@mavogel/awscdk-rootmail 0.0.326 → 0.0.328

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/models/models_0.d.ts

@@ -1,43 +1,5 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { CloudWatchLogsServiceException as __BaseException } from "./CloudWatchLogsServiceException";
-/**
- * <p>You don't have sufficient permissions to perform this action.</p>
- * @public
- */
-export declare class AccessDeniedException extends __BaseException {
-    readonly name: "AccessDeniedException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const PolicyType: {
-    readonly DATA_PROTECTION_POLICY: "DATA_PROTECTION_POLICY";
-    readonly FIELD_INDEX_POLICY: "FIELD_INDEX_POLICY";
-    readonly METRIC_EXTRACTION_POLICY: "METRIC_EXTRACTION_POLICY";
-    readonly SUBSCRIPTION_FILTER_POLICY: "SUBSCRIPTION_FILTER_POLICY";
-    readonly TRANSFORMER_POLICY: "TRANSFORMER_POLICY";
-};
-/**
- * @public
- */
-export type PolicyType = (typeof PolicyType)[keyof typeof PolicyType];
-/**
- * @public
- * @enum
- */
-export declare const Scope: {
-    readonly ALL: "ALL";
-};
-/**
- * @public
- */
-export type Scope = (typeof Scope)[keyof typeof Scope];
+import { ActionStatus, AnomalyDetectorStatus, DataProtectionStatus, DeliveryDestinationType, Distribution, EntityRejectionErrorType, EvaluationFrequency, EventSource, ExecutionStatus, ExportTaskStatusCode, FlattenedElement, ImportStatus, IndexSource, IndexType, InheritedProperty, IntegrationStatus, IntegrationType, ListAggregateLogGroupSummariesGroupBy, LogGroupClass, OCSFVersion, OpenSearchResourceStatusType, OrderBy, OutputFormat, PolicyScope, PolicyType, QueryLanguage, QueryStatus, S3TableIntegrationSourceStatus, ScheduledQueryDestinationType, ScheduledQueryState, Scope, StandardUnit, State, SuppressionState, SuppressionType, SuppressionUnit, Type } from "./enums";
+import { InternalStreamingException, SessionStreamingException, SessionTimeoutException } from "./errors";
 /**
  * <p>A structure that contains information about one CloudWatch Logs account policy.</p>
  * @public
@@ -115,6 +77,45 @@ export interface AddKeys {
      */
     entries: AddKeyEntry[] | undefined;
 }
+/**
+ * <p>A key-value pair that identifies how log groups are grouped in aggregate summaries.</p>
+ * @public
+ */
+export interface GroupingIdentifier {
+    /**
+     * <p>The key that identifies the grouping characteristic. The format of the key uses dot
+     *       notation. Examples are, <code>dataSource.Name</code>, <code>dataSource.Type</code>, and
+     *         <code>dataSource.Format</code>.</p>
+     * @public
+     */
+    key?: string | undefined;
+    /**
+     * <p>The value associated with the grouping characteristic. Examples are
+     *         <code>amazon_vpc</code>, <code>flow</code>, and <code>OCSF</code>.</p>
+     * @public
+     */
+    value?: string | undefined;
+}
+/**
+ * <p>Contains an aggregate summary of log groups grouped by data source characteristics,
+ *       including the count of log groups and their grouping identifiers.</p>
+ * @public
+ */
+export interface AggregateLogGroupSummary {
+    /**
+     * <p>The number of log groups in this aggregate summary group.</p>
+     * @public
+     */
+    logGroupCount?: number | undefined;
+    /**
+     * <p>An array of key-value pairs that identify the data source characteristics used to group
+     *       the log groups.</p>
+     *          <p>The size and content of this array depends on the <code>groupBy</code> parameter specified
+     *       in the request.</p>
+     * @public
+     */
+    groupingIdentifiers?: GroupingIdentifier[] | undefined;
+}
 /**
  * <p>A structure that represents a valid record field header and whether it is
  *       mandatory.</p>
@@ -195,19 +196,6 @@ export interface PatternToken {
      */
     inferredTokenName?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const State: {
-    readonly Active: "Active";
-    readonly Baseline: "Baseline";
-    readonly Suppressed: "Suppressed";
-};
-/**
- * @public
- */
-export type State = (typeof State)[keyof typeof State];
 /**
  * <p>This structure represents one anomaly that has been found by a logs anomaly
  *       detector.</p>
@@ -329,38 +317,6 @@ export interface Anomaly {
      */
     isPatternLevelSuppression?: boolean | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const AnomalyDetectorStatus: {
-    readonly ANALYZING: "ANALYZING";
-    readonly DELETED: "DELETED";
-    readonly FAILED: "FAILED";
-    readonly INITIALIZING: "INITIALIZING";
-    readonly PAUSED: "PAUSED";
-    readonly TRAINING: "TRAINING";
-};
-/**
- * @public
- */
-export type AnomalyDetectorStatus = (typeof AnomalyDetectorStatus)[keyof typeof AnomalyDetectorStatus];
-/**
- * @public
- * @enum
- */
-export declare const EvaluationFrequency: {
-    readonly FIFTEEN_MIN: "FIFTEEN_MIN";
-    readonly FIVE_MIN: "FIVE_MIN";
-    readonly ONE_HOUR: "ONE_HOUR";
-    readonly ONE_MIN: "ONE_MIN";
-    readonly TEN_MIN: "TEN_MIN";
-    readonly THIRTY_MIN: "THIRTY_MIN";
-};
-/**
- * @public
- */
-export type EvaluationFrequency = (typeof EvaluationFrequency)[keyof typeof EvaluationFrequency];
 /**
  * <p>Contains information about one anomaly detector in the account.</p>
  * @public
@@ -471,52 +427,49 @@ export interface AssociateKmsKeyRequest {
     resourceIdentifier?: string | undefined;
 }
 /**
- * <p>A parameter is specified incorrectly.</p>
+ * <p>Represents a data source that categorizes logs by originating service and log type,
+ *       providing service-based organization complementing traditional log groups.</p>
  * @public
  */
-export declare class InvalidParameterException extends __BaseException {
-    readonly name: "InvalidParameterException";
-    readonly $fault: "client";
+export interface DataSource {
     /**
-     * @internal
+     * <p>The name of the data source.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<InvalidParameterException, __BaseException>);
-}
-/**
- * <p>Multiple concurrent requests to update the same resource were in conflict.</p>
- * @public
- */
-export declare class OperationAbortedException extends __BaseException {
-    readonly name: "OperationAbortedException";
-    readonly $fault: "client";
+    name: string | undefined;
     /**
-     * @internal
+     * <p>The type of the data source.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<OperationAbortedException, __BaseException>);
+    type?: string | undefined;
 }
 /**
- * <p>The specified resource does not exist.</p>
  * @public
  */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
+export interface AssociateSourceToS3TableIntegrationRequest {
     /**
-     * @internal
+     * <p>The Amazon Resource Name (ARN) of the S3 Table Integration to associate the data source
+     *       with.</p>
+     * @public
+     */
+    integrationArn: string | undefined;
+    /**
+     * <p>The data source to associate with the S3 Table Integration. Contains the name and type of
+     *       the data source.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
+    dataSource: DataSource | undefined;
 }
 /**
- * <p>The service cannot complete the request.</p>
  * @public
  */
-export declare class ServiceUnavailableException extends __BaseException {
-    readonly name: "ServiceUnavailableException";
-    readonly $fault: "server";
+export interface AssociateSourceToS3TableIntegrationResponse {
     /**
-     * @internal
+     * <p>The unique identifier for the association between the data source and S3 Table
+     *       Integration.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<ServiceUnavailableException, __BaseException>);
+    identifier?: string | undefined;
 }
 /**
  * @public
@@ -529,32 +482,56 @@ export interface CancelExportTaskRequest {
     taskId: string | undefined;
 }
 /**
- * <p>The operation is not valid on the specified resource.</p>
  * @public
  */
-export declare class InvalidOperationException extends __BaseException {
-    readonly name: "InvalidOperationException";
-    readonly $fault: "client";
+export interface CancelImportTaskRequest {
     /**
-     * @internal
+     * <p>The ID of the import task to cancel.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<InvalidOperationException, __BaseException>);
+    importId: string | undefined;
 }
 /**
+ * <p>Statistics about the import progress</p>
  * @public
- * @enum
  */
-export declare const OutputFormat: {
-    readonly JSON: "json";
-    readonly PARQUET: "parquet";
-    readonly PLAIN: "plain";
-    readonly RAW: "raw";
-    readonly W3C: "w3c";
-};
+export interface ImportStatistics {
+    /**
+     * <p>The total number of bytes that have been imported to the managed log group.</p>
+     * @public
+     */
+    bytesImported?: number | undefined;
+}
 /**
  * @public
  */
-export type OutputFormat = (typeof OutputFormat)[keyof typeof OutputFormat];
+export interface CancelImportTaskResponse {
+    /**
+     * <p>The ID of the cancelled import task.</p>
+     * @public
+     */
+    importId?: string | undefined;
+    /**
+     * <p>Statistics about the import progress at the time of cancellation.</p>
+     * @public
+     */
+    importStatistics?: ImportStatistics | undefined;
+    /**
+     * <p>The final status of the import task. This will be set to CANCELLED.</p>
+     * @public
+     */
+    importStatus?: ImportStatus | undefined;
+    /**
+     * <p>The timestamp when the import task was created, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    creationTime?: number | undefined;
+    /**
+     * <p>The timestamp when the import task was cancelled, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    lastUpdatedTime?: number | undefined;
+}
 /**
  * <p>This structure contains delivery configurations that apply only when the delivery
  *       destination resource is an S3 bucket.</p>
@@ -603,20 +580,6 @@ export interface ConfigurationTemplateDeliveryConfigValues {
      */
     s3DeliveryConfiguration?: S3DeliveryConfiguration | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const DeliveryDestinationType: {
-    readonly CWL: "CWL";
-    readonly FH: "FH";
-    readonly S3: "S3";
-    readonly XRAY: "XRAY";
-};
-/**
- * @public
- */
-export type DeliveryDestinationType = (typeof DeliveryDestinationType)[keyof typeof DeliveryDestinationType];
 /**
  * <p>A structure containing information about the deafult settings and available settings that
  *       you can use to configure a <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_Delivery.html">delivery</a> or a
@@ -684,18 +647,6 @@ export interface ConfigurationTemplate {
      */
     allowedSuffixPathFields?: string[] | undefined;
 }
-/**
- * <p>This operation attempted to create a resource that already exists.</p>
- * @public
- */
-export declare class ConflictException extends __BaseException {
-    readonly name: "ConflictException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
-}
 /**
  * <p>This object defines one value to be copied with the <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-copoyValue"> copyValue</a> processor.</p>
  * @public
@@ -842,42 +793,6 @@ export interface CreateDeliveryResponse {
      */
     delivery?: Delivery | undefined;
 }
-/**
- * <p>This request exceeds a service quota.</p>
- * @public
- */
-export declare class ServiceQuotaExceededException extends __BaseException {
-    readonly name: "ServiceQuotaExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
-}
-/**
- * <p>The request was throttled because of quota limits.</p>
- * @public
- */
-export declare class ThrottlingException extends __BaseException {
-    readonly name: "ThrottlingException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
-}
-/**
- * <p>One of the parameters for the request is not valid.</p>
- * @public
- */
-export declare class ValidationException extends __BaseException {
-    readonly name: "ValidationException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
-}
 /**
  * @public
  */
@@ -939,28 +854,61 @@ export interface CreateExportTaskResponse {
     taskId?: string | undefined;
 }
 /**
- * <p>You have reached the maximum number of resources that can be created.</p>
+ * <p>The filter criteria used for import tasks</p>
+ * @public
+ */
+export interface ImportFilter {
+    /**
+     * <p>The start of the time range for events to import, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    startEventTime?: number | undefined;
+    /**
+     * <p>The end of the time range for events to import, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    endEventTime?: number | undefined;
+}
+/**
  * @public
  */
-export declare class LimitExceededException extends __BaseException {
-    readonly name: "LimitExceededException";
-    readonly $fault: "client";
+export interface CreateImportTaskRequest {
+    /**
+     * <p>The ARN of the source to import from.</p>
+     * @public
+     */
+    importSourceArn: string | undefined;
+    /**
+     * <p>The ARN of the IAM role that grants CloudWatch Logs permission to import from the CloudTrail Lake Event Data Store.</p>
+     * @public
+     */
+    importRoleArn: string | undefined;
     /**
-     * @internal
+     * <p>Optional filters to constrain the import by CloudTrail event time. Times are specified in Unix timestamp milliseconds.
