@mavogel/awscdk-rootmail 0.0.317 → 0.0.319

package/.claude/settings.local.json

@@ -0,0 +1,8 @@
+{
+  "permissions": {
+    "allow": [
+      "mcp__claude-context__index_codebase"
+    ],
+    "deny": []
+  }
+}

package/.jsii

@@ -3998,7 +3998,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/MV-Consulting/awscdk-rootmail",
-  "jsiiVersion": "5.7.20 (build 433aee4)",
+  "jsiiVersion": "5.7.21 (build e7af4b3)",
   "keywords": [
     "aws",
     "cdk",
@@ -4447,6 +4447,6 @@
       "symbolId": "src/ses-receive:SESReceiveProps"
     }
   },
-  "version": "0.0.317",
-  "fingerprint": "kvMQQ6qDMHesokuSIt8QfqGwlx7/zKoNYnlvAsrhjZY="
+  "version": "0.0.319",
+  "fingerprint": "WCHXkdxn0fYqqY3ntcl60PfdEcwQ5igpPtoNkxgLUQ4="
 }

package/CLAUDE.md

@@ -0,0 +1,154 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Repository Overview
+
+This repository contains `@mavogel/awscdk-rootmail`, an AWS CDK construct library that provides an opinionated way to secure root email addresses for AWS accounts. It implements a single email box solution for all root user emails across AWS organizations, based on the superwerker rootmail feature.
+
+## Core Architecture
+
+### Main Components
+
+- **Rootmail Construct** (`src/rootmail.ts`) - Main construct that orchestrates the entire solution
+- **SES Receive** (`src/ses-receive.ts`) - Handles incoming email processing through SES
+- **Hosted Zone DKIM** (`src/hosted-zone-dkim.ts`) - Manages DNS setup and DKIM configuration
+- **DNS Autowiring** (`src/rootmail-autowire-dns.ts`) - Automatically configures DNS records when parent hosted zone is in same account
+
+### Architecture Pattern
+
+The solution creates a subdomain (e.g., `aws.mycompany.com`) that receives all root emails. Key components:
+
+1. **Route53 Hosted Zone** - For the subdomain 
+2. **SES Receipt Rules** - To process incoming emails
+3. **S3 Bucket** - To store received emails
+4. **Lambda Functions** - For email processing and DNS propagation
+5. **SSM Parameters** - To store configuration values
+
+### Custom Resource Handlers
+
+The construct uses several custom resource handlers for orchestration:
+- `hosted-zone-dkim-propagation.*` - Waits for DNS propagation
+- `hosted-zone-dkim-verification-records.*` - Sets up DKIM verification
+- `rootmail-autowire-dns.*` - Auto-configures parent DNS records
+- `ses-receipt-ruleset-activation.*` - Activates SES receipt rules
+
+## Development Commands
+
+### Build and Test
+```bash
+# Build the project
+yarn build
+# or
+npx projen build
+
+# Run tests
+yarn test
+# or
+npx projen test
+
+# Watch mode for tests
+yarn test:watch
+
+# Type checking and linting
+yarn eslint
+```
+
+### CDK Operations
+```bash
+# Synthesize CloudFormation templates
+yarn synth
+# or
+npx cdk synth -q
+
+# Prepare for integration tests
+yarn prepare-integ-test
+
+# Run integration tests
+yarn integ-test
+```
+
+### Development Workflow
+```bash
+# Install dependencies
+yarn install
+
+# Compile TypeScript
+yarn compile
+
+# Package for distribution
+yarn package
+
+# Publish assets (for releases)
+yarn publish-assets
+```
+
+## Testing
+
+### Unit Tests
+- Located in `test/` directory
+- Uses Jest with snapshot testing
+- Run with `yarn test`
+- Coverage reports generated in `coverage/` directory
+
+### Integration Tests
+- Located in `integ-tests/` directory  
+- Uses CDK Integration Testing framework
+- Tests real AWS deployments in regions: `eu-west-1`, `eu-west-2`
+- Run with `yarn integ-test`
+- Includes cleanup scripts for post-test resource removal
+
+### Test Requirements
+- AWS credentials configured for integration tests
+- Python environment for cleanup scripts (see `integ-tests/requirements.txt`)
+
+## Key Configuration Files
+
+### Projen Configuration
+- `.projenrc.ts` - Projen project configuration with custom GitHub workflows
+- Uses `@mavogel/mvc-projen` for standardized project setup
+- Defines complex CI/CD workflows for multi-region releases
+
+### CDK Configuration  
+- `cdk.json` - CDK app configuration pointing to `src/index-cli-synth.ts`
+- `tsconfig.json` - TypeScript configuration for JSII compilation
+
+### Package Configuration
+- Uses Yarn Classic as package manager
+- JSII-compatible TypeScript library for multi-language support
+- Bundles AWS SDK dependencies to avoid version conflicts
+
+## Supported AWS Regions
+
+SES is not available in all regions. The construct validates deployment regions against:
+- `us-east-1` (N. Virginia)
+- `eu-west-1` (Ireland) 
+- `us-west-2` (Oregon)
+- `eu-central-1` (Frankfurt)
+- `us-east-2` (Ohio)
+- `ca-central-1` (Canada Central)
+- `ap-northeast-1` (Tokyo)
+- `ap-southeast-1` (Singapore)
+- `ap-southeast-2` (Sydney)
+
+## Release Process
+
+The project uses automated releases to S3 buckets across multiple regions:
+- **Dev releases**: On every PR to development S3 bucket
+- **Prod releases**: On version tags to production S3 bucket  
+- **CloudFormation templates**: Available in both JSON and YAML formats
+
+## Security and Compliance
+
+- Uses `cdk-nag` for AWS security best practices validation
+- All resources follow AWS Well-Architected Framework principles
+- S3 buckets have public access blocked and encryption enabled
+- IAM policies follow principle of least privilege
+- CDK Nag suppressions documented with justifications
+
+## Important Notes
+
+- **Email Size Limit**: AWS accounts can have maximum 64 characters for email addresses
+- **Domain Requirements**: Parent domain must be registered in Route53 in the same AWS account for auto-wiring
+- **SES Region Validation**: Construct will throw error if deployed to unsupported SES regions
+- **Cleanup**: Integration tests include automated cleanup of created resources

