@mavogel/awscdk-rootmail 0.1.39 → 0.1.40

package/.jsii

@@ -8,11 +8,11 @@
     ]
   },
   "bundled": {
-    "@aws-sdk/client-cloudwatch-logs": "^3.1162.0",
-    "@aws-sdk/client-route-53": "^3.1162.0",
-    "@aws-sdk/client-s3": "^3.1162.0",
-    "@aws-sdk/client-ses": "^3.1162.0",
-    "@aws-sdk/client-ssm": "^3.1162.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.1163.0",
+    "@aws-sdk/client-route-53": "^3.1163.0",
+    "@aws-sdk/client-s3": "^3.1163.0",
+    "@aws-sdk/client-ses": "^3.1163.0",
+    "@aws-sdk/client-ssm": "^3.1163.0",
     "cdk-nag": "^3.0.1",
     "mailparser": "^3.14.2",
     "uuid": "^14.0.3"
@@ -9620,6 +9620,6 @@
       "symbolId": "src/ses-receive:SESReceiveProps"
     }
   },
-  "version": "0.1.39",
-  "fingerprint": "Sf+vK0SfjTMDQkp294jS2vEpoXrtuAtgICEaGMeNRKo="
+  "version": "0.1.40",
+  "fingerprint": "8ocT3HObwliSsvKP+o8Hb+25w5wnvq5he/ZQH21iX+o="
 }

package/lib/rootmail.js

@@ -11,7 +11,7 @@ const ses_receive_1 = require("./ses-receive");
  * Rootmail construct
  */
 class Rootmail extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.1.39" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.1.40" };
     /**
      * The name parameter in SSM to store the domain name server.
      */

package/lib/ses-receive.js

@@ -11,7 +11,7 @@ const ses_receipt_ruleset_activation_1 = require("./ses-receipt-ruleset-activati
  * SES Receive construct
  */
 class SESReceive extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.1.39" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.1.40" };
     constructor(scope, id, props) {
         super(scope, id);
         const filteredEmailSubjects = props.filteredEmailSubjects || [];

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-cjs/index.js

@@ -70,7 +70,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1161.0";
+var version = "3.1162.0";
 var packageInfo = {
 	version: version};
 
@@ -4416,6 +4416,7 @@ const DeliverySourceConfigurationSchemaValueType = {
 };
 const LogGroupClass = {
     DELIVERY: "DELIVERY",
+    ESSENTIALS: "ESSENTIALS",
     INFREQUENT_ACCESS: "INFREQUENT_ACCESS",
     STANDARD: "STANDARD",
 };

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-es/models/enums.js

@@ -64,6 +64,7 @@ export const DeliverySourceConfigurationSchemaValueType = {
 };
 export const LogGroupClass = {
     DELIVERY: "DELIVERY",
+    ESSENTIALS: "ESSENTIALS",
     INFREQUENT_ACCESS: "INFREQUENT_ACCESS",
     STANDARD: "STANDARD",
 };

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/CreateLogGroupCommand.d.ts

@@ -73,7 +73,7 @@ declare const CreateLogGroupCommand_base: {
  *   tags: { // Tags
  *     "<keys>": "STRING_VALUE",
  *   },
- *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  *   deletionProtectionEnabled: true || false,
  * };
  * const command = new CreateLogGroupCommand(input);

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/DeleteAccountPolicyCommand.d.ts

@@ -27,6 +27,9 @@ declare const DeleteAccountPolicyCommand_base: {
  * <p>Deletes a CloudWatch Logs account policy. This stops the account-wide policy from
  *       applying to log groups or data sources in the account. If you delete a data protection policy
  *       or subscription filter policy, any log-group level policies of those types remain in effect.
+ *       If you delete a retention policy, the log groups that it applied to use their own retention
+ *       setting, unless another retention policy applies to them. Deleting a retention policy does not
+ *       restore log events that CloudWatch Logs has already deleted.
  *       This operation supports deletion of data source-based field index policies, including facet
  *       configurations, in addition to log group-based policies.</p>
  *          <p>To use this operation, you must be signed on with the correct permissions depending on the
@@ -53,6 +56,13 @@ declare const DeleteAccountPolicyCommand_base: {
  *           will no longer be available for interactive exploration in the CloudWatch Logs Insights
  *           console. However, facet data is retained for up to 30 days.</p>
  *             </li>
+ *             <li>
+ *                <p>To delete a retention policy, you must have the
+ *             <code>logs:DeleteRetentionPolicy</code> and <code>logs:DeleteAccountPolicy</code>
+ *           permissions. To preview the impact of deleting a retention policy, specify
+ *             <code>true</code> for <code>dryRun</code>. A dry run requires the same
+ *           permissions as the operation that it previews, and no additional permissions.</p>
+ *             </li>
  *          </ul>
  *          <p>If you delete a field index policy, the indexing of the log events that happened before
  *       you deleted the policy will still be used for up to 30 days to improve CloudWatch Logs