+     *       The range of data being imported must be within the specified source's retention period.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
+    importFilter?: ImportFilter | undefined;
 }
 /**
- * <p>The specified resource already exists.</p>
  * @public
  */
-export declare class ResourceAlreadyExistsException extends __BaseException {
-    readonly name: "ResourceAlreadyExistsException";
-    readonly $fault: "client";
+export interface CreateImportTaskResponse {
+    /**
+     * <p>A unique identifier for the import task.</p>
+     * @public
+     */
+    importId?: string | undefined;
+    /**
+     * <p>The ARN of the CloudWatch Logs log group created as the destination for the imported events.</p>
+     * @public
+     */
+    importDestinationArn?: string | undefined;
     /**
-     * @internal
+     * <p>The timestamp when the import task was created, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<ResourceAlreadyExistsException, __BaseException>);
+    creationTime?: number | undefined;
 }
 /**
  * @public
@@ -1031,19 +979,6 @@ export interface CreateLogAnomalyDetectorResponse {
      */
     anomalyDetectorArn?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const LogGroupClass: {
-    readonly DELIVERY: "DELIVERY";
-    readonly INFREQUENT_ACCESS: "INFREQUENT_ACCESS";
-    readonly STANDARD: "STANDARD";
-};
-/**
- * @public
- */
-export type LogGroupClass = (typeof LogGroupClass)[keyof typeof LogGroupClass];
 /**
  * @public
  */
@@ -1101,6 +1036,13 @@ export interface CreateLogGroupRequest {
      * @public
      */
     logGroupClass?: LogGroupClass | undefined;
+    /**
+     * <p>Use this parameter to enable deletion protection for the new log group. When enabled on
+     *       a log group, deletion protection blocks all deletion operations until it is explicitly
+     *       disabled. By default log groups are created without deletion protection enabled.</p>
+     * @public
+     */
+    deletionProtectionEnabled?: boolean | undefined;
 }
 /**
  * @public
@@ -1117,6 +1059,141 @@ export interface CreateLogStreamRequest {
      */
     logStreamName: string | undefined;
 }
+/**
+ * <p>Configuration for Amazon S3 destination where scheduled query results are delivered.</p>
+ * @public
+ */
+export interface S3Configuration {
+    /**
+     * <p>The Amazon S3 URI where query results are delivered. Must be a valid S3 URI format.</p>
+     * @public
+     */
+    destinationIdentifier: string | undefined;
+    /**
+     * <p>The ARN of the IAM role that grants permissions to write query results to the specified
+     *       Amazon S3 destination.</p>
+     * @public
+     */
+    roleArn: string | undefined;
+}
+/**
+ * <p>Configuration for where to deliver scheduled query results. Specifies the destination type
+ *       and associated settings for result delivery.</p>
+ * @public
+ */
+export interface DestinationConfiguration {
+    /**
+     * <p>Configuration for delivering query results to Amazon S3.</p>
+     * @public
+     */
+    s3Configuration: S3Configuration | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateScheduledQueryRequest {
+    /**
+     * <p>The name of the scheduled query. The name must be unique within your account and region.
+     *       Valid characters are alphanumeric characters, hyphens, underscores, and periods. Length must
+     *       be between 1 and 255 characters.</p>
+     * @public
+     */
+    name: string | undefined;
+    /**
+     * <p>An optional description for the scheduled query to help identify its purpose and
+     *       functionality.</p>
+     * @public
+     */
+    description?: string | undefined;
+    /**
+     * <p>The query language to use for the scheduled query. Valid values are <code>LogsQL</code>,
+     *         <code>PPL</code>, and <code>SQL</code>.</p>
+     * @public
+     */
+    queryLanguage: QueryLanguage | undefined;
+    /**
+     * <p>The query string to execute. This is the same query syntax used in CloudWatch Logs
+     *       Insights. Maximum length is 10,000 characters.</p>
+     * @public
+     */
+    queryString: string | undefined;
+    /**
+     * <p>An array of log group names or ARNs to query. You can specify between 1 and 50 log groups.
+     *       Log groups can be identified by name or full ARN.</p>
+     * @public
+     */
+    logGroupIdentifiers?: string[] | undefined;
+    /**
+     * <p>A cron expression that defines when the scheduled query runs. The expression uses standard
+     *       cron syntax and supports minute-level precision. Maximum length is 256 characters.</p>
+     * @public
+     */
+    scheduleExpression: string | undefined;
+    /**
+     * <p>The timezone for evaluating the schedule expression. This determines when the scheduled
+     *       query executes relative to the specified timezone.</p>
+     * @public
+     */
+    timezone?: string | undefined;
+    /**
+     * <p>The time offset in seconds that defines the lookback period for the query. This determines
+     *       how far back in time the query searches from the execution time.</p>
+     * @public
+     */
+    startTimeOffset?: number | undefined;
+    /**
+     * <p>Configuration for where to deliver query results. Currently supports Amazon S3 destinations for
+     *       storing query output.</p>
+     * @public
+     */
+    destinationConfiguration?: DestinationConfiguration | undefined;
+    /**
+     * <p>The start time for the scheduled query in Unix epoch format. The query will not execute
+     *       before this time.</p>
+     * @public
+     */
+    scheduleStartTime?: number | undefined;
+    /**
+     * <p>The end time for the scheduled query in Unix epoch format. The query will stop executing
+     *       after this time.</p>
+     * @public
+     */
+    scheduleEndTime?: number | undefined;
+    /**
+     * <p>The ARN of the IAM role that grants permissions to execute the query and deliver results
+     *       to the specified destination. The role must have permissions to read from the specified log
+     *       groups and write to the destination.</p>
+     * @public
+     */
+    executionRoleArn: string | undefined;
+    /**
+     * <p>The initial state of the scheduled query. Valid values are <code>ENABLED</code> and
+     *         <code>DISABLED</code>. Default is <code>ENABLED</code>.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+    /**
+     * <p>Key-value pairs to associate with the scheduled query for resource management and cost
+     *       allocation.</p>
+     * @public
+     */
+    tags?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateScheduledQueryResponse {
+    /**
+     * <p>The ARN of the created scheduled query.</p>
+     * @public
+     */
+    scheduledQueryArn?: string | undefined;
+    /**
+     * <p>The current state of the scheduled query.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+}
 /**
  * <p>The <code>CSV</code> processor parses comma-separated values (CSV) from the log events
  *       into columns.</p>
@@ -1152,38 +1229,22 @@ export interface CSV {
     source?: string | undefined;
 }
 /**
- * <p>The event was already logged.</p>
- *          <important>
- *             <p>
- *                <code>PutLogEvents</code> actions are now always accepted and never return
- *           <code>DataAlreadyAcceptedException</code> regardless of whether a given batch of log
- *         events has already been accepted. </p>
- *          </important>
+ * <p>Filter criteria for data sources, used to specify which data sources to include in
+ *       operations based on name and type.</p>
  * @public
  */
-export declare class DataAlreadyAcceptedException extends __BaseException {
-    readonly name: "DataAlreadyAcceptedException";
-    readonly $fault: "client";
-    expectedSequenceToken?: string | undefined;
+export interface DataSourceFilter {
+    /**
+     * <p>The name pattern to filter data sources by.</p>
+     * @public
+     */
+    name: string | undefined;
     /**
-     * @internal
+     * <p>The type pattern to filter data sources by.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<DataAlreadyAcceptedException, __BaseException>);
+    type?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const DataProtectionStatus: {
-    readonly ACTIVATED: "ACTIVATED";
-    readonly ARCHIVED: "ARCHIVED";
-    readonly DELETED: "DELETED";
-    readonly DISABLED: "DISABLED";
-};
-/**
- * @public
- */
-export type DataProtectionStatus = (typeof DataProtectionStatus)[keyof typeof DataProtectionStatus];
 /**
  * <p>This processor converts a datetime string into a format that you specify. </p>
  *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-datetimeConverter"> datetimeConverter</a> in the <i>CloudWatch Logs User
@@ -1466,22 +1527,37 @@ export interface DeleteRetentionPolicyRequest {
 /**
  * @public
  */
-export interface DeleteSubscriptionFilterRequest {
+export interface DeleteScheduledQueryRequest {
     /**
-     * <p>The name of the log group.</p>
-     * @public
-     */
-    logGroupName: string | undefined;
-    /**
-     * <p>The name of the subscription filter.</p>
+     * <p>The ARN or name of the scheduled query to delete.</p>
      * @public
      */
-    filterName: string | undefined;
+    identifier: string | undefined;
 }
 /**
  * @public
  */
-export interface DeleteTransformerRequest {
+export interface DeleteScheduledQueryResponse {
+}
+/**
+ * @public
+ */
+export interface DeleteSubscriptionFilterRequest {
+    /**
+     * <p>The name of the log group.</p>
+     * @public
+     */
+    logGroupName: string | undefined;
+    /**
+     * <p>The name of the subscription filter.</p>
+     * @public
+     */
+    filterName: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteTransformerRequest {
     /**
      * <p>Specify either the name or ARN of the log group to delete the transformer for. If the log
      *       group is in a source account and you are using a monitoring account, you must use the log
@@ -1920,22 +1996,6 @@ export interface DescribeDestinationsResponse {
      */
     nextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const ExportTaskStatusCode: {
-    readonly CANCELLED: "CANCELLED";
-    readonly COMPLETED: "COMPLETED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-    readonly PENDING_CANCEL: "PENDING_CANCEL";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type ExportTaskStatusCode = (typeof ExportTaskStatusCode)[keyof typeof ExportTaskStatusCode];
 /**
  * @public
  */
@@ -2121,6 +2181,13 @@ export interface FieldIndex {
      * @public
      */
     lastEventTime?: number | undefined;
+    /**
+     * <p>The type of index. Specify <code>FACET</code> for facet-based indexing or
+     *         <code>FIELD_INDEX</code> for field-based indexing. This determines how the field is indexed
+     *       and can be queried.</p>
+     * @public
+     */
+    type?: IndexType | undefined;
 }
 /**
  * @public
@@ -2141,32 +2208,187 @@ export interface DescribeFieldIndexesResponse {
 /**
  * @public
  */
-export interface DescribeIndexPoliciesRequest {
+export interface DescribeImportTaskBatchesRequest {
     /**
