATA_PROTECTION_POLICY: "DATA_PROTECTION_POLICY";
     readonly FIELD_INDEX_POLICY: "FIELD_INDEX_POLICY";
+    readonly METRIC_EXTRACTION_POLICY: "METRIC_EXTRACTION_POLICY";
     readonly SUBSCRIPTION_FILTER_POLICY: "SUBSCRIPTION_FILTER_POLICY";
     readonly TRANSFORMER_POLICY: "TRANSFORMER_POLICY";
 };
@@ -2236,9 +2237,10 @@ export interface DescribeLogGroupsRequest {
     /**
      * <p>If you specify a string for this parameter, the operation returns only log groups that
      *       have names that match the string based on a case-sensitive substring search. For example, if
-     *       you specify <code>DataLogs</code>, log groups named <code>DataLogs</code>, <code>aws/DataLogs</code>, and
-     *         <code>GroupDataLogs</code> would match, but <code>datalogs</code>, <code>Data/log/s</code> and
-     *         <code>Groupdata</code> would not match.</p>
+     *       you specify <code>DataLogs</code>, log groups named <code>DataLogs</code>,
+     *         <code>aws/DataLogs</code>, and <code>GroupDataLogs</code> would match, but
+     *         <code>datalogs</code>, <code>Data/log/s</code> and <code>Groupdata</code> would not
+     *       match.</p>
      *          <p>If you specify <code>logGroupNamePattern</code> in your request, then only
      *         <code>arn</code>, <code>creationTime</code>, and <code>logGroupName</code> are included in
      *       the response. </p>
@@ -3308,6 +3310,17 @@ export declare const EventSource: {
  * @public
  */
 export type EventSource = (typeof EventSource)[keyof typeof EventSource];
+/**
+ * <p>A structure containing the extracted fields from a log event. These fields are extracted based on the log format and can be used for structured querying and analysis.</p>
+ * @public
+ */
+export interface FieldsData {
+    /**
+     * <p>The actual log data content returned in the streaming response. This contains the fields and values of the log event in a structured format that can be parsed and processed by the client.</p>
+     * @public
+     */
+    data?: Uint8Array | undefined;
+}
 /**
  * <p>Represents a matched event.</p>
  * @public
@@ -4247,6 +4260,87 @@ export interface GetLogGroupFieldsResponse {
      */
     logGroupFields?: LogGroupField[] | undefined;
 }
+/**
+ * <p>The parameters for the GetLogObject operation.</p>
+ * @public
+ */
+export interface GetLogObjectRequest {
+    /**
+     * <p>A boolean flag that indicates whether to unmask sensitive log data. When set to true, any masked or redacted data in the log object will be displayed in its original form. Default is false.</p>
+     * @public
+     */
+    unmask?: boolean | undefined;
+    /**
+     * <p>A pointer to the specific log object to retrieve. This is a required parameter that uniquely identifies the log object within CloudWatch Logs. The pointer is typically obtained from a previous query or filter operation.</p>
+     * @public
+     */
+    logObjectPointer: string | undefined;
+}
+/**
+ * <p>An internal error occurred during the streaming of log data. This exception is thrown when there's an issue with the internal streaming mechanism used by the GetLogObject operation.</p>
+ * @public
+ */
+export declare class InternalStreamingException extends __BaseException {
+    readonly name: "InternalStreamingException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InternalStreamingException, __BaseException>);
+}
+/**
+ * <p>A stream of structured log data returned by the GetLogObject operation. This stream contains log events with their associated metadata and extracted fields.</p>
+ * @public
+ */
+export type GetLogObjectResponseStream = GetLogObjectResponseStream.InternalStreamingExceptionMember | GetLogObjectResponseStream.FieldsMember | GetLogObjectResponseStream.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace GetLogObjectResponseStream {
+    /**
+     * <p>A structure containing the extracted fields from a log event. These fields are extracted based on the log format and can be used for structured querying and analysis.</p>
+     * @public
+     */
+    interface FieldsMember {
+        fields: FieldsData;