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/DeleteRetentionPolicyCommand.d.ts

@@ -27,6 +27,9 @@ declare const DeleteRetentionPolicyCommand_base: {
  * <p>Deletes the specified retention policy.</p>
  *          <p>Log events do not expire if they belong to log groups without a retention
  *       policy.</p>
+ *          <p>If an account-level retention policy applies to this log group, the log group uses
+ *       the retention period from that policy. For more information about account-level retention
+ *       policies, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutAccountPolicy.html">PutAccountPolicy</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/DescribeAccountPoliciesCommand.d.ts

@@ -46,6 +46,10 @@ declare const DescribeAccountPoliciesCommand_base: {
  *                <p>To see field index policies, you must have the <code>logs:DescribeIndexPolicies</code>
  *           and <code>logs:DescribeAccountPolicies</code> permissions.</p>
  *             </li>
+ *             <li>
+ *                <p>To see retention policies, you must have the <code>logs:DescribeAccountPolicies</code>
+ *           permission.</p>
+ *             </li>
  *          </ul>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/DescribeLogGroupsCommand.d.ts

@@ -27,6 +27,9 @@ declare const DescribeLogGroupsCommand_base: {
  * <p>Returns information about log groups, including data sources that ingest into each log
  *       group. You can return all your log groups or filter the results by prefix. The results are
  *       ASCII-sorted by log group name.</p>
+ *          <p>If an account-level retention policy applies to a log group, <code>retentionInDays</code>
+ *       shows the retention period from that policy, and <code>retentionPolicyName</code> shows the
+ *       name of the policy.</p>
  *          <p>CloudWatch Logs doesn't support IAM policies that control access to the
  *         <code>DescribeLogGroups</code> action by using the
  *           <code>aws:ResourceTag/<i>key-name</i>
@@ -56,7 +59,7 @@ declare const DescribeLogGroupsCommand_base: {
  *   nextToken: "STRING_VALUE",
  *   limit: Number("int"),
  *   includeLinkedAccounts: true || false,
- *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  *   logGroupIdentifiers: [ // DescribeLogGroupsLogGroupIdentifiers
  *     "STRING_VALUE",
  *   ],
@@ -77,7 +80,7 @@ declare const DescribeLogGroupsCommand_base: {
  * //       inheritedProperties: [ // InheritedProperties
  * //         "ACCOUNT_DATA_PROTECTION",
  * //       ],
- * //       logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ * //       logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  * //       logGroupArn: "STRING_VALUE",
  * //       deletionProtectionEnabled: true || false,
  * //       bearerTokenAuthenticationEnabled: true || false,

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/ListAggregateLogGroupSummariesCommand.d.ts

@@ -48,7 +48,7 @@ declare const ListAggregateLogGroupSummariesCommand_base: {
  *     "STRING_VALUE",
  *   ],
  *   includeLinkedAccounts: true || false,
- *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  *   logGroupNamePattern: "STRING_VALUE",
  *   dataSources: [ // DataSourceFilters
  *     { // DataSourceFilter

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/ListLogGroupsCommand.d.ts

@@ -44,7 +44,7 @@ declare const ListLogGroupsCommand_base: {
  * const client = new CloudWatchLogsClient(config);
  * const input = { // ListLogGroupsRequest
  *   logGroupNamePattern: "STRING_VALUE",
- *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ *   logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  *   includeLinkedAccounts: true || false,
  *   accountIdentifiers: [ // AccountIds
  *     "STRING_VALUE",
@@ -76,7 +76,7 @@ declare const ListLogGroupsCommand_base: {
  * //     { // LogGroupSummary
  * //       logGroupName: "STRING_VALUE",
  * //       logGroupArn: "STRING_VALUE",
- * //       logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY",
+ * //       logGroupClass: "STANDARD" || "INFREQUENT_ACCESS" || "DELIVERY" || "ESSENTIALS",
  * //     },
  * //   ],
  * //   nextToken: "STRING_VALUE",