-     * <p>An array containing the name or ARN of the log group that you want to retrieve field index
-     *       policies for.</p>
+     * <p>The ID of the import task to get batch information for.</p>
      * @public
      */
-    logGroupIdentifiers: string[] | undefined;
+    importId: string | undefined;
     /**
-     * <p>The token for the next set of items to return. The token expires after 24
-     *       hours.</p>
+     * <p>Optional filter to list import batches by their status. Accepts multiple status values: IN_PROGRESS, CANCELLED, COMPLETED and FAILED.</p>
+     * @public
+     */
+    batchImportStatus?: ImportStatus[] | undefined;
+    /**
+     * <p>The maximum number of import batches to return in the response. Default: 10</p>
+     * @public
+     */
+    limit?: number | undefined;
+    /**
+     * <p>The pagination token for the next set of results.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
+/**
+ * <p>A collection of events being imported to CloudWatch</p>
+ * @public
+ */
+export interface ImportBatch {
+    /**
+     * <p>The unique identifier of the import batch.</p>
+     * @public
+     */
+    batchId: string | undefined;
+    /**
+     * <p>The current status of the import batch. Valid values are IN_PROGRESS, CANCELLED, COMPLETED and FAILED.</p>
+     * @public
+     */
+    status: ImportStatus | undefined;
+    /**
+     * <p>The error message if the batch failed to import. Only present when status is FAILED.</p>
+     * @public
+     */
+    errorMessage?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeImportTaskBatchesResponse {
+    /**
+     * <p>The ARN of the source being imported from.</p>
+     * @public
+     */
+    importSourceArn?: string | undefined;
+    /**
+     * <p>The ID of the import task.</p>
+     * @public
+     */
+    importId?: string | undefined;
+    /**
+     * <p>The list of import batches that match the request filters.</p>
+     * @public
+     */
+    importBatches?: ImportBatch[] | undefined;
+    /**
+     * <p>The token to use when requesting the next set of results. Not present if there are no additional results to retrieve.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeImportTasksRequest {
+    /**
+     * <p>Optional filter to describe a specific import task by its ID.</p>
+     * @public
+     */
+    importId?: string | undefined;
+    /**
+     * <p>Optional filter to list imports by their status. Valid values are IN_PROGRESS, CANCELLED, COMPLETED and FAILED.</p>
+     * @public
+     */
+    importStatus?: ImportStatus | undefined;
+    /**
+     * <p>Optional filter to list imports from a specific source</p>
+     * @public
+     */
+    importSourceArn?: string | undefined;
+    /**
+     * <p>The maximum number of import tasks to return in the response. Default: 50</p>
+     * @public
+     */
+    limit?: number | undefined;
+    /**
+     * <p>The pagination token for the next set of results.</p>
      * @public
      */
     nextToken?: string | undefined;
 }
+/**
+ * <p>An import job to move data from CloudTrail Event Data Store to CloudWatch.</p>
+ * @public
+ */
+export interface Import {
+    /**
+     * <p>The unique identifier of the import task.</p>
+     * @public
+     */
+    importId?: string | undefined;
+    /**
+     * <p>The ARN of the CloudTrail Lake Event Data Store being imported from.</p>
+     * @public
+     */
+    importSourceArn?: string | undefined;
+    /**
+     * <p>The current status of the import task. Valid values are IN_PROGRESS, CANCELLED, COMPLETED and FAILED.</p>
+     * @public
+     */
+    importStatus?: ImportStatus | undefined;
+    /**
+     * <p>The ARN of the managed CloudWatch Logs log group where the events are being imported to.</p>
+     * @public
+     */
+    importDestinationArn?: string | undefined;
+    /**
+     * <p>Statistics about the import progress</p>
+     * @public
+     */
+    importStatistics?: ImportStatistics | undefined;
+    /**
+     * <p>The filter criteria used for this import task.</p>
+     * @public
+     */
+    importFilter?: ImportFilter | undefined;
+    /**
+     * <p>The timestamp when the import task was created, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    creationTime?: number | undefined;
+    /**
+     * <p>The timestamp when the import task was last updated, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.</p>
+     * @public
+     */
+    lastUpdatedTime?: number | undefined;
+    /**
+     * <p>Error message related to any failed imports</p>
+     * @public
+     */
+    errorMessage?: string | undefined;
+}
 /**
  * @public
- * @enum
  */
-export declare const IndexSource: {
-    readonly ACCOUNT: "ACCOUNT";
-    readonly LOG_GROUP: "LOG_GROUP";
-};
+export interface DescribeImportTasksResponse {
+    /**
+     * <p>The list of import tasks that match the request filters.</p>
+     * @public
+     */
+    imports?: Import[] | undefined;
+    /**
+     * <p>The token to use when requesting the next set of results. Not present if there are no additional results to retrieve.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
 /**
  * @public
  */
-export type IndexSource = (typeof IndexSource)[keyof typeof IndexSource];
+export interface DescribeIndexPoliciesRequest {
+    /**
+     * <p>An array containing the name or ARN of the log group that you want to retrieve field index
+     *       policies for.</p>
+     * @public
+     */
+    logGroupIdentifiers: string[] | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
 /**
  * <p>This structure contains information about one field index policy in this account.</p>
  * @public
@@ -2314,17 +2536,6 @@ export interface DescribeLogGroupsRequest {
      */
     logGroupIdentifiers?: string[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const InheritedProperty: {
-    readonly ACCOUNT_DATA_PROTECTION: "ACCOUNT_DATA_PROTECTION";
-};
-/**
- * @public
- */
-export type InheritedProperty = (typeof InheritedProperty)[keyof typeof InheritedProperty];
 /**
  * <p>Represents a log group.</p>
  * @public
@@ -2430,6 +2641,18 @@ export interface LogGroup {
      * @public
      */
     logGroupArn?: string | undefined;
+    /**
+     * <p>Indicates whether deletion protection is enabled for this log group. When enabled,
+     *       deletion protection blocks all deletion operations until it is explicitly disabled.</p>
+     * @public
+     */
+    deletionProtectionEnabled?: boolean | undefined;
+    /**
+     * <p>Indicates whether bearer token authentication is enabled for this log group. When enabled,
+     *       bearer token authentication is allowed on operations until it is explicitly disabled.</p>
+     * @public
+     */
+    bearerTokenAuthenticationEnabled?: boolean | undefined;
 }
 /**
  * @public
@@ -2448,18 +2671,6 @@ export interface DescribeLogGroupsResponse {
      */
     nextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const OrderBy: {
-    readonly LastEventTime: "LastEventTime";
-    readonly LogStreamName: "LogStreamName";
-};
-/**
- * @public
- */
-export type OrderBy = (typeof OrderBy)[keyof typeof OrderBy];
 /**
  * @public
  */
@@ -2650,43 +2861,6 @@ export interface DescribeMetricFiltersRequest {
      */
     metricNamespace?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const StandardUnit: {
-    readonly Bits: "Bits";
-    readonly BitsSecond: "Bits/Second";
-    readonly Bytes: "Bytes";
-    readonly BytesSecond: "Bytes/Second";
-    readonly Count: "Count";
-    readonly CountSecond: "Count/Second";
-    readonly Gigabits: "Gigabits";
-    readonly GigabitsSecond: "Gigabits/Second";
-    readonly Gigabytes: "Gigabytes";
-    readonly GigabytesSecond: "Gigabytes/Second";
-    readonly Kilobits: "Kilobits";
-    readonly KilobitsSecond: "Kilobits/Second";
-    readonly Kilobytes: "Kilobytes";
-    readonly KilobytesSecond: "Kilobytes/Second";
-    readonly Megabits: "Megabits";
-    readonly MegabitsSecond: "Megabits/Second";
-    readonly Megabytes: "Megabytes";
-    readonly MegabytesSecond: "Megabytes/Second";
-    readonly Microseconds: "Microseconds";
-    readonly Milliseconds: "Milliseconds";
-    readonly None: "None";
-    readonly Percent: "Percent";
-    readonly Seconds: "Seconds";
-    readonly Terabits: "Terabits";
-    readonly TerabitsSecond: "Terabits/Second";
-    readonly Terabytes: "Terabytes";
-    readonly TerabytesSecond: "Terabytes/Second";
-};
-/**
- * @public
- */
-export type StandardUnit = (typeof StandardUnit)[keyof typeof StandardUnit];
 /**
  * <p>Indicates how to transform ingested log events to metric data in a CloudWatch
  *       metric.</p>
@@ -2785,12 +2959,16 @@ export interface MetricFilter {
      */
     applyOnTransformedLogs?: boolean | undefined;
     /**
-     * <p>The filter expression that specifies which log events are processed by this metric filter based on system fields. Returns the <code>fieldSelectionCriteria</code> value if it was specified when the metric filter was created.</p>
+     * <p>The filter expression that specifies which log events are processed by this metric filter
+     *       based on system fields. Returns the <code>fieldSelectionCriteria</code> value if it was
+     *       specified when the metric filter was created.</p>
      * @public
      */
     fieldSelectionCriteria?: string | undefined;
     /**
-     * <p>The list of system fields that are emitted as additional dimensions in the generated metrics. Returns the <code>emitSystemFieldDimensions</code> value if it was specified when the metric filter was created.</p>
+     * <p>The list of system fields that are emitted as additional dimensions in the generated
+     *       metrics. Returns the <code>emitSystemFieldDimensions</code> value if it was specified when the
+     *       metric filter was created.</p>
      * @public
      */
     emitSystemFieldDimensions?: string[] | undefined;
@@ -2811,36 +2989,6 @@ export interface DescribeMetricFiltersResponse {
      */
     nextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const QueryLanguage: {
-    readonly CWLI: "CWLI";
-    readonly PPL: "PPL";
-    readonly SQL: "SQL";
-};
-/**
- * @public
- */
-export type QueryLanguage = (typeof QueryLanguage)[keyof typeof QueryLanguage];
-/**
- * @public
- * @enum
- */
-export declare const QueryStatus: {
-    readonly Cancelled: "Cancelled";
-    readonly Complete: "Complete";
-    readonly Failed: "Failed";
-    readonly Running: "Running";
-    readonly Scheduled: "Scheduled";
-    readonly Timeout: "Timeout";
-    readonly Unknown: "Unknown";
-};
-/**
- * @public
- */
-export type QueryStatus = (typeof QueryStatus)[keyof typeof QueryStatus];
 /**
  * @public
  */
@@ -3018,18 +3166,6 @@ export interface DescribeQueryDefinitionsResponse {
      */
     nextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const PolicyScope: {
-    readonly ACCOUNT: "ACCOUNT";
-    readonly RESOURCE: "RESOURCE";
-};
-/**
- * @public
- */
-export type PolicyScope = (typeof PolicyScope)[keyof typeof PolicyScope];
 /**
  * @public
  */
@@ -3142,18 +3278,6 @@ export interface DescribeSubscriptionFiltersRequest {
      */
     limit?: number | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const Distribution: {
-    readonly ByLogStream: "ByLogStream";