+        InternalStreamingException?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>An internal error occurred during the streaming of log data. This exception is thrown when there's an issue with the internal streaming mechanism used by the GetLogObject operation.</p>
+     * @public
+     */
+    interface InternalStreamingExceptionMember {
+        fields?: never;
+        InternalStreamingException: InternalStreamingException;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        fields?: never;
+        InternalStreamingException?: never;
+        $unknown: [string, any];
+    }
+    interface Visitor<T> {
+        fields: (value: FieldsData) => T;
+        InternalStreamingException: (value: InternalStreamingException) => T;
+        _: (name: string, value: any) => T;
+    }
+    const visit: <T>(value: GetLogObjectResponseStream, visitor: Visitor<T>) => T;
+}
+/**
+ * <p>The response from the GetLogObject operation.</p>
+ * @public
+ */
+export interface GetLogObjectResponse {
+    /**
+     * <p>A stream of structured log data returned by the GetLogObject operation. This stream contains log events with their associated metadata and extracted fields.</p>
+     * @public
+     */
+    fieldStream?: AsyncIterable<GetLogObjectResponseStream> | undefined;
+}
 /**
  * @public
  */
@@ -4663,19 +4757,21 @@ export declare const OCSFVersion: {
  */
 export type OCSFVersion = (typeof OCSFVersion)[keyof typeof OCSFVersion];
 /**
- * <p>This processor converts logs into <a href="https://ocsf.io">Open Cybersecurity Schema Framework (OCSF)</a> events.</p>
- *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF">
- *       parseToOSCF</a> in the <i>CloudWatch Logs User Guide</i>.</p>
+ * <p>This processor converts logs into <a href="https://ocsf.io">Open Cybersecurity Schema
+ *         Framework (OCSF)</a> events.</p>
+ *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF"> parseToOSCF</a> in the <i>CloudWatch Logs User Guide</i>.</p>
  * @public
  */
 export interface ParseToOCSF {
     /**
-     * <p>The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.</p>
+     * <p>The path to the field in the log event that you want to parse. If you omit this value, the
+     *       whole log message is parsed.</p>
      * @public
      */
     source?: string | undefined;
     /**
-     * <p>Specify the service or process that produces the log events that will be converted with this processor.</p>
+     * <p>Specify the service or process that produces the log events that will be converted with
+     *       this processor.</p>
      * @public
      */
     eventSource: EventSource | undefined;
@@ -5691,7 +5787,7 @@ export interface PutAccountPolicyRequest {
     /**
      * <p>Use this parameter to apply the new policy to a subset of log groups in the
      *       account.</p>
-     *          <p>Specifing <code>selectionCriteria</code> is valid only when you specify
+     *          <p>Specifying <code>selectionCriteria</code> is valid only when you specify
      *         <code>SUBSCRIPTION_FILTER_POLICY</code>, <code>FIELD_INDEX_POLICY</code> or
      *         <code>TRANSFORMER_POLICY</code>for <code>policyType</code>.</p>
      *          <p>If <code>policyType</code> is <code>SUBSCRIPTION_FILTER_POLICY</code>, the only supported
@@ -5930,7 +6026,8 @@ export interface PutDeliverySourceRequest {
      *           <code>ERROR_LOGS</code>.</p>
      *             </li>
      *             <li>
-     *                <p>For PCS, the valid values are <code>PCS_SCHEDULER_LOGS</code> and <code>PCS_JOBCOMP_LOGS</code>.</p>
+     *                <p>For PCS, the valid values are <code>PCS_SCHEDULER_LOGS</code> and
+     *             <code>PCS_JOBCOMP_LOGS</code>.</p>
      *             </li>
      *             <li>
      *                <p>For Amazon Q, the valid value is <code>EVENT_LOGS</code>.</p>
@@ -7249,6 +7346,14 @@ export interface UpdateLogAnomalyDetectorRequest {
      */
     enabled: boolean | undefined;
 }
+/**
+ * @internal
+ */
+export declare const GetLogObjectResponseStreamFilterSensitiveLog: (obj: GetLogObjectResponseStream) => any;
+/**
+ * @internal
+ */
+export declare const GetLogObjectResponseFilterSensitiveLog: (obj: GetLogObjectResponse) => any;
 /**
  * @internal
  */