package/lib/rootmail.js

@@ -82,7 +82,7 @@ class Rootmail extends constructs_1.Construct {
 }
 exports.Rootmail = Rootmail;
 _a = JSII_RTTI_SYMBOL_1;
-Rootmail[_a] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.0.317" };
+Rootmail[_a] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.0.319" };
 /**
  * Aspect for setting all removal policies to DESTROY
  */

package/lib/ses-receive.js

@@ -130,7 +130,7 @@ class SESReceive extends constructs_1.Construct {
 }
 exports.SESReceive = SESReceive;
 _a = JSII_RTTI_SYMBOL_1;
-SESReceive[_a] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.0.317" };
+SESReceive[_a] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.0.319" };
 /**
  * Aspect for setting all removal policies to DESTROY
  */

package/node_modules/@aws-sdk/client-cloudwatch-logs/README.md

@@ -28,8 +28,8 @@ CloudWatch metric that you specify.</p>
 </li>
 <li>
 <p>
-<b>Monitor CloudTrail logged events</b>: You can
-create alarms in CloudWatch and receive notifications of particular API activity as
+<b>Monitor CloudTrail logged events</b>: You
+can create alarms in CloudWatch and receive notifications of particular API activity as
 captured by CloudTrail. You can use the notification to perform troubleshooting.</p>
 </li>
 <li>
@@ -652,6 +652,14 @@ GetLogGroupFields
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudwatch-logs/command/GetLogGroupFieldsCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cloudwatch-logs/Interface/GetLogGroupFieldsCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cloudwatch-logs/Interface/GetLogGroupFieldsCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetLogObject
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudwatch-logs/command/GetLogObjectCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cloudwatch-logs/Interface/GetLogObjectCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-cloudwatch-logs/Interface/GetLogObjectCommandOutput/)
+
 </details>
 <details>
 <summary>