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/PutAccountPolicyCommand.d.ts

@@ -25,8 +25,9 @@ declare const PutAccountPolicyCommand_base: {
 };
 /**
  * <p>Creates an account-level data protection policy, subscription filter policy, field index
- *       policy, transformer policy, or metric extraction policy that applies to all log groups, a
- *       subset of log groups, or a data source name and type combination in the account. Account-level
+ *       policy, transformer policy, metric extraction policy, or retention policy that applies to all
+ *       log groups, a subset of log groups, or a data source name and type combination in the
+ *       account. Account-level
  *       policies are Region-specific: a policy applies only to log groups in the Region where you
  *       create it. To apply a policy across multiple Regions, create the policy separately in each
  *       Region.</p>
@@ -77,6 +78,11 @@ declare const PutAccountPolicyCommand_base: {
  *           account-level only and have no log-group-level equivalent, so no conflict resolution
  *           applies.</p>
  *             </li>
+ *             <li>
+ *                <p>
+ *                   <i>Retention policies</i> — An account-level retention policy overrides
+ *           the retention setting of the log group.</p>
+ *             </li>
  *          </ul>
  *          <p>For field index policies, you can configure indexed fields as <i>facets</i>
  *       to enable interactive exploration of your logs. Facets provide value distributions and counts
@@ -114,6 +120,11 @@ declare const PutAccountPolicyCommand_base: {
  *             <code>logs:PutMetricExtractionPolicy</code> and <code>logs:PutAccountPolicy</code>
  *           permissions.</p>
  *             </li>
+ *             <li>
+ *                <p>To create a retention policy, you must have the <code>logs:PutRetentionPolicy</code>
+ *           and <code>logs:PutAccountPolicy</code> permissions. A dry run requires the same
+ *           permissions as the operation that it previews, and no additional permissions.</p>
+ *             </li>
  *          </ul>
  *          <p>
  *             <b>Data protection policy</b>
@@ -487,6 +498,49 @@ declare const PutAccountPolicyCommand_base: {
  *             <code>"/aws/lambda"</code>.</p>
  *             </li>
  *          </ul>
+ *          <p>
+ *             <b>Retention policy</b>
+ *          </p>
+ *          <p>A retention policy sets the retention period for log groups in your account. You can use an
+ *       account-level retention policy to set a default retention period for all log groups in the
+ *       account, or for a subset of log groups that you specify with the
+ *         <code>selectionCriteria</code> parameter. CloudWatch Logs automatically deletes log events
+ *       that are older than the retention period.</p>
+ *          <p>Each account can have up to 20 account-level retention policies in each Region. To scope a
+ *       retention policy to a subset of log groups, use <code>LogGroupNamePrefix</code> in
+ *         <code>selectionCriteria</code>. Retention policies support log group name prefixes only. If
+ *       you omit <code>selectionCriteria</code>, the policy applies
+ *       to all log groups in the account.</p>
+ *          <p>Unlike other account-level policy types, retention policies can have overlapping selection
+ *       criteria. When more than one retention policy applies to a log group, the policy with the
+ *       longest retention period is used. A policy that specifies <code>NEVER_EXPIRE</code> is treated
+ *       as the longest retention period. This lets you set a baseline retention period for the account,
+ *       apply longer retention periods to specific log groups, and exempt specific log groups from
+ *       expiring at all. If two policies that apply to the same log group specify the same retention
+ *       period, the policy that was created first is the one reported in
+ *         <code>retentionPolicyName</code>.</p>
+ *          <note>
+ *             <p>Account-level retention policies require a minimum retention period of 30 days.</p>
+ *          </note>
+ *          <note>
+ *             <p>A retention policy takes effect 24 hours after you create it. If you update a policy, the
+ *         new retention period takes effect 24 hours after the update, and the previous retention
+ *         period stays in effect until then. During this period, <code>DescribeLogGroups</code> and log
+ *         event expiration use the retention period that is currently in effect, but a dry run reports
+ *         the impact as if the policy were already in effect.</p>
+ *          </note>
+ *          <p>Before you create, update, or delete a retention policy, you can specify
+ *         <code>true</code> for <code>dryRun</code> to preview how many log groups would have a longer,
+ *       shorter, or unchanged retention period. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DryRunResult.html">DryRunResult</a>.</p>
+ *          <important>
+ *             <p>An account-level retention policy replaces the retention period set on a log group,
+ *         including when the log group's own retention period is longer. For example, if a log group is
+ *         set to retain log events for 10 years and you create a retention policy that sets a 90-day
+ *         retention period for that log group, CloudWatch Logs deletes the log events in that log group
+ *         that are older than 90 days. Specify <code>true</code> for <code>dryRun</code> to see which
+ *         log groups would have a shorter retention period before you create or update the
+ *         policy.</p>
+ *          </important>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/commands/PutRetentionPolicyCommand.d.ts