-    readonly Random: "Random";
-};
-/**
- * @public
- */
-export type Distribution = (typeof Distribution)[keyof typeof Distribution];
 /**
  * <p>Represents a subscription filter.</p>
  * @public
@@ -3207,12 +3331,16 @@ export interface SubscriptionFilter {
      */
     creationTime?: number | undefined;
     /**
-     * <p>The filter expression that specifies which log events are processed by this subscription filter based on system fields. Returns the <code>fieldSelectionCriteria</code> value if it was specified when the subscription filter was created.</p>
+     * <p>The filter expression that specifies which log events are processed by this subscription
+     *       filter based on system fields. Returns the <code>fieldSelectionCriteria</code> value if it was
+     *       specified when the subscription filter was created.</p>
      * @public
      */
     fieldSelectionCriteria?: string | undefined;
     /**
-     * <p>The list of system fields that are included in the log events sent to the subscription destination. Returns the <code>emitSystemFields</code> value if it was specified when the subscription filter was created.</p>
+     * <p>The list of system fields that are included in the log events sent to the subscription
+     *       destination. Returns the <code>emitSystemFields</code> value if it was specified when the
+     *       subscription filter was created.</p>
      * @public
      */
     emitSystemFields?: string[] | undefined;
@@ -3276,6 +3404,27 @@ export interface DisassociateKmsKeyRequest {
      */
     resourceIdentifier?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DisassociateSourceFromS3TableIntegrationRequest {
+    /**
+     * <p>The unique identifier of the association to remove between the data source and S3 Table
+     *       Integration.</p>
+     * @public
+     */
+    identifier: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateSourceFromS3TableIntegrationResponse {
+    /**
+     * <p>The unique identifier of the association that was removed.</p>
+     * @public
+     */
+    identifier?: string | undefined;
+}
 /**
  * <p>The entity associated with the log events in a <code>PutLogEvents</code> call.</p>
  * @public
@@ -3304,38 +3453,6 @@ export interface Entity {
      */
     attributes?: Record<string, string> | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const EntityRejectionErrorType: {
-    readonly ENTITY_SIZE_TOO_LARGE: "EntitySizeTooLarge";
-    readonly INVALID_ATTRIBUTES: "InvalidAttributes";
-    readonly INVALID_ENTITY: "InvalidEntity";
-    readonly INVALID_KEY_ATTRIBUTE: "InvalidKeyAttributes";
-    readonly INVALID_TYPE_VALUE: "InvalidTypeValue";
-    readonly MISSING_REQUIRED_FIELDS: "MissingRequiredFields";
-    readonly UNSUPPORTED_LOG_GROUP_TYPE: "UnsupportedLogGroupType";
-};
-/**
- * @public
- */
-export type EntityRejectionErrorType = (typeof EntityRejectionErrorType)[keyof typeof EntityRejectionErrorType];
-/**
- * @public
- * @enum
- */
-export declare const EventSource: {
-    readonly AWSWAF: "AWSWAF";
-    readonly CLOUD_TRAIL: "CloudTrail";
-    readonly EKS_AUDIT: "EKSAudit";
-    readonly ROUTE53_RESOLVER: "Route53Resolver";
-    readonly VPC_FLOW: "VPCFlow";
-};
-/**
- * @public
- */
-export type EventSource = (typeof EventSource)[keyof typeof EventSource];
 /**
  * <p>A structure containing the extracted fields from a log event. These fields are extracted
  *       based on the log format and can be used for structured querying and analysis.</p>
@@ -3522,18 +3639,6 @@ export interface FilterLogEventsResponse {
      */
     nextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const FlattenedElement: {
-    readonly FIRST: "first";
-    readonly LAST: "last";
-};
-/**
- * @public
- */
-export type FlattenedElement = (typeof FlattenedElement)[keyof typeof FlattenedElement];
 /**
  * @public
  */
@@ -3668,19 +3773,6 @@ export interface GetIntegrationRequest {
      */
     integrationName: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const OpenSearchResourceStatusType: {
-    readonly ACTIVE: "ACTIVE";
-    readonly ERROR: "ERROR";
-    readonly NOT_FOUND: "NOT_FOUND";
-};
-/**
- * @public
- */
-export type OpenSearchResourceStatusType = (typeof OpenSearchResourceStatusType)[keyof typeof OpenSearchResourceStatusType];
 /**
  * <p>This structure contains information about the status of an OpenSearch Service
  *       resource.</p>
@@ -3979,36 +4071,15 @@ export declare namespace IntegrationDetails {
         openSearchIntegrationDetails?: never;
         $unknown: [string, any];
     }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
     interface Visitor<T> {
         openSearchIntegrationDetails: (value: OpenSearchIntegrationDetails) => T;
         _: (name: string, value: any) => T;
     }
-    const visit: <T>(value: IntegrationDetails, visitor: Visitor<T>) => T;
 }
-/**
- * @public
- * @enum
- */
-export declare const IntegrationStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly FAILED: "FAILED";
-    readonly PROVISIONING: "PROVISIONING";
-};
-/**
- * @public
- */
-export type IntegrationStatus = (typeof IntegrationStatus)[keyof typeof IntegrationStatus];
-/**
- * @public
- * @enum
- */
-export declare const IntegrationType: {
-    readonly OPENSEARCH: "OPENSEARCH";
-};
-/**
- * @public
- */
-export type IntegrationType = (typeof IntegrationType)[keyof typeof IntegrationType];
 /**
  * @public
  */
@@ -4227,6 +4298,21 @@ export interface GetLogEventsResponse {
      */
     nextBackwardToken?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface GetLogFieldsRequest {
+    /**
+     * <p>The name of the data source to retrieve log fields for.</p>
+     * @public
+     */
+    dataSourceName: string | undefined;
+    /**
+     * <p>The type of the data source to retrieve log fields for.</p>
+     * @public
+     */
+    dataSourceType: string | undefined;
+}
 /**
  * @public
  */
@@ -4309,20 +4395,6 @@ export interface GetLogObjectRequest {
      */
     logObjectPointer: string | undefined;
 }
-/**
- * <p>An internal error occurred during the streaming of log data. This exception is thrown when
- *       there's an issue with the internal streaming mechanism used by the GetLogObject
- *       operation.</p>
- * @public
- */
-export declare class InternalStreamingException extends __BaseException {
-    readonly name: "InternalStreamingException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InternalStreamingException, __BaseException>);
-}
 /**
  * <p>A stream of structured log data returned by the GetLogObject operation. This stream
  *       contains log events with their associated metadata and extracted fields.</p>
@@ -4362,12 +4434,15 @@ export declare namespace GetLogObjectResponseStream {
         InternalStreamingException?: never;
         $unknown: [string, any];
     }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
     interface Visitor<T> {
         fields: (value: FieldsData) => T;
         InternalStreamingException: (value: InternalStreamingException) => T;
         _: (name: string, value: any) => T;
     }
-    const visit: <T>(value: GetLogObjectResponseStream, visitor: Visitor<T>) => T;
 }
 /**
  * <p>The response from the GetLogObject operation.</p>
@@ -4533,6 +4608,238 @@ export interface GetQueryResultsResponse {
      */
     encryptionKey?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface GetScheduledQueryRequest {
+    /**
+     * <p>The ARN or name of the scheduled query to retrieve.</p>
+     * @public
+     */
+    identifier: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetScheduledQueryResponse {
+    /**
+     * <p>The ARN of the scheduled query.</p>
+     * @public
+     */
+    scheduledQueryArn?: string | undefined;
+    /**
+     * <p>The name of the scheduled query.</p>
+     * @public
+     */
+    name?: string | undefined;
+    /**
+     * <p>The description of the scheduled query.</p>
+     * @public
+     */
+    description?: string | undefined;
+    /**
+     * <p>The query language used by the scheduled query.</p>
+     * @public
+     */
+    queryLanguage?: QueryLanguage | undefined;
+    /**
+     * <p>The query string executed by the scheduled query.</p>
+     * @public
+     */
+    queryString?: string | undefined;
+    /**
+     * <p>The log groups queried by the scheduled query.</p>
+     * @public
+     */
+    logGroupIdentifiers?: string[] | undefined;
+    /**
+     * <p>The cron expression that defines when the scheduled query runs.</p>
+     * @public
+     */
+    scheduleExpression?: string | undefined;
+    /**
+     * <p>The timezone used for evaluating the schedule expression.</p>
+     * @public
+     */
+    timezone?: string | undefined;
+    /**
+     * <p>The time offset in seconds that defines the lookback period for the query.</p>
+     * @public
+     */
+    startTimeOffset?: number | undefined;
+    /**
+     * <p>Configuration for where query results are delivered.</p>
+     * @public
+     */
+    destinationConfiguration?: DestinationConfiguration | undefined;
+    /**
+     * <p>The current state of the scheduled query.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was last executed.</p>
+     * @public
+     */
+    lastTriggeredTime?: number | undefined;
+    /**
+     * <p>The status of the most recent execution of the scheduled query.</p>
+     * @public
+     */
+    lastExecutionStatus?: ExecutionStatus | undefined;
+    /**
+     * <p>The start time for the scheduled query in Unix epoch format.</p>
+     * @public
+     */
+    scheduleStartTime?: number | undefined;
+    /**
+     * <p>The end time for the scheduled query in Unix epoch format.</p>
+     * @public
+     */
+    scheduleEndTime?: number | undefined;
+    /**
+     * <p>The ARN of the IAM role used to execute the query and deliver results.</p>
+     * @public
+     */
+    executionRoleArn?: string | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was created.</p>
+     * @public
+     */
+    creationTime?: number | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was last updated.</p>
+     * @public
+     */
+    lastUpdatedTime?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface GetScheduledQueryHistoryRequest {
+    /**
+     * <p>The ARN or name of the scheduled query to retrieve history for.</p>
+     * @public
+     */
+    identifier: string | undefined;
+    /**
+     * <p>The start time for the history query in Unix epoch format.</p>
+     * @public
+     */
+    startTime: number | undefined;
+    /**
+     * <p>The end time for the history query in Unix epoch format.</p>
+     * @public
+     */
+    endTime: number | undefined;
+    /**
+     * <p>An array of execution statuses to filter the history results. Only executions with the
+     *       specified statuses are returned.</p>
+     * @public
+     */
+    executionStatuses?: ExecutionStatus[] | undefined;
+    /**
+     * <p>The maximum number of history records to return. Valid range is 1 to 1000.</p>
+     * @public
+     */
+    maxResults?: number | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
+/**
+ * <p>Information about a destination where scheduled query results are processed, including