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-cjs/index.js

@@ -88,6 +88,10 @@ __export(index_exports, {
   GetLogAnomalyDetectorCommand: () => GetLogAnomalyDetectorCommand,
   GetLogEventsCommand: () => GetLogEventsCommand,
   GetLogGroupFieldsCommand: () => GetLogGroupFieldsCommand,
+  GetLogObjectCommand: () => GetLogObjectCommand,
+  GetLogObjectResponseFilterSensitiveLog: () => GetLogObjectResponseFilterSensitiveLog,
+  GetLogObjectResponseStream: () => GetLogObjectResponseStream,
+  GetLogObjectResponseStreamFilterSensitiveLog: () => GetLogObjectResponseStreamFilterSensitiveLog,
   GetLogRecordCommand: () => GetLogRecordCommand,
   GetQueryResultsCommand: () => GetQueryResultsCommand,
   GetTransformerCommand: () => GetTransformerCommand,
@@ -96,6 +100,7 @@ __export(index_exports, {
   IntegrationDetails: () => IntegrationDetails,
   IntegrationStatus: () => IntegrationStatus,
   IntegrationType: () => IntegrationType,
+  InternalStreamingException: () => InternalStreamingException,
   InvalidOperationException: () => InvalidOperationException,
   InvalidParameterException: () => InvalidParameterException,
   InvalidSequenceTokenException: () => InvalidSequenceTokenException,
@@ -114,6 +119,7 @@ __export(index_exports, {
   OperationAbortedException: () => OperationAbortedException,
   OrderBy: () => OrderBy,
   OutputFormat: () => OutputFormat,
+  PolicyScope: () => PolicyScope,
   PolicyType: () => PolicyType,
   PutAccountPolicyCommand: () => PutAccountPolicyCommand,
   PutDataProtectionPolicyCommand: () => PutDataProtectionPolicyCommand,
@@ -378,6 +384,7 @@ var AccessDeniedException = class _AccessDeniedException extends CloudWatchLogsS
 var PolicyType = {
   DATA_PROTECTION_POLICY: "DATA_PROTECTION_POLICY",
   FIELD_INDEX_POLICY: "FIELD_INDEX_POLICY",
+  METRIC_EXTRACTION_POLICY: "METRIC_EXTRACTION_POLICY",
   SUBSCRIPTION_FILTER_POLICY: "SUBSCRIPTION_FILTER_POLICY",
   TRANSFORMER_POLICY: "TRANSFORMER_POLICY"
 };
@@ -505,7 +512,8 @@ var OutputFormat = {
 var DeliveryDestinationType = {
   CWL: "CWL",
   FH: "FH",
-  S3: "S3"
+  S3: "S3",
+  XRAY: "XRAY"
 };
 var ConflictException = class _ConflictException extends CloudWatchLogsServiceException {
   static {
@@ -708,6 +716,10 @@ var QueryStatus = {
   Timeout: "Timeout",
   Unknown: "Unknown"
 };
+var PolicyScope = {
+  ACCOUNT: "ACCOUNT",
+  RESOURCE: "RESOURCE"
+};
 var Distribution = {
   ByLogStream: "ByLogStream",
   Random: "Random"
@@ -753,6 +765,33 @@ var IntegrationStatus = {
 var IntegrationType = {
   OPENSEARCH: "OPENSEARCH"
 };
+var InternalStreamingException = class _InternalStreamingException extends CloudWatchLogsServiceException {
+  static {
+    __name(this, "InternalStreamingException");
+  }
+  name = "InternalStreamingException";
+  $fault = "client";
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "InternalStreamingException",
+      $fault: "client",
+      ...opts
+    });
+    Object.setPrototypeOf(this, _InternalStreamingException.prototype);
+  }
+};
+var GetLogObjectResponseStream;
+((GetLogObjectResponseStream3) => {
+  GetLogObjectResponseStream3.visit = /* @__PURE__ */ __name((value, visitor) => {
+    if (value.fields !== void 0) return visitor.fields(value.fields);
+    if (value.InternalStreamingException !== void 0)