package/dist-types/protocols/Aws_json1_1.d.ts

@@ -52,6 +52,7 @@ import { GetIntegrationCommandInput, GetIntegrationCommandOutput } from "../comm
 import { GetLogAnomalyDetectorCommandInput, GetLogAnomalyDetectorCommandOutput } from "../commands/GetLogAnomalyDetectorCommand";
 import { GetLogEventsCommandInput, GetLogEventsCommandOutput } from "../commands/GetLogEventsCommand";
 import { GetLogGroupFieldsCommandInput, GetLogGroupFieldsCommandOutput } from "../commands/GetLogGroupFieldsCommand";
+import { GetLogObjectCommandInput, GetLogObjectCommandOutput } from "../commands/GetLogObjectCommand";
 import { GetLogRecordCommandInput, GetLogRecordCommandOutput } from "../commands/GetLogRecordCommand";
 import { GetQueryResultsCommandInput, GetQueryResultsCommandOutput } from "../commands/GetQueryResultsCommand";
 import { GetTransformerCommandInput, GetTransformerCommandOutput } from "../commands/GetTransformerCommand";
@@ -298,6 +299,10 @@ export declare const se_GetLogEventsCommand: (input: GetLogEventsCommandInput, c
  * serializeAws_json1_1GetLogGroupFieldsCommand
  */
 export declare const se_GetLogGroupFieldsCommand: (input: GetLogGroupFieldsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+/**
+ * serializeAws_json1_1GetLogObjectCommand
+ */
+export declare const se_GetLogObjectCommand: (input: GetLogObjectCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 /**
  * serializeAws_json1_1GetLogRecordCommand
  */
@@ -658,6 +663,10 @@ export declare const de_GetLogEventsCommand: (output: __HttpResponse, context: _
  * deserializeAws_json1_1GetLogGroupFieldsCommand
  */
 export declare const de_GetLogGroupFieldsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetLogGroupFieldsCommandOutput>;
+/**
+ * deserializeAws_json1_1GetLogObjectCommand
+ */
+export declare const de_GetLogObjectCommand: (output: __HttpResponse, context: __SerdeContext & __EventStreamSerdeContext) => Promise<GetLogObjectCommandOutput>;
 /**
  * deserializeAws_json1_1GetLogRecordCommand
  */

package/dist-types/ts3.4/CloudWatchLogs.d.ts

@@ -208,6 +208,10 @@ import {
   GetLogGroupFieldsCommandInput,
   GetLogGroupFieldsCommandOutput,
 } from "./commands/GetLogGroupFieldsCommand";
+import {
+  GetLogObjectCommandInput,
+  GetLogObjectCommandOutput,
+} from "./commands/GetLogObjectCommand";
 import {
   GetLogRecordCommandInput,
   GetLogRecordCommandOutput,
@@ -1053,6 +1057,19 @@ export interface CloudWatchLogs {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: GetLogGroupFieldsCommandOutput) => void
   ): void;
+  getLogObject(
+    args: GetLogObjectCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetLogObjectCommandOutput>;
+  getLogObject(
+    args: GetLogObjectCommandInput,
+    cb: (err: any, data?: GetLogObjectCommandOutput) => void
+  ): void;
+  getLogObject(
+    args: GetLogObjectCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetLogObjectCommandOutput) => void
+  ): void;
   getLogRecord(
     args: GetLogRecordCommandInput,
     options?: __HttpHandlerOptions

package/dist-types/ts3.4/CloudWatchLogsClient.d.ts

@@ -258,6 +258,10 @@ import {
   GetLogGroupFieldsCommandInput,
   GetLogGroupFieldsCommandOutput,
 } from "./commands/GetLogGroupFieldsCommand";
+import {
+  GetLogObjectCommandInput,
+  GetLogObjectCommandOutput,
+} from "./commands/GetLogObjectCommand";
 import {
   GetLogRecordCommandInput,
   GetLogRecordCommandOutput,
@@ -470,6 +474,7 @@ export type ServiceInputTypes =
   | GetLogAnomalyDetectorCommandInput
   | GetLogEventsCommandInput
   | GetLogGroupFieldsCommandInput
+  | GetLogObjectCommandInput
   | GetLogRecordCommandInput
   | GetQueryResultsCommandInput
   | GetTransformerCommandInput
@@ -561,6 +566,7 @@ export type ServiceOutputTypes =
   | GetLogAnomalyDetectorCommandOutput
   | GetLogEventsCommandOutput
   | GetLogGroupFieldsCommandOutput
+  | GetLogObjectCommandOutput
   | GetLogRecordCommandOutput
   | GetQueryResultsCommandOutput
   | GetTransformerCommandOutput

package/dist-types/ts3.4/commands/GetLogObjectCommand.d.ts

@@ -0,0 +1,47 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import {
+  CloudWatchLogsClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../CloudWatchLogsClient";
+import { GetLogObjectRequest, GetLogObjectResponse } from "../models/models_0";
+export { __MetadataBearer };
+export { $Command };
+export interface GetLogObjectCommandInput extends GetLogObjectRequest {}
+export interface GetLogObjectCommandOutput
+  extends GetLogObjectResponse,
+    __MetadataBearer {}
+declare const GetLogObjectCommand_base: {
+  new (
+    input: GetLogObjectCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    GetLogObjectCommandInput,
+    GetLogObjectCommandOutput,
+    CloudWatchLogsClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  new (
+    input: GetLogObjectCommandInput
+  ): import("@smithy/smithy-client").CommandImpl<
+    GetLogObjectCommandInput,
+    GetLogObjectCommandOutput,
+    CloudWatchLogsClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >;
+  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+export declare class GetLogObjectCommand extends GetLogObjectCommand_base {
+  protected static __types: {
+    api: {
+      input: GetLogObjectRequest;
+      output: GetLogObjectResponse;
+    };
+    sdk: {
+      input: GetLogObjectCommandInput;
+      output: GetLogObjectCommandOutput;
+    };
+  };
+}