+ *       processing status and any error messages.</p>
+ * @public
+ */
+export interface ScheduledQueryDestination {
+    /**
+     * <p>The type of destination for query results.</p>
+     * @public
+     */
+    destinationType?: ScheduledQueryDestinationType | undefined;
+    /**
+     * <p>The identifier for the destination where results are delivered.</p>
+     * @public
+     */
+    destinationIdentifier?: string | undefined;
+    /**
+     * <p>The processing status of the destination delivery.</p>
+     * @public
+     */
+    status?: ActionStatus | undefined;
+    /**
+     * <p>The identifier of the processed result at the destination.</p>
+     * @public
+     */
+    processedIdentifier?: string | undefined;
+    /**
+     * <p>Error message if destination processing failed.</p>
+     * @public
+     */
+    errorMessage?: string | undefined;
+}
+/**
+ * <p>A record of a scheduled query execution, including execution status, timestamp, and
+ *       destination processing results.</p>
+ * @public
+ */
+export interface TriggerHistoryRecord {
+    /**
+     * <p>The unique identifier for this query execution.</p>
+     * @public
+     */
+    queryId?: string | undefined;
+    /**
+     * <p>The execution status of the scheduled query run.</p>
+     * @public
+     */
+    executionStatus?: ExecutionStatus | undefined;
+    /**
+     * <p>The timestamp when the scheduled query execution was triggered.</p>
+     * @public
+     */
+    triggeredTimestamp?: number | undefined;
+    /**
+     * <p>Error message if the query execution failed.</p>
+     * @public
+     */
+    errorMessage?: string | undefined;
+    /**
+     * <p>Information about destination processing for this query execution.</p>
+     * @public
+     */
+    destinations?: ScheduledQueryDestination[] | undefined;
+}
+/**
+ * @public
+ */
+export interface GetScheduledQueryHistoryResponse {
+    /**
+     * <p>The name of the scheduled query.</p>
+     * @public
+     */
+    name?: string | undefined;
+    /**
+     * <p>The ARN of the scheduled query.</p>
+     * @public
+     */
+    scheduledQueryArn?: string | undefined;
+    /**
+     * <p>An array of execution history records for the scheduled query.</p>
+     * @public
+     */
+    triggerHistory?: TriggerHistoryRecord[] | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
 /**
  * @public
  */
@@ -4548,7 +4855,7 @@ export interface GetTransformerRequest {
 /**
  * <p>This processor uses pattern matching to parse and structure unstructured data. This
  *       processor can also extract fields from log messages.</p>
- *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-Grok">grok</a> in the <i>CloudWatch Logs User Guide</i>.</p>
+ *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Configurable.html#CloudWatch-Logs-Transformation-Grok">grok</a> in the <i>CloudWatch Logs User Guide</i>.</p>
  * @public
  */
 export interface Grok {
@@ -4560,7 +4867,7 @@ export interface Grok {
     source?: string | undefined;
     /**
      * <p>The grok pattern to match against the log event. For a list of supported grok patterns,
-     *       see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#Grok-Patterns">Supported grok patterns</a>.</p>
+     *       see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Configurable.html#CloudWatch-Logs-Transformation-Grok">Supported grok patterns</a>.</p>
      * @public
      */
     match: string | undefined;
@@ -4785,21 +5092,10 @@ export interface ParseRoute53 {
      */
     source?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const OCSFVersion: {
-    readonly V1_1: "V1.1";
-};
-/**
- * @public
- */
-export type OCSFVersion = (typeof OCSFVersion)[keyof typeof OCSFVersion];
 /**
  * <p>This processor converts logs into <a href="https://ocsf.io">Open Cybersecurity Schema
  *         Framework (OCSF)</a> events.</p>
- *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF"> parseToOSCF</a> in the <i>CloudWatch Logs User Guide</i>.</p>
+ *          <p>For more information about this processor including examples, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseToOCSF">parseToOCSF</a> in the <i>CloudWatch Logs User Guide</i>.</p>
  * @public
  */
 export interface ParseToOCSF {
@@ -4820,6 +5116,11 @@ export interface ParseToOCSF {
      * @public
      */
     ocsfVersion: OCSFVersion | undefined;
+    /**
+     * <p>The version of the OCSF mapping to use for parsing log data.</p>
+     * @public
+     */
+    mappingVersion?: string | undefined;
 }
 /**
  * <p>Use this processor to parse Amazon VPC vended logs, extract fields, and and
@@ -4976,20 +5277,6 @@ export interface TrimString {
      */
     withKeys: string[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const Type: {
-    readonly BOOLEAN: "boolean";
-    readonly DOUBLE: "double";
-    readonly INTEGER: "integer";
-    readonly STRING: "string";
-};
-/**
- * @public
- */
-export type Type = (typeof Type)[keyof typeof Type];
 /**
  * <p>This object defines one value type that will be converted using the <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-typeConverter"> typeConverter</a> processor.</p>
  * @public
@@ -5230,38 +5517,98 @@ export interface IntegrationSummary {
     integrationStatus?: IntegrationStatus | undefined;
 }
 /**
- * <p>The sequence token is not valid. You can get the correct sequence token in the
- *         <code>expectedSequenceToken</code> field in the <code>InvalidSequenceTokenException</code>
- *       message. </p>
- *          <important>
- *             <p>
- *                <code>PutLogEvents</code> actions are now always accepted and never return
- *           <code>InvalidSequenceTokenException</code> regardless of receiving an invalid sequence
- *         token. </p>
- *          </important>
  * @public
  */
-export declare class InvalidSequenceTokenException extends __BaseException {
-    readonly name: "InvalidSequenceTokenException";
-    readonly $fault: "client";
-    expectedSequenceToken?: string | undefined;
+export interface ListAggregateLogGroupSummariesRequest {
     /**
-     * @internal
+     * <p>When <code>includeLinkedAccounts</code> is set to <code>true</code>, use this parameter to
+     *       specify the list of accounts to search. You can specify as many as 20 account IDs in the
+     *       array.</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<InvalidSequenceTokenException, __BaseException>);
+    accountIdentifiers?: string[] | undefined;
+    /**
+     * <p>If you are using a monitoring account, set this to <code>true</code> to have the operation
+     *       return log groups in the accounts listed in <code>accountIdentifiers</code>.</p>
+     *          <p>If this parameter is set to <code>true</code> and <code>accountIdentifiers</code> contains
+     *       a null value, the operation returns all log groups in the monitoring account and all log
+     *       groups in all source accounts that are linked to the monitoring account. </p>
+     *          <p>The default for this parameter is <code>false</code>.</p>
+     * @public
+     */
+    includeLinkedAccounts?: boolean | undefined;
+    /**
+     * <p>Filters the results by log group class to include only log groups of the specified
+     *       class.</p>
+     * @public
+     */
+    logGroupClass?: LogGroupClass | undefined;
+    /**
+     * <p>Use this parameter to limit the returned log groups to only those with names that match
+     *       the pattern that you specify. This parameter is a regular expression that can match prefixes
+     *       and substrings, and supports wildcard matching and matching multiple patterns, as in the
+     *       following examples. </p>
+     *          <ul>
+     *             <li>
+     *                <p>Use <code>^</code> to match log group names by prefix.</p>
+     *             </li>
+     *             <li>
+     *                <p>For a substring match, specify the string to match. All matches are case
+     *           sensitive</p>
+     *             </li>
+     *             <li>
+     *                <p>To match multiple patterns, separate them with a <code>|</code> as in the example
+     *             <code>^/aws/lambda|discovery</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     *          <p>You can specify as many as five different regular expression patterns in this field, each
+     *       of which must be between 3 and 24 characters. You can include the <code>^</code> symbol as
+     *       many as five times, and include the <code>|</code> symbol as many as four times.</p>
+     * @public
+     */
+    logGroupNamePattern?: string | undefined;
+    /**
+     * <p>Filters the results by data source characteristics to include only log groups associated
+     *       with the specified data sources.</p>
+     * @public
+     */
+    dataSources?: DataSourceFilter[] | undefined;
+    /**
+     * <p>Specifies how to group the log groups in the summary.</p>
+     * @public
+     */
+    groupBy: ListAggregateLogGroupSummariesGroupBy | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+    /**
+     * <p>The maximum number of aggregated summaries to return. If you omit this parameter, the
+     *       default is up to 50 aggregated summaries.</p>
+     * @public
+     */
+    limit?: number | undefined;
 }
 /**
  * @public
- * @enum
  */
-export declare const SuppressionState: {
-    readonly SUPPRESSED: "SUPPRESSED";
-    readonly UNSUPPRESSED: "UNSUPPRESSED";
-};
-/**
- * @public
- */
-export type SuppressionState = (typeof SuppressionState)[keyof typeof SuppressionState];
+export interface ListAggregateLogGroupSummariesResponse {
+    /**
+     * <p>The list of aggregate log group summaries grouped by the specified data source
+     *       characteristics.</p>
+     * @public
+     */
+    aggregateLogGroupSummaries?: AggregateLogGroupSummary[] | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
 /**
  * @public
  */
@@ -5445,6 +5792,21 @@ export interface ListLogGroupsRequest {
      * @public
      */
     limit?: number | undefined;
+    /**
+     * <p>An array of data source filters to filter log groups by their associated data sources. You
+     *       can filter by data source name, type, or both. Multiple filters within the same dimension are
+     *       combined with OR logic, while filters across different dimensions are combined with AND
+     *       logic.</p>
+     * @public
+     */
+    dataSources?: DataSourceFilter[] | undefined;
+    /**
+     * <p>An array of field index names to filter log groups that have specific field indexes. Only
+     *       log groups containing all specified field indexes are returned. You can specify 1 to 20 field
+     *       index names, each with 1 to 512 characters.</p>
+     * @public
+     */
+    fieldIndexNames?: string[] | undefined;
 }
 /**
  * <p>This structure contains information about one log group in your account.</p>
@@ -5491,31 +5853,197 @@ export interface ListLogGroupsResponse {
  */
 export interface ListLogGroupsForQueryRequest {
     /**
-     * <p>The ID of the query to use. This query ID is from the response to your <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a> operation.</p>