+      return visitor.InternalStreamingException(value.InternalStreamingException);
+    return visitor._(value.$unknown[0], value.$unknown[1]);
+  }, "visit");
+})(GetLogObjectResponseStream || (GetLogObjectResponseStream = {}));
 var OCSFVersion = {
   V1_1: "V1.1"
 };
@@ -917,6 +956,16 @@ var SuppressionType = {
   INFINITE: "INFINITE",
   LIMITED: "LIMITED"
 };
+var GetLogObjectResponseStreamFilterSensitiveLog = /* @__PURE__ */ __name((obj) => {
+  if (obj.fields !== void 0) return { fields: obj.fields };
+  if (obj.InternalStreamingException !== void 0)
+    return { InternalStreamingException: obj.InternalStreamingException };
+  if (obj.$unknown !== void 0) return { [obj.$unknown[0]]: "UNKNOWN" };
+}, "GetLogObjectResponseStreamFilterSensitiveLog");
+var GetLogObjectResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.fieldStream && { fieldStream: "STREAMING_CONTENT" }
+}), "GetLogObjectResponseFilterSensitiveLog");
 var StartLiveTailResponseStreamFilterSensitiveLog = /* @__PURE__ */ __name((obj) => {
   if (obj.sessionStart !== void 0) return { sessionStart: obj.sessionStart };
   if (obj.sessionUpdate !== void 0) return { sessionUpdate: obj.sessionUpdate };
@@ -1242,6 +1291,19 @@ var se_GetLogGroupFieldsCommand = /* @__PURE__ */ __name(async (input, context)
   body = JSON.stringify((0, import_smithy_client._json)(input));
   return buildHttpRpcRequest(context, headers, "/", void 0, body);
 }, "se_GetLogGroupFieldsCommand");
+var se_GetLogObjectCommand = /* @__PURE__ */ __name(async (input, context) => {
+  const headers = sharedHeaders("GetLogObject");
+  let body;
+  body = JSON.stringify((0, import_smithy_client._json)(input));
+  let { hostname: resolvedHostname } = await context.endpoint();
+  if (context.disableHostPrefix !== true) {
+    resolvedHostname = "streaming-" + resolvedHostname;
+    if (!(0, import_protocol_http.isValidHostname)(resolvedHostname)) {
+      throw new Error("ValidationError: prefixed hostname must be hostname compatible.");
+    }
+  }
+  return buildHttpRpcRequest(context, headers, "/", resolvedHostname, body);
+}, "se_GetLogObjectCommand");
 var se_GetLogRecordCommand = /* @__PURE__ */ __name(async (input, context) => {
   const headers = sharedHeaders("GetLogRecord");
   let body;
@@ -2093,6 +2155,17 @@ var de_GetLogGroupFieldsCommand = /* @__PURE__ */ __name(async (output, context)
   };
   return response;
 }, "de_GetLogGroupFieldsCommand");
+var de_GetLogObjectCommand = /* @__PURE__ */ __name(async (output, context) => {
+  if (output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents = { fieldStream: de_GetLogObjectResponseStream(output.body, context) };
+  const response = {
+    $metadata: deserializeMetadata(output),
+    ...contents
+  };
+  return response;
+}, "de_GetLogObjectCommand");
 var de_GetLogRecordCommand = /* @__PURE__ */ __name(async (output, context) => {
   if (output.statusCode >= 300) {
     return de_CommandError(output, context);
@@ -2772,6 +2845,24 @@ var de_ValidationExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, cont
   });
   return (0, import_smithy_client.decorateServiceException)(exception, body);
 }, "de_ValidationExceptionRes");
+var de_GetLogObjectResponseStream = /* @__PURE__ */ __name((output, context) => {