@@ -27,6 +27,14 @@ declare const PutRetentionPolicyCommand_base: {
  * <p>Sets the retention of the specified log group. With a retention policy, you can
  *       configure the number of days for which to retain log events in the specified log
  *       group.</p>
+ *          <p>Account-level retention policies created with <a href="https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutAccountPolicy.html">PutAccountPolicy</a> override the retention that you
+ *       set with <code>PutRetentionPolicy</code>. If an account-level retention policy applies to the
+ *       log group, this operation succeeds and CloudWatch Logs saves the retention period that you
+ *       specify, but the retention period from the account-level policy continues to determine when
+ *       log events in the log group expire. <code>DescribeLogGroups</code> returns the retention period
+ *       from the policy in <code>retentionInDays</code> and the name of the policy in
+ *         <code>retentionPolicyName</code>. The retention period that you set with this operation takes
+ *       effect if the account-level policy no longer applies to the log group.</p>
  *          <note>
  *             <p>CloudWatch Logs doesn't immediately delete log events when they reach their retention
  *         setting. It typically takes up to 72 hours after that before log events are deleted, but in

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/models/enums.d.ts

@@ -148,6 +148,7 @@ export type DeliverySourceConfigurationSchemaValueType = (typeof DeliverySourceC
  */
 export declare const LogGroupClass: {
     readonly DELIVERY: "DELIVERY";
+    readonly ESSENTIALS: "ESSENTIALS";
     readonly INFREQUENT_ACCESS: "INFREQUENT_ACCESS";
     readonly STANDARD: "STANDARD";
 };