+     * <p>The ID of the query to use. This query ID is from the response to your <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartQuery.html">StartQuery</a> operation.</p>
+     * @public
+     */
+    queryId: string | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+    /**
+     * <p>Limits the number of returned log groups to the specified number.</p>
+     * @public
+     */
+    maxResults?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface ListLogGroupsForQueryResponse {
+    /**
+     * <p>An array of the names and ARNs of the log groups that were processed in the query.</p>
+     * @public
+     */
+    logGroupIdentifiers?: string[] | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScheduledQueriesRequest {
+    /**
+     * <p>The maximum number of scheduled queries to return. Valid range is 1 to 1000.</p>
+     * @public
+     */
+    maxResults?: number | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+    /**
+     * <p>Filter scheduled queries by state. Valid values are <code>ENABLED</code> and
+     *         <code>DISABLED</code>. If not specified, all scheduled queries are returned.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+}
+/**
+ * <p>Summary information about a scheduled query, including basic configuration and execution
+ *       status.</p>
+ * @public
+ */
+export interface ScheduledQuerySummary {
+    /**
+     * <p>The ARN of the scheduled query.</p>
+     * @public
+     */
+    scheduledQueryArn?: string | undefined;
+    /**
+     * <p>The name of the scheduled query.</p>
+     * @public
+     */
+    name?: string | undefined;
+    /**
+     * <p>The current state of the scheduled query.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was last executed.</p>
+     * @public
+     */
+    lastTriggeredTime?: number | undefined;
+    /**
+     * <p>The status of the most recent execution.</p>
+     * @public
+     */
+    lastExecutionStatus?: ExecutionStatus | undefined;
+    /**
+     * <p>The cron expression that defines when the scheduled query runs.</p>
+     * @public
+     */
+    scheduleExpression?: string | undefined;
+    /**
+     * <p>The timezone used for evaluating the schedule expression.</p>
+     * @public
+     */
+    timezone?: string | undefined;
+    /**
+     * <p>Configuration for where query results are delivered.</p>
+     * @public
+     */
+    destinationConfiguration?: DestinationConfiguration | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was created.</p>
+     * @public
+     */
+    creationTime?: number | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was last updated.</p>
+     * @public
+     */
+    lastUpdatedTime?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScheduledQueriesResponse {
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+    /**
+     * <p>An array of scheduled query summary information.</p>
+     * @public
+     */
+    scheduledQueries?: ScheduledQuerySummary[] | undefined;
+}
+/**
+ * @public
+ */
+export interface ListSourcesForS3TableIntegrationRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the S3 Table Integration to list associations
+     *       for.</p>
+     * @public
+     */
+    integrationArn: string | undefined;
+    /**
+     * <p>The maximum number of associations to return in a single call. Valid range is 1 to
+     *       100.</p>
+     * @public
+     */
+    maxResults?: number | undefined;
+    /**
+     * <p>The token for the next set of items to return. The token expires after 24
+     *       hours.</p>
+     * @public
+     */
+    nextToken?: string | undefined;
+}
+/**
+ * <p>Represents a data source association with an S3 Table Integration, including its status
+ *       and metadata.</p>
+ * @public
+ */
+export interface S3TableIntegrationSource {
+    /**
+     * <p>The unique identifier for this data source association.</p>
+     * @public
+     */
+    identifier?: string | undefined;
+    /**
+     * <p>The data source associated with the S3 Table Integration.</p>
+     * @public
+     */
+    dataSource?: DataSource | undefined;
+    /**
+     * <p>The current status of the data source association.</p>
      * @public
      */
-    queryId: string | undefined;
+    status?: S3TableIntegrationSourceStatus | undefined;
     /**
-     * <p>The token for the next set of items to return. The token expires after 24
-     *       hours.</p>
+     * <p>Additional information about the status of the data source association.</p>
      * @public
      */
-    nextToken?: string | undefined;
+    statusReason?: string | undefined;
     /**
-     * <p>Limits the number of returned log groups to the specified number.</p>
+     * <p>The timestamp when the data source association was created.</p>
      * @public
      */
-    maxResults?: number | undefined;
+    createdTimeStamp?: number | undefined;
 }
 /**
  * @public
  */
-export interface ListLogGroupsForQueryResponse {
+export interface ListSourcesForS3TableIntegrationResponse {
     /**
-     * <p>An array of the names and ARNs of the log groups that were processed in the query.</p>
+     * <p>The list of data source associations for the specified S3 Table Integration.</p>
      * @public
      */
-    logGroupIdentifiers?: string[] | undefined;
+    sources?: S3TableIntegrationSource[] | undefined;
     /**
      * <p>The token for the next set of items to return. The token expires after 24
      *       hours.</p>
@@ -5554,6 +6082,7 @@ export interface ListTagsForResourceResponse {
     tags?: Record<string, string> | undefined;
 }
 /**
+ * @deprecated Please use the generic tagging API model ListTagsForResourceRequest and ListTagsForResourceResponse.
  * @public
  */
 export interface ListTagsLogGroupRequest {
@@ -5564,6 +6093,7 @@ export interface ListTagsLogGroupRequest {
     logGroupName: string | undefined;
 }
 /**
+ * @deprecated Please use the generic tagging API model ListTagsForResourceRequest and ListTagsForResourceResponse.
  * @public
  */
 export interface ListTagsLogGroupResponse {
@@ -5695,7 +6225,8 @@ export interface LiveTailSessionUpdate {
  */
 export interface PutAccountPolicyRequest {
     /**
-     * <p>A name for the policy. This must be unique within the account.</p>
+     * <p>A name for the policy. This must be unique within the account and cannot start with
+     *         <code>aws/</code>.</p>
      * @public
      */
     policyName: string | undefined;
@@ -5801,14 +6332,23 @@ export interface PutAccountPolicyRequest {
      *                <p>
      *                   <b>Fields</b> The array of field indexes to create.</p>
      *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>FieldsV2</b> The object of field indexes to create along
+     *           with it's type.</p>
+     *             </li>
      *          </ul>
      *          <p>It must contain at least one field index.</p>
-     *          <p>The following is an example of an index policy document that creates two indexes,
-     *         <code>RequestId</code> and <code>TransactionId</code>.</p>
+     *          <p>The following is an example of an index policy document that creates indexes with
+     *       different types.</p>
      *          <p>
-     *             <code>"policyDocument": "\{ \"Fields\": [ \"RequestId\", \"TransactionId\" ]
-     *       \}"</code>
+     *             <code>"policyDocument": "\{ \"Fields\": [ \"TransactionId\" ], \"FieldsV2\":
+     *         \{\"RequestId\": \{\"type\": \"FIELD_INDEX\"\}, \"APIName\": \{\"type\": \"FACET\"\},
+     *         \"StatusCode\": \{\"type\": \"FACET\"\}\}\}"</code>
      *          </p>
+     *          <p>You can use <code>FieldsV2</code> to specify the type for each field. Supported types are
+     *         <code>FIELD_INDEX</code> and <code>FACET</code>. Field names within <code>Fields</code> and
+     *         <code>FieldsV2</code> must be mutually exclusive.</p>
      * @public
      */
     policyDocument: string | undefined;
@@ -5825,18 +6365,43 @@ export interface PutAccountPolicyRequest {
      */
     scope?: Scope | undefined;
     /**
-     * <p>Use this parameter to apply the new policy to a subset of log groups in the
-     *       account.</p>
+     * <p>Use this parameter to apply the new policy to a subset of log groups in the account or a
+     *       data source name and type combination.  </p>
      *          <p>Specifying <code>selectionCriteria</code> is valid only when you specify
      *         <code>SUBSCRIPTION_FILTER_POLICY</code>, <code>FIELD_INDEX_POLICY</code> or
      *         <code>TRANSFORMER_POLICY</code>for <code>policyType</code>.</p>
-     *          <p>If <code>policyType</code> is <code>SUBSCRIPTION_FILTER_POLICY</code>, the only supported
-     *         <code>selectionCriteria</code> filter is <code>LogGroupName NOT IN []</code>
-     *          </p>
-     *          <p>If <code>policyType</code> is <code>FIELD_INDEX_POLICY</code> or
-     *         <code>TRANSFORMER_POLICY</code>, the only supported <code>selectionCriteria</code> filter is
-     *         <code>LogGroupNamePrefix</code>
-     *          </p>
+     *          <ul>
+     *             <li>
+     *                <p>If <code>policyType</code> is <code>SUBSCRIPTION_FILTER_POLICY</code>, the only
+     *           supported <code>selectionCriteria</code> filter is <code>LogGroupName NOT IN
+     *           []</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>If <code>policyType</code> is <code>TRANSFORMER_POLICY</code>, the only supported
+     *             <code>selectionCriteria</code> filter is <code>LogGroupNamePrefix</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>If <code>policyType</code> is <code>FIELD_INDEX_POLICY</code>, the supported
+     *             <code>selectionCriteria</code> filters are:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>LogGroupNamePrefix</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <code>DataSourceName</code> AND <code>DataSourceType</code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
+     *                <p>When you specify <code>selectionCriteria</code> for a field index policy you can
+     *         use either <code>LogGroupNamePrefix</code> by itself or <code>DataSourceName</code> and
+     *           <code>DataSourceType</code> together.</p>
+     *             </li>
+     *          </ul>
      *          <p>The <code>selectionCriteria</code> string can be up to 25KB in length. The length is
      *       determined by using its UTF-8 bytes.</p>
      *          <p>Using the <code>selectionCriteria</code> parameter with
@@ -5857,6 +6422,28 @@ export interface PutAccountPolicyResponse {
      */
     accountPolicy?: AccountPolicy | undefined;
 }
+/**
+ * @public
+ */
+export interface PutBearerTokenAuthenticationRequest {
+    /**
+     * <p>The name or ARN of the log group.</p>
+     *          <p>Type: String</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 512.</p>
+     *          <p>Pattern: <code>[\.\-_/#A-Za-z0-9]+</code>
+     *          </p>
+     *          <p>Required: Yes</p>
+     * @public
+     */
+    logGroupIdentifier: string | undefined;
+    /**
+     * <p>Whether to enable bearer token authentication.</p>