+  return context.eventStreamMarshaller.deserialize(output, async (event) => {
+    if (event["fields"] != null) {
+      return {
+        fields: await de_FieldsData_event(event["fields"], context)
+      };
+    }
+    if (event["InternalStreamingException"] != null) {
+      return {
+        InternalStreamingException: await de_InternalStreamingException_event(
+          event["InternalStreamingException"],
+          context
+        )
+      };
+    }
+    return { $unknown: event };
+  });
+}, "de_GetLogObjectResponseStream");
 var de_StartLiveTailResponseStream = /* @__PURE__ */ __name((output, context) => {
   return context.eventStreamMarshaller.deserialize(output, async (event) => {
     if (event["sessionStart"] != null) {
@@ -2800,6 +2891,19 @@ var de_StartLiveTailResponseStream = /* @__PURE__ */ __name((output, context) =>
     return { $unknown: event };
   });
 }, "de_StartLiveTailResponseStream");
+var de_FieldsData_event = /* @__PURE__ */ __name(async (output, context) => {
+  const contents = {};
+  const data = await (0, import_core2.parseJsonBody)(output.body, context);
+  Object.assign(contents, de_FieldsData(data, context));
+  return contents;
+}, "de_FieldsData_event");
+var de_InternalStreamingException_event = /* @__PURE__ */ __name(async (output, context) => {
+  const parsedOutput = {
+    ...output,
+    body: await (0, import_core2.parseJsonBody)(output.body, context)
+  };
+  return de_InternalStreamingExceptionRes(parsedOutput, context);
+}, "de_InternalStreamingException_event");
 var de_LiveTailSessionStart_event = /* @__PURE__ */ __name(async (output, context) => {
   const contents = {};
   const data = await (0, import_core2.parseJsonBody)(output.body, context);
@@ -2826,6 +2930,15 @@ var de_SessionTimeoutException_event = /* @__PURE__ */ __name(async (output, con
   };
   return de_SessionTimeoutExceptionRes(parsedOutput, context);
 }, "de_SessionTimeoutException_event");
+var de_InternalStreamingExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
+  const body = parsedOutput.body;
+  const deserialized = (0, import_smithy_client._json)(body);
+  const exception = new InternalStreamingException({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...deserialized
+  });
+  return (0, import_smithy_client.decorateServiceException)(exception, body);
+}, "de_InternalStreamingExceptionRes");
 var de_SessionStreamingExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
   const body = parsedOutput.body;
   const deserialized = (0, import_smithy_client._json)(body);
@@ -2884,6 +2997,11 @@ var de_DescribeMetricFiltersResponse = /* @__PURE__ */ __name((output, context)
     nextToken: import_smithy_client.expectString
   });
 }, "de_DescribeMetricFiltersResponse");
+var de_FieldsData = /* @__PURE__ */ __name((output, context) => {
+  return (0, import_smithy_client.take)(output, {
+    data: context.base64Decoder
+  });
+}, "de_FieldsData");
 var de_GetQueryResultsResponse = /* @__PURE__ */ __name((output, context) => {
   return (0, import_smithy_client.take)(output, {
     encryptionKey: import_smithy_client.expectString,
@@ -3745,6 +3863,28 @@ var GetLogGroupFieldsCommand = class extends import_smithy_client.Command.classB
   }
 };
 