package/dist-types/ts3.4/commands/index.d.ts

@@ -50,6 +50,7 @@ export * from "./GetIntegrationCommand";
 export * from "./GetLogAnomalyDetectorCommand";
 export * from "./GetLogEventsCommand";
 export * from "./GetLogGroupFieldsCommand";
+export * from "./GetLogObjectCommand";
 export * from "./GetLogRecordCommand";
 export * from "./GetQueryResultsCommand";
 export * from "./GetTransformerCommand";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -10,6 +10,7 @@ export declare class AccessDeniedException extends __BaseException {
 export declare const PolicyType: {
   readonly DATA_PROTECTION_POLICY: "DATA_PROTECTION_POLICY";
   readonly FIELD_INDEX_POLICY: "FIELD_INDEX_POLICY";
+  readonly METRIC_EXTRACTION_POLICY: "METRIC_EXTRACTION_POLICY";
   readonly SUBSCRIPTION_FILTER_POLICY: "SUBSCRIPTION_FILTER_POLICY";
   readonly TRANSFORMER_POLICY: "TRANSFORMER_POLICY";
 };
@@ -805,6 +806,9 @@ export declare const EventSource: {
   readonly VPC_FLOW: "VPCFlow";
 };
 export type EventSource = (typeof EventSource)[keyof typeof EventSource];
+export interface FieldsData {
+  data?: Uint8Array | undefined;
+}
 export interface FilteredLogEvent {
   logStreamName?: string | undefined;
   timestamp?: number | undefined;
@@ -1017,6 +1021,47 @@ export interface LogGroupField {
 export interface GetLogGroupFieldsResponse {
   logGroupFields?: LogGroupField[] | undefined;
 }
+export interface GetLogObjectRequest {
+  unmask?: boolean | undefined;
+  logObjectPointer: string | undefined;
+}
+export declare class InternalStreamingException extends __BaseException {
+  readonly name: "InternalStreamingException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<InternalStreamingException, __BaseException>
+  );
+}
+export type GetLogObjectResponseStream =
+  | GetLogObjectResponseStream.InternalStreamingExceptionMember
+  | GetLogObjectResponseStream.FieldsMember
+  | GetLogObjectResponseStream.$UnknownMember;
+export declare namespace GetLogObjectResponseStream {
+  interface FieldsMember {
+    fields: FieldsData;
+    InternalStreamingException?: never;
+    $unknown?: never;
+  }
+  interface InternalStreamingExceptionMember {
+    fields?: never;
+    InternalStreamingException: InternalStreamingException;
+    $unknown?: never;
+  }
+  interface $UnknownMember {
+    fields?: never;
+    InternalStreamingException?: never;
+    $unknown: [string, any];
+  }
+  interface Visitor<T> {
+    fields: (value: FieldsData) => T;
+    InternalStreamingException: (value: InternalStreamingException) => T;
+    _: (name: string, value: any) => T;
+  }
+  const visit: <T>(value: GetLogObjectResponseStream, visitor: Visitor<T>) => T;
+}
+export interface GetLogObjectResponse {
+  fieldStream?: AsyncIterable<GetLogObjectResponseStream> | undefined;
+}
 export interface GetLogRecordRequest {
   logRecordPointer: string | undefined;
   unmask?: boolean | undefined;
@@ -1666,6 +1711,12 @@ export interface UpdateLogAnomalyDetectorRequest {
   anomalyVisibilityTime?: number | undefined;
   enabled: boolean | undefined;
 }
+export declare const GetLogObjectResponseStreamFilterSensitiveLog: (
+  obj: GetLogObjectResponseStream
+) => any;
+export declare const GetLogObjectResponseFilterSensitiveLog: (
+  obj: GetLogObjectResponse
+) => any;
 export declare const StartLiveTailResponseStreamFilterSensitiveLog: (
   obj: StartLiveTailResponseStream
 ) => any;