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/models/models_0.d.ts

@@ -1081,7 +1081,7 @@ export interface CreateLogGroupRequest {
      */
     tags?: Record<string, string> | undefined;
     /**
-     * <p>Use this parameter to specify the log group class for this log group. There are three
+     * <p>Use this parameter to specify the log group class for this log group. There are four
      *       classes:</p>
      *          <ul>
      *             <li>
@@ -1092,6 +1092,10 @@ export interface CreateLogGroupRequest {
      *           features and incurs lower costs.</p>
      *             </li>
      *             <li>
+     *                <p>The <code>Essentials</code> log class supports a subset of CloudWatch Logs
+     *           features and incurs lower costs.</p>
+     *             </li>
+     *             <li>
      *                <p>Use the <code>Delivery</code> log class only for delivering Lambda
      *           logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in
      *           the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't
@@ -2941,7 +2945,9 @@ export interface DescribeLogGroupsRequest {
     /**
      * <p>Use this parameter to limit the results to only those log groups in the specified log
      *       group class. If you omit this parameter, log groups of all classes can be returned.</p>
-     *          <p>Specifies the log group class for this log group. There are three classes:</p>
+     *          <p>If you specify either <code>INFREQUENT_ACCESS</code> or <code>ESSENTIALS</code>, the
+     *       results include log groups in both the Infrequent Access and Essentials log classes.</p>
+     *          <p>Specifies the log group class for this log group. There are four classes:</p>
      *          <ul>
      *             <li>
      *                <p>The <code>Standard</code> log class supports all CloudWatch Logs features.</p>
@@ -2951,6 +2957,10 @@ export interface DescribeLogGroupsRequest {
      *           features and incurs lower costs.</p>
      *             </li>
      *             <li>
+     *                <p>The <code>Essentials</code> log class supports a subset of CloudWatch Logs
+     *           features and incurs lower costs.</p>
+     *             </li>
+     *             <li>
      *                <p>Use the <code>Delivery</code> log class only for delivering Lambda
      *           logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in
      *           the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't
@@ -3038,7 +3048,7 @@ export interface LogGroup {
      */
     inheritedProperties?: InheritedProperty[] | undefined;
     /**
-     * <p>This specifies the log group class for this log group. There are three classes:</p>
+     * <p>This specifies the log group class for this log group. There are four classes:</p>
      *          <ul>
      *             <li>
      *                <p>The <code>Standard</code> log class supports all CloudWatch Logs features.</p>
@@ -3048,6 +3058,10 @@ export interface LogGroup {
      *           features and incurs lower costs.</p>
      *             </li>
      *             <li>
+     *                <p>The <code>Essentials</code> log class supports a subset of CloudWatch Logs
+     *           features and incurs lower costs.</p>
+     *             </li>
+     *             <li>
      *                <p>Use the <code>Delivery</code> log class only for delivering Lambda
      *           logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in
      *           the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't
@@ -3055,7 +3069,7 @@ export interface LogGroup {
      *           queries.</p>
      *             </li>
      *          </ul>
-     *          <p>For details about the features supported by the Standard and Infrequent Access classes,
+     *          <p>For details about the features supported by the Standard, Infrequent Access, and Essentials classes,
      *       see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html">Log classes</a>
      *          </p>
      * @public
@@ -7204,6 +7218,36 @@ export interface PutAccountPolicyRequest {
      *          <p>You can use <code>FieldsV2</code> to specify the type for each field. Supported types are
      *         <code>FIELD_INDEX</code> and <code>FACET</code>. Field names within <code>Fields</code> and
      *         <code>FieldsV2</code> must be mutually exclusive.</p>
+     *          <p>
+     *             <b>Retention policy</b>
+     *          </p>
+     *          <p>A retention policy must include the following attributes in a JSON block:</p>
+     *          <dl>
+     *             <dt>retentionInDays</dt>
+     *             <dd>
+     *                <p>The number of days to retain log events. Valid values are 30, 60, 90, 120, 150, 180,
+     *             365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653. To retain log events
+     *             indefinitely, specify the string <code>NEVER_EXPIRE</code>.</p>
+     *             </dd>
+     *             <dt>enforcementMode</dt>
+     *             <dd>
+     *                <p>Specifies which log groups the policy applies to. Valid values are
+     *               <code>NEW_ONLY</code> and <code>RETROACTIVE</code>.</p>
+     *                <p>
+     *                   <code>RETROACTIVE</code> applies the policy to every log group that matches the
+     *             selection criteria, including log groups that existed before you created the
+     *             policy.</p>
+     *                <p>
+     *                   <code>NEW_ONLY</code> applies the policy only to log groups that are created after
+     *             you create the policy. Log groups that already existed when you created the policy keep
+     *             their own retention period.</p>
+     *             </dd>
+     *          </dl>
+     *          <p>The following is an example of a retention policy document.</p>
+     *          <p>
+     *             <code>"policyDocument": "\{\"retentionInDays\": 90, \"enforcementMode\":
+     *         \"RETROACTIVE\"\}"</code>
+     *          </p>
      * @public
      */
     policyDocument: string | undefined;
@@ -7223,8 +7267,9 @@ export interface PutAccountPolicyRequest {
      * <p>Use this parameter to apply the new policy to a subset of log groups in the account or a
      *       data source name and type combination.  </p>
      *          <p>Specifying <code>selectionCriteria</code> is valid only when you specify
-     *         <code>SUBSCRIPTION_FILTER_POLICY</code>, <code>FIELD_INDEX_POLICY</code> or
-     *         <code>TRANSFORMER_POLICY</code>for <code>policyType</code>.</p>
+     *         <code>SUBSCRIPTION_FILTER_POLICY</code>, <code>FIELD_INDEX_POLICY</code>,
+     *         <code>TRANSFORMER_POLICY</code>, or <code>RETENTION_POLICY</code> for
+     *         <code>policyType</code>.</p>
      *          <ul>
      *             <li>
      *                <p>If <code>policyType</code> is <code>SUBSCRIPTION_FILTER_POLICY</code>, the only
@@ -7256,6 +7301,12 @@ export interface PutAccountPolicyRequest {
      *         use either <code>LogGroupNamePrefix</code> by itself or <code>DataSourceName</code> and
      *           <code>DataSourceType</code> together.</p>
      *             </li>
+     *             <li>
+     *                <p>If <code>policyType</code> is <code>RETENTION_POLICY</code>, the only supported
+     *             <code>selectionCriteria</code> filter is <code>LogGroupNamePrefix</code>. If you omit
+     *             <code>selectionCriteria</code>, the retention policy applies to all log groups in the
+     *           account.</p>
+     *             </li>
      *          </ul>
      *          <p>The <code>selectionCriteria</code> string can be up to 25KB in length. The length is
      *       determined by using its UTF-8 bytes.</p>

package/node_modules/@aws-sdk/client-cloudwatch-logs/dist-types/ts3.4/models/enums.d.ts