+     *          <p>Type: Boolean</p>
+     *          <p>Required: Yes</p>
+     * @public
+     */
+    bearerTokenAuthenticationEnabled: boolean | undefined;
+}
 /**
  * @public
  */
@@ -6049,8 +6636,28 @@ export interface PutDeliverySourceRequest {
      * <p>Defines the type of log that the source is sending.</p>
      *          <ul>
      *             <li>
-     *                <p>For Amazon Bedrock, the valid value is <code>APPLICATION_LOGS</code> and
-     *             <code>TRACES</code>.</p>
+     *                <p>For Amazon Bedrock Agents, the valid values are <code>APPLICATION_LOGS</code> and
+     *             <code>EVENT_LOGS</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Bedrock Knowledge Bases, the valid value is
+     *             <code>APPLICATION_LOGS</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Bedrock AgentCore Runtime, the valid values are
+     *             <code>APPLICATION_LOGS</code>, <code>USAGE_LOGS</code> and <code>TRACES</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Bedrock AgentCore Tools, the valid values are
+     *             <code>APPLICATION_LOGS</code>, <code>USAGE_LOGS</code> and <code>TRACES</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Bedrock AgentCore Identity, the valid values are
+     *             <code>APPLICATION_LOGS</code> and <code>TRACES</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Bedrock AgentCore Gateway, the valid values are
+     *             <code>APPLICATION_LOGS</code> and <code>TRACES</code>.</p>
      *             </li>
      *             <li>
      *                <p>For CloudFront, the valid value is <code>ACCESS_LOGS</code>.</p>
@@ -6074,15 +6681,31 @@ export interface PutDeliverySourceRequest {
      *           <code>ERROR_LOGS</code>.</p>
      *             </li>
      *             <li>
+     *                <p>For Network Firewall Proxy, the valid values are <code>ALERT_LOGS</code>,
+     *             <code>ALLOW_LOGS</code>, and <code>DENY_LOGS</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Network Load Balancer, the valid value is <code>NLB_ACCESS_LOGS</code>.</p>
+     *             </li>
+     *             <li>
      *                <p>For PCS, the valid values are <code>PCS_SCHEDULER_LOGS</code> and
      *             <code>PCS_JOBCOMP_LOGS</code>.</p>
      *             </li>
      *             <li>
-     *                <p>For Amazon Q, the valid value is <code>EVENT_LOGS</code>.</p>
+     *                <p>For Quick Suite, the valid values are <code>CHAT_LOGS</code> and
+     *             <code>FEEDBACK_LOGS</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon Web Services RTB Fabric, the valid values is
+     *           <code>APPLICATION_LOGS</code>.</p>
      *             </li>
      *             <li>
-     *                <p>For Amazon SES mail manager, the valid values are <code>APPLICATION_LOG</code>
-     *           and <code>TRAFFIC_POLICY_DEBUG_LOGS</code>.</p>
+     *                <p>For Amazon Q, the valid values are <code>EVENT_LOGS</code> and
+     *             <code>SYNC_JOB_LOGS</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>For Amazon SES mail manager, the valid values are
+     *             <code>APPLICATION_LOGS</code> and <code>TRAFFIC_POLICY_DEBUG_LOGS</code>.</p>
      *             </li>
      *             <li>
      *                <p>For Amazon WorkMail, the valid values are <code>ACCESS_CONTROL_LOGS</code>,
@@ -6199,11 +6822,15 @@ export interface PutIndexPolicyRequest {
     logGroupIdentifier: string | undefined;
     /**
      * <p>The index policy document, in JSON format. The following is an example of an index policy
-     *       document that creates two indexes, <code>RequestId</code> and
-     *       <code>TransactionId</code>.</p>
+     *       document that creates indexes with different types.</p>
      *          <p>
-     *             <code>"policyDocument": "\{ "Fields": [ "RequestId", "TransactionId" ] \}"</code>
+     *             <code>"policyDocument": "\{"Fields": [ "TransactionId" ], "FieldsV2": \{"RequestId":
+     *         \{"type": "FIELD_INDEX"\}, "APIName": \{"type": "FACET"\}, "StatusCode": \{"type":
+     *         "FACET"\}\}\}"</code>
      *          </p>
+     *          <p>You can use <code>FieldsV2</code> to specify the type for each field. Supported types are
+     *         <code>FIELD_INDEX</code> and <code>FACET</code>. Field names within <code>Fields</code> and
+     *         <code>FieldsV2</code> must be mutually exclusive.</p>
      *          <p>The policy document must include at least one field index. For more information about the
      *       fields that can be included and other restrictions, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing-Syntax.html">Field index
      *         syntax and quotas</a>.</p>
@@ -6291,11 +6918,14 @@ export declare namespace ResourceConfig {
         openSearchResourceConfig?: never;
         $unknown: [string, any];
     }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
     interface Visitor<T> {
         openSearchResourceConfig: (value: OpenSearchResourceConfig) => T;
         _: (name: string, value: any) => T;
     }
-    const visit: <T>(value: ResourceConfig, visitor: Visitor<T>) => T;
 }
 /**
  * @public
@@ -6440,17 +7070,26 @@ export interface PutLogEventsResponse {
     rejectedEntityInfo?: RejectedEntityInfo | undefined;
 }
 /**
- * <p>The most likely cause is an Amazon Web Services access key ID or secret key that's not
- *       valid.</p>
  * @public
  */
-export declare class UnrecognizedClientException extends __BaseException {
-    readonly name: "UnrecognizedClientException";
-    readonly $fault: "client";
+export interface PutLogGroupDeletionProtectionRequest {
+    /**
+     * <p>The name or ARN of the log group.</p>
+     *          <p>Type: String</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 512.</p>
+     *          <p>Pattern: <code>[\.\-_/#A-Za-z0-9]+</code>
+     *          </p>
+     *          <p>Required: Yes</p>
+     * @public
+     */
+    logGroupIdentifier: string | undefined;
     /**
-     * @internal
+     * <p>Whether to enable deletion protection.</p>
+     *          <p>Type: Boolean</p>
+     *          <p>Required: Yes</p>
+     * @public
      */
-    constructor(opts: __ExceptionOptionType<UnrecognizedClientException, __BaseException>);
+    deletionProtectionEnabled: boolean | undefined;
 }
 /**
  * @public
@@ -6486,12 +7125,20 @@ export interface PutMetricFilterRequest {
      */
     applyOnTransformedLogs?: boolean | undefined;
     /**
-     * <p>A filter expression that specifies which log events should be processed by this metric filter based on system fields such as source account and source region. Uses selection criteria syntax with operators like <code>=</code>, <code>!=</code>, <code>AND</code>, <code>OR</code>, <code>IN</code>, <code>NOT IN</code>. Example: <code>@aws.region = "us-east-1"</code> or <code>@aws.account IN ["123456789012", "987654321098"]</code>. Maximum length: 2000 characters.</p>
+     * <p>A filter expression that specifies which log events should be processed by this metric
+     *       filter based on system fields such as source account and source region. Uses selection
+     *       criteria syntax with operators like <code>=</code>, <code>!=</code>, <code>AND</code>,
+     *         <code>OR</code>, <code>IN</code>, <code>NOT IN</code>. Example: <code>@aws.region =
+     *         "us-east-1"</code> or <code>@aws.account IN ["123456789012", "987654321098"]</code>. Maximum
+     *       length: 2000 characters.</p>
      * @public
      */
     fieldSelectionCriteria?: string | undefined;
     /**
-     * <p>A list of system fields to emit as additional dimensions in the generated metrics. Valid values are <code>@aws.account</code> and <code>@aws.region</code>. These dimensions help identify the source of centralized log data and count toward the total dimension limit for metric filters.</p>
+     * <p>A list of system fields to emit as additional dimensions in the generated metrics. Valid
+     *       values are <code>@aws.account</code> and <code>@aws.region</code>. These dimensions help
+     *       identify the source of centralized log data and count toward the total dimension limit for
+     *       metric filters.</p>
      * @public
      */
     emitSystemFieldDimensions?: string[] | undefined;
@@ -6580,11 +7227,11 @@ export interface PutResourcePolicyRequest {
      *       that call.</p>
      *          <p></p>
      *          <p>
-     *             <code>\{ "Version": "2012-10-17", "Statement": [ \{ "Sid": "Route53LogsToCloudWatchLogs",
-     *         "Effect": "Allow", "Principal": \{ "Service": [ "route53.amazonaws.com" ] \}, "Action":
-     *         "logs:PutLogEvents", "Resource": "logArn", "Condition": \{ "ArnLike": \{ "aws:SourceArn":
-     *         "myRoute53ResourceArn" \}, "StringEquals": \{ "aws:SourceAccount": "myAwsAccountId" \} \} \} ]
-     *         \}</code>
+     *             <code>\{ "Version": "2012-10-17",		 	 	  "Statement": [ \{ "Sid":
+     *         "Route53LogsToCloudWatchLogs", "Effect": "Allow", "Principal": \{ "Service": [
+     *         "route53.amazonaws.com" ] \}, "Action": "logs:PutLogEvents", "Resource": "logArn",
+     *         "Condition": \{ "ArnLike": \{ "aws:SourceArn": "myRoute53ResourceArn" \}, "StringEquals": \{
+     *         "aws:SourceAccount": "myAwsAccountId" \} \} \} ] \}</code>
      *          </p>
      * @public
      */
@@ -6710,12 +7357,19 @@ export interface PutSubscriptionFilterRequest {
      */
     applyOnTransformedLogs?: boolean | undefined;
     /**
-     * <p>A filter expression that specifies which log events should be processed by this subscription filter based on system fields such as source account and source region. Uses selection criteria syntax with operators like <code>=</code>, <code>!=</code>, <code>AND</code>, <code>OR</code>, <code>IN</code>, <code>NOT IN</code>. Example: <code>@aws.region NOT IN ["cn-north-1"]</code> or <code>@aws.account = "123456789012" AND @aws.region = "us-east-1"</code>. Maximum length: 2000 characters.</p>
+     * <p>A filter expression that specifies which log events should be processed by this
+     *       subscription filter based on system fields such as source account and source region. Uses
+     *       selection criteria syntax with operators like <code>=</code>, <code>!=</code>,
+     *         <code>AND</code>, <code>OR</code>, <code>IN</code>, <code>NOT IN</code>. Example:
+     *         <code>@aws.region NOT IN ["cn-north-1"]</code> or <code>@aws.account = "123456789012" AND
+     *         @aws.region = "us-east-1"</code>. Maximum length: 2000 characters.</p>
      * @public
      */
     fieldSelectionCriteria?: string | undefined;
     /**
-     * <p>A list of system fields to include in the log events sent to the subscription destination. Valid values are <code>@aws.account</code> and <code>@aws.region</code>. These fields provide source information for centralized log data in the forwarded payload.</p>
+     * <p>A list of system fields to include in the log events sent to the subscription destination.