+// src/commands/GetLogObjectCommand.ts
+
+
+
+var GetLogObjectCommand = class extends import_smithy_client.Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+  return [
+    (0, import_middleware_serde.getSerdePlugin)(config, this.serialize, this.deserialize),
+    (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions())
+  ];
+}).s("Logs_20140328", "GetLogObject", {
+  /**
+   * @internal
+   */
+  eventStream: {
+    output: true
+  }
+}).n("CloudWatchLogsClient", "GetLogObjectCommand").f(void 0, GetLogObjectResponseFilterSensitiveLog).ser(se_GetLogObjectCommand).de(de_GetLogObjectCommand).build() {
+  static {
+    __name(this, "GetLogObjectCommand");
+  }
+};
+
 // src/commands/GetLogRecordCommand.ts
 
 
@@ -4376,6 +4516,7 @@ var commands = {
   GetLogAnomalyDetectorCommand,
   GetLogEventsCommand,
   GetLogGroupFieldsCommand,
+  GetLogObjectCommand,
   GetLogRecordCommand,
   GetQueryResultsCommand,
   GetTransformerCommand,
@@ -4537,6 +4678,7 @@ var paginateListLogGroupsForQuery = (0, import_core.createPaginator)(CloudWatchL
   GetLogAnomalyDetectorCommand,
   GetLogEventsCommand,
   GetLogGroupFieldsCommand,
+  GetLogObjectCommand,
   GetLogRecordCommand,
   GetQueryResultsCommand,
   GetTransformerCommand,
@@ -4618,6 +4760,7 @@ var paginateListLogGroupsForQuery = (0, import_core.createPaginator)(CloudWatchL
   StandardUnit,
   QueryLanguage,
   QueryStatus,
+  PolicyScope,
   Distribution,
   EntityRejectionErrorType,
   EventSource,
@@ -4626,6 +4769,8 @@ var paginateListLogGroupsForQuery = (0, import_core.createPaginator)(CloudWatchL
   IntegrationDetails,
   IntegrationStatus,
   IntegrationType,
+  InternalStreamingException,
+  GetLogObjectResponseStream,
   OCSFVersion,
   Type,
   InvalidSequenceTokenException,
@@ -4639,6 +4784,8 @@ var paginateListLogGroupsForQuery = (0, import_core.createPaginator)(CloudWatchL
   TooManyTagsException,
   SuppressionUnit,
   SuppressionType,
+  GetLogObjectResponseStreamFilterSensitiveLog,
+  GetLogObjectResponseFilterSensitiveLog,
   StartLiveTailResponseStreamFilterSensitiveLog,
   StartLiveTailResponseFilterSensitiveLog
 });

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-es/CloudWatchLogs.js

@@ -52,6 +52,7 @@ import { GetIntegrationCommand, } from "./commands/GetIntegrationCommand";
 import { GetLogAnomalyDetectorCommand, } from "./commands/GetLogAnomalyDetectorCommand";
 import { GetLogEventsCommand, } from "./commands/GetLogEventsCommand";
 import { GetLogGroupFieldsCommand, } from "./commands/GetLogGroupFieldsCommand";
+import { GetLogObjectCommand, } from "./commands/GetLogObjectCommand";
 import { GetLogRecordCommand, } from "./commands/GetLogRecordCommand";
 import { GetQueryResultsCommand, } from "./commands/GetQueryResultsCommand";
 import { GetTransformerCommand, } from "./commands/GetTransformerCommand";
@@ -143,6 +144,7 @@ const commands = {
     GetLogAnomalyDetectorCommand,
     GetLogEventsCommand,
     GetLogGroupFieldsCommand,
+    GetLogObjectCommand,
     GetLogRecordCommand,
     GetQueryResultsCommand,
     GetTransformerCommand,

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-es/commands/GetLogObjectCommand.js

@@ -0,0 +1,27 @@
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetLogObjectResponseFilterSensitiveLog } from "../models/models_0";
+import { de_GetLogObjectCommand, se_GetLogObjectCommand } from "../protocols/Aws_json1_1";
+export { $Command };
+export class GetLogObjectCommand extends $Command
+    .classBuilder()
+    .ep(commonParams)
+    .m(function (Command, cs, config, o) {
+    return [
+        getSerdePlugin(config, this.serialize, this.deserialize),
+        getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+})
+    .s("Logs_20140328", "GetLogObject", {
+    eventStream: {
+        output: true,
+    },
+})
+    .n("CloudWatchLogsClient", "GetLogObjectCommand")
+    .f(void 0, GetLogObjectResponseFilterSensitiveLog)
+    .ser(se_GetLogObjectCommand)
+    .de(de_GetLogObjectCommand)
+    .build() {
+}