@@ -77,6 +77,7 @@ export type DeliverySourceConfigurationSchemaValueType =
   (typeof DeliverySourceConfigurationSchemaValueType)[keyof typeof DeliverySourceConfigurationSchemaValueType];
 export declare const LogGroupClass: {
   readonly DELIVERY: "DELIVERY";
+  readonly ESSENTIALS: "ESSENTIALS";
   readonly INFREQUENT_ACCESS: "INFREQUENT_ACCESS";
   readonly STANDARD: "STANDARD";
 };

package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-cloudwatch-logs",
-  "version": "3.1162.0",
+  "version": "3.1163.0",
   "description": "AWS SDK for JavaScript Cloudwatch Logs Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-cloudwatch-logs",
   "license": "Apache-2.0",

package/node_modules/@aws-sdk/client-route-53/dist-cjs/index.js

@@ -70,7 +70,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1161.0";
+var version = "3.1162.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-route-53/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-route-53",
-  "version": "3.1162.0",
+  "version": "3.1163.0",
   "description": "AWS SDK for JavaScript Route 53 Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-route-53",
   "license": "Apache-2.0",

package/node_modules/@aws-sdk/client-s3/dist-cjs/index.js

@@ -4779,7 +4779,7 @@ var WriteGetObjectResponse$ = [9, n0, _WGOR,
 class CreateSessionCommand extends command(_ep4, _mw0, "CreateSession", CreateSession$) {
 }
 
-var version = "3.1161.0";
+var version = "3.1162.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-s3/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-s3",
-  "version": "3.1162.0",
+  "version": "3.1163.0",
   "description": "AWS SDK for JavaScript S3 Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3",
   "license": "Apache-2.0",
@@ -67,7 +67,7 @@
     "tslib": "^2.6.2"
   },
   "devDependencies": {
-    "@aws-sdk/signature-v4-crt": "3.1162.0",
+    "@aws-sdk/signature-v4-crt": "3.1163.0",
     "@smithy/snapshot-testing": "^2.4.0",
     "@tsconfig/node20": "20.1.8",
     "@types/node": "^20.14.8",

package/node_modules/@aws-sdk/client-ses/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1161.0";
+var version = "3.1162.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-ses/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-ses",
-  "version": "3.1162.0",
+  "version": "3.1163.0",
   "description": "AWS SDK for JavaScript Ses Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-ses",
   "license": "Apache-2.0",

package/node_modules/@aws-sdk/client-ssm/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1161.0";
+var version = "3.1162.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-ssm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-ssm",
-  "version": "3.1162.0",
+  "version": "3.1163.0",
   "description": "AWS SDK for JavaScript Ssm Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-ssm",
   "license": "Apache-2.0",

package/package.json

@@ -79,11 +79,11 @@
     "constructs": "^10.5.1"
   },
   "dependencies": {
-    "@aws-sdk/client-cloudwatch-logs": "^3.1162.0",
-    "@aws-sdk/client-route-53": "^3.1162.0",
-    "@aws-sdk/client-s3": "^3.1162.0",
-    "@aws-sdk/client-ses": "^3.1162.0",
-    "@aws-sdk/client-ssm": "^3.1162.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.1163.0",
+    "@aws-sdk/client-route-53": "^3.1163.0",
+    "@aws-sdk/client-s3": "^3.1163.0",
+    "@aws-sdk/client-ses": "^3.1163.0",
+    "@aws-sdk/client-ssm": "^3.1163.0",
     "@mavogel/mvc-projen": "^0.0.72",
     "cdk-nag": "^3.0.1",
     "constructs": "^10.5.1",
@@ -122,7 +122,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.1.39",
+  "version": "0.1.40",
   "jest": {
     "coverageProvider": "v8",
     "transformIgnorePatterns": [