+     *       Valid values are <code>@aws.account</code> and <code>@aws.region</code>. These fields provide
+     *       source information for centralized log data in the forwarded payload.</p>
      * @public
      */
     emitSystemFields?: string[] | undefined;
@@ -6789,31 +7443,6 @@ export interface StartLiveTailRequest {
      */
     logEventFilterPattern?: string | undefined;
 }
-/**
- * <p>This exception is returned if an unknown error occurs during a Live Tail session.</p>
- * @public
- */
-export declare class SessionStreamingException extends __BaseException {
-    readonly name: "SessionStreamingException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<SessionStreamingException, __BaseException>);
-}
-/**
- * <p>This exception is returned in a Live Tail stream when the Live Tail session times out.
- *       Live Tail sessions time out after three hours.</p>
- * @public
- */
-export declare class SessionTimeoutException extends __BaseException {
-    readonly name: "SessionTimeoutException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<SessionTimeoutException, __BaseException>);
-}
 /**
  * <p>This object includes the stream returned by your <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_StartLiveTail.html">StartLiveTail</a>
  *       request.</p>
@@ -6880,6 +7509,10 @@ export declare namespace StartLiveTailResponseStream {
         SessionStreamingException?: never;
         $unknown: [string, any];
     }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
     interface Visitor<T> {
         sessionStart: (value: LiveTailSessionStart) => T;
         sessionUpdate: (value: LiveTailSessionUpdate) => T;
@@ -6887,7 +7520,6 @@ export declare namespace StartLiveTailResponseStream {
         SessionStreamingException: (value: SessionStreamingException) => T;
         _: (name: string, value: any) => T;
     }
-    const visit: <T>(value: StartLiveTailResponseStream, visitor: Visitor<T>) => T;
 }
 /**
  * @public
@@ -6932,26 +7564,6 @@ export interface QueryCompileError {
      */
     message?: string | undefined;
 }
-/**
- * <p>The query string is not valid. Details about this error are displayed in a
- *         <code>QueryCompileError</code> object. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_QueryCompileError.html">QueryCompileError</a>.</p>
- *          <p>For more information about valid query syntax, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_QuerySyntax.html">CloudWatch Logs Insights Query
- *         Syntax</a>.</p>
- * @public
- */
-export declare class MalformedQueryException extends __BaseException {
-    readonly name: "MalformedQueryException";
-    readonly $fault: "client";
-    /**
-     * <p>Reserved.</p>
-     * @public
-     */
-    queryCompileError?: QueryCompileError | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MalformedQueryException, __BaseException>);
-}
 /**
  * @public
  */
@@ -7063,6 +7675,7 @@ export interface StopQueryResponse {
     success?: boolean | undefined;
 }
 /**
+ * @deprecated Please use the generic tagging API model TagResourceRequest.
  * @public
  */
 export interface TagLogGroupRequest {
@@ -7102,23 +7715,6 @@ export interface TagResourceRequest {
      */
     tags: Record<string, string> | undefined;
 }
-/**
- * <p>A resource can have no more than 50 tags.</p>
- * @public
- */
-export declare class TooManyTagsException extends __BaseException {
-    readonly name: "TooManyTagsException";
-    readonly $fault: "client";
-    /**
-     * <p>The name of the resource.</p>
-     * @public
-     */
-    resourceName?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<TooManyTagsException, __BaseException>);
-}
 /**
  * @public
  */
@@ -7218,6 +7814,7 @@ export interface TestTransformerResponse {
     transformedLogs?: TransformedLogRecord[] | undefined;
 }
 /**
+ * @deprecated Please use the generic tagging API model UntagResourceRequest.
  * @public
  */
 export interface UntagLogGroupRequest {
@@ -7257,19 +7854,6 @@ export interface UntagResourceRequest {
      */
     tagKeys: string[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const SuppressionUnit: {
-    readonly HOURS: "HOURS";
-    readonly MINUTES: "MINUTES";
-    readonly SECONDS: "SECONDS";
-};
-/**
- * @public
- */
-export type SuppressionUnit = (typeof SuppressionUnit)[keyof typeof SuppressionUnit];
 /**
  * <p>If you are suppressing an anomaly temporariliy, this structure defines how long the
  *       suppression period is to be.</p>
@@ -7288,18 +7872,6 @@ export interface SuppressionPeriod {
      */
     suppressionUnit?: SuppressionUnit | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const SuppressionType: {
-    readonly INFINITE: "INFINITE";
-    readonly LIMITED: "LIMITED";
-};
-/**
- * @public
- */
-export type SuppressionType = (typeof SuppressionType)[keyof typeof SuppressionType];
 /**
  * @public
  */
@@ -7418,3 +7990,219 @@ export interface UpdateLogAnomalyDetectorRequest {
      */
     enabled: boolean | undefined;
 }
+/**
+ * @public
+ */
+export interface UpdateScheduledQueryRequest {
+    /**
+     * <p>The ARN or name of the scheduled query to update.</p>
+     * @public
+     */
+    identifier: string | undefined;
+    /**
+     * <p>An updated description for the scheduled query.</p>
+     * @public
+     */
+    description?: string | undefined;
+    /**
+     * <p>The updated query language for the scheduled query.</p>
+     * @public
+     */
+    queryLanguage: QueryLanguage | undefined;
+    /**
+     * <p>The updated query string to execute.</p>
+     * @public
+     */
+    queryString: string | undefined;
+    /**
+     * <p>The updated array of log group names or ARNs to query.</p>
+     * @public
+     */
+    logGroupIdentifiers?: string[] | undefined;
+    /**
+     * <p>The updated cron expression that defines when the scheduled query runs.</p>
+     * @public
+     */
+    scheduleExpression: string | undefined;
+    /**
+     * <p>The updated timezone for evaluating the schedule expression.</p>
+     * @public
+     */
+    timezone?: string | undefined;
+    /**
+     * <p>The updated time offset in seconds that defines the lookback period for the query.</p>
+     * @public
+     */
+    startTimeOffset?: number | undefined;
+    /**
+     * <p>The updated configuration for where to deliver query results.</p>
+     * @public
+     */
+    destinationConfiguration?: DestinationConfiguration | undefined;
+    /**
+     * <p>The updated start time for the scheduled query in Unix epoch format.</p>
+     * @public
+     */
+    scheduleStartTime?: number | undefined;
+    /**
+     * <p>The updated end time for the scheduled query in Unix epoch format.</p>
+     * @public
+     */
+    scheduleEndTime?: number | undefined;
+    /**
+     * <p>The updated ARN of the IAM role that grants permissions to execute the query and deliver
+     *       results.</p>
+     * @public
+     */
+    executionRoleArn: string | undefined;
+    /**
+     * <p>The updated state of the scheduled query.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateScheduledQueryResponse {
+    /**
+     * <p>The ARN of the updated scheduled query.</p>
+     * @public
+     */
+    scheduledQueryArn?: string | undefined;
+    /**
+     * <p>The name of the updated scheduled query.</p>
+     * @public
+     */
+    name?: string | undefined;
+    /**
+     * <p>The description of the updated scheduled query.</p>
+     * @public
+     */
+    description?: string | undefined;
+    /**
+     * <p>The query language of the updated scheduled query.</p>
+     * @public
+     */
+    queryLanguage?: QueryLanguage | undefined;
+    /**
+     * <p>The query string of the updated scheduled query.</p>
+     * @public
+     */
+    queryString?: string | undefined;
+    /**
+     * <p>The log groups queried by the updated scheduled query.</p>
+     * @public
+     */
+    logGroupIdentifiers?: string[] | undefined;
+    /**
+     * <p>The cron expression of the updated scheduled query.</p>
+     * @public
+     */
+    scheduleExpression?: string | undefined;
+    /**
+     * <p>The timezone of the updated scheduled query.</p>
+     * @public
+     */
+    timezone?: string | undefined;
+    /**
+     * <p>The time offset of the updated scheduled query.</p>
+     * @public
+     */
+    startTimeOffset?: number | undefined;
+    /**
+     * <p>The destination configuration of the updated scheduled query.</p>
+     * @public
+     */
+    destinationConfiguration?: DestinationConfiguration | undefined;
+    /**
+     * <p>The state of the updated scheduled query.</p>
+     * @public
+     */
+    state?: ScheduledQueryState | undefined;
+    /**
+     * <p>The timestamp when the updated scheduled query was last executed.</p>
+     * @public
+     */
+    lastTriggeredTime?: number | undefined;
+    /**
+     * <p>The status of the most recent execution of the updated scheduled query.</p>
+     * @public
+     */
+    lastExecutionStatus?: ExecutionStatus | undefined;
+    /**
+     * <p>The start time of the updated scheduled query.</p>
+     * @public
+     */
+    scheduleStartTime?: number | undefined;
+    /**
+     * <p>The end time of the updated scheduled query.</p>
+     * @public
+     */
+    scheduleEndTime?: number | undefined;
+    /**
+     * <p>The execution role ARN of the updated scheduled query.</p>
+     * @public
+     */
+    executionRoleArn?: string | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was originally created.</p>
+     * @public
+     */
+    creationTime?: number | undefined;
+    /**
+     * <p>The timestamp when the scheduled query was last updated.</p>
+     * @public
+     */
+    lastUpdatedTime?: number | undefined;
+}
+/**
+ * <p>Defines the data type structure for a log field, including the type, element information,
+ *       and nested fields for complex types.</p>
+ * @public
+ */
+export interface LogFieldType {
+    /**
+     * <p>The data type of the log field.</p>
+     * @public
+     */
+    type?: string | undefined;
+    /**
+     * <p>For array or collection types, specifies the element type information.</p>
+     * @public
+     */
+    element?: LogFieldType | undefined;
+    /**
+     * <p>For complex types, contains the nested field definitions.</p>
+     * @public
+     */
+    fields?: LogFieldsListItem[] | undefined;
+}
+/**
+ * <p>Represents a log field with its name and data type information for a specific data
+ *       source.</p>
+ * @public
+ */
+export interface LogFieldsListItem {
+    /**
+     * <p>The name of the log field.</p>
+     * @public
+     */
+    logFieldName?: string | undefined;
+    /**
+     * <p>The data type information for the log field.</p>
+     * @public
+     */
+    logFieldType?: LogFieldType | undefined;
+}
+/**
+ * @public
+ */
+export interface GetLogFieldsResponse {
+    /**
+     * <p>The list of log fields for the specified data source, including field names and their data
+     *       types.</p>
+     * @public
+     */
+    logFields?: LogFieldsListItem[] | undefined;
+}