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-es/commands/index.js

@@ -50,6 +50,7 @@ export * from "./GetIntegrationCommand";
 export * from "./GetLogAnomalyDetectorCommand";
 export * from "./GetLogEventsCommand";
 export * from "./GetLogGroupFieldsCommand";
+export * from "./GetLogObjectCommand";
 export * from "./GetLogRecordCommand";
 export * from "./GetQueryResultsCommand";
 export * from "./GetTransformerCommand";

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-es/models/models_0.js

@@ -14,6 +14,7 @@ export class AccessDeniedException extends __BaseException {
 export const PolicyType = {
     DATA_PROTECTION_POLICY: "DATA_PROTECTION_POLICY",
     FIELD_INDEX_POLICY: "FIELD_INDEX_POLICY",
+    METRIC_EXTRACTION_POLICY: "METRIC_EXTRACTION_POLICY",
     SUBSCRIPTION_FILTER_POLICY: "SUBSCRIPTION_FILTER_POLICY",
     TRANSFORMER_POLICY: "TRANSFORMER_POLICY",
 };
@@ -112,6 +113,7 @@ export const DeliveryDestinationType = {
     CWL: "CWL",
     FH: "FH",
     S3: "S3",
+    XRAY: "XRAY",
 };
 export class ConflictException extends __BaseException {
     name = "ConflictException";
@@ -272,6 +274,10 @@ export const QueryStatus = {
     Timeout: "Timeout",
     Unknown: "Unknown",
 };
+export const PolicyScope = {
+    ACCOUNT: "ACCOUNT",
+    RESOURCE: "RESOURCE",
+};
 export const Distribution = {
     ByLogStream: "ByLogStream",
     Random: "Random",
@@ -317,6 +323,28 @@ export const IntegrationStatus = {
 export const IntegrationType = {
     OPENSEARCH: "OPENSEARCH",
 };
+export class InternalStreamingException extends __BaseException {
+    name = "InternalStreamingException";
+    $fault = "client";
+    constructor(opts) {
+        super({
+            name: "InternalStreamingException",
+            $fault: "client",
+            ...opts,
+        });
+        Object.setPrototypeOf(this, InternalStreamingException.prototype);
+    }
+}
+export var GetLogObjectResponseStream;
+(function (GetLogObjectResponseStream) {
+    GetLogObjectResponseStream.visit = (value, visitor) => {
+        if (value.fields !== undefined)
+            return visitor.fields(value.fields);
+        if (value.InternalStreamingException !== undefined)
+            return visitor.InternalStreamingException(value.InternalStreamingException);
+        return visitor._(value.$unknown[0], value.$unknown[1]);
+    };
+})(GetLogObjectResponseStream || (GetLogObjectResponseStream = {}));
 export const OCSFVersion = {
     V1_1: "V1.1",
 };
@@ -439,6 +467,18 @@ export const SuppressionType = {
     INFINITE: "INFINITE",
     LIMITED: "LIMITED",
 };
+export const GetLogObjectResponseStreamFilterSensitiveLog = (obj) => {
+    if (obj.fields !== undefined)
+        return { fields: obj.fields };
+    if (obj.InternalStreamingException !== undefined)
+        return { InternalStreamingException: obj.InternalStreamingException };
+    if (obj.$unknown !== undefined)
+        return { [obj.$unknown[0]]: "UNKNOWN" };
+};
+export const GetLogObjectResponseFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.fieldStream && { fieldStream: "STREAMING_CONTENT" }),
+});
 export const StartLiveTailResponseStreamFilterSensitiveLog = (obj) => {
     if (obj.sessionStart !== undefined)
         return { sessionStart: obj.sessionStart };