aws-cdk-lib 2.182.0__py3-none-any.whl → 2.184.0__py3-none-any.whl

aws_cdk/aws_lambda_event_sources/__init__.py

@@ -169,7 +169,7 @@ and add it to your Lambda function. The following parameters will impact Amazon
 * **reportBatchItemFailures**: Allow functions to return partially successful responses for a batch of records.
 * **maxBatchingWindow**: The maximum amount of time to gather records before invoking the lambda. This increases the likelihood of a full batch at the cost of delayed processing.
 * **maxRecordAge**: The maximum age of a record that will be sent to the function for processing. Records that exceed the max age will be treated as failures.
-* **onFailure**: In the event a record fails after all retries or if the record age has exceeded the configured value, the record will be sent to SQS queue or SNS topic that is specified here
+* **onFailure**: In the event a record fails after all retries or if the record age has exceeded the configured value, the record will be sent to S3 bucket, SQS queue or SNS topic that is specified here
 * **parallelizationFactor**: The number of batches to concurrently process on each shard.
 * **retryAttempts**: The maximum number of times a record should be retried in the event of failure.
 * **startingPosition**: Will determine where to being consumption, either at the most recent ('LATEST') record or the oldest record ('TRIM_HORIZON'). 'TRIM_HORIZON' will ensure you process all available data, while 'LATEST' will ignore all records that arrived prior to attaching the event source.
@@ -238,7 +238,7 @@ behavior:
 * **reportBatchItemFailures**: Allow functions to return partially successful responses for a batch of records.
 * **maxBatchingWindow**: The maximum amount of time to gather records before invoking the lambda. This increases the likelihood of a full batch at the cost of possibly delaying processing.
 * **maxRecordAge**: The maximum age of a record that will be sent to the function for processing. Records that exceed the max age will be treated as failures.
-* **onFailure**: In the event a record fails and consumes all retries, the record will be sent to SQS queue or SNS topic that is specified here
+* **onFailure**: In the event a record fails and consumes all retries, the record will be sent to S3 bucket, SQS queue or SNS topic that is specified here
 * **parallelizationFactor**: The number of batches to concurrently process on each shard.
 * **retryAttempts**: The maximum number of times a record should be retried in the event of failure.
 * **startingPosition**: Will determine where to begin consumption. 'LATEST' will start at the most recent record and ignore all records that arrived prior to attaching the event source, 'TRIM_HORIZON' will start at the oldest record and ensure you process all available data, while 'AT_TIMESTAMP' will start reading records from a specified time stamp. Note that 'AT_TIMESTAMP' is only supported for Amazon Kinesis streams.
@@ -2592,7 +2592,7 @@ class StreamEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -2674,7 +2674,7 @@ class StreamEventSource(
         :param max_concurrency: The maximum concurrency setting limits the number of concurrent instances of the function that an Amazon SQS event source can invoke. Default: - No specific limit.
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days Default: - infinite or until the record expires.
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param provisioned_poller_config: Configuration for provisioned pollers that read from the event source. When specified, allows control over the minimum and maximum number of pollers that can be provisioned to process events from the source. Default: - no provisioned pollers
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
@@ -2682,7 +2682,7 @@ class StreamEventSource(
         :param source_access_configurations: Specific settings like the authentication protocol or the VPC components to secure access to your event source. Default: - none
         :param starting_position: The position in the DynamoDB, Kinesis or MSK stream where AWS Lambda should start reading. Default: - no starting position
         :param starting_position_timestamp: The time from which to start reading, in Unix time seconds. Default: - no timestamp
-        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(ODF). Currently only MSK and self managed kafka event support S3 ODF Default: false
+        :param support_s3_on_failure_destination: Check if support S3 onfailure destination(OFD). Kinesis, DynamoDB, MSK and self managed kafka event support S3 OFD Default: false
         :param tumbling_window: The size of the tumbling windows to group records sent to DynamoDB or Kinesis. Default: - None
         '''
         options = _EventSourceMappingOptions_b3f2bb85(
@@ -2788,7 +2788,7 @@ class StreamEventSourceProps(BaseStreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3010,7 +3010,7 @@ class StreamEventSourceProps(BaseStreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''
@@ -3135,7 +3135,7 @@ class DynamoEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3245,7 +3245,7 @@ class DynamoEventSourceProps(StreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3449,7 +3449,7 @@ class DynamoEventSourceProps(StreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''
@@ -3572,7 +3572,7 @@ class KinesisConsumerEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3689,7 +3689,7 @@ class KinesisEventSource(
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -3807,7 +3807,7 @@ class KinesisEventSourceProps(StreamEventSourceProps):
         :param filters: Add filter criteria option. Default: - None
         :param max_record_age: The maximum age of a record that Lambda sends to a function for processing. Valid Range: - Minimum value of 60 seconds - Maximum value of 7 days The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records. Record are valid until it expires in the event source. Default: -1
         :param metrics_config: Configuration for enhanced monitoring metrics collection When specified, enables collection of additional metrics for the stream event source. Default: - Enhanced monitoring is disabled
-        :param on_failure: An Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
+        :param on_failure: An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records. Default: - discarded records are ignored
         :param parallelization_factor: The number of batches to process from each shard concurrently. Valid Range: - Minimum value of 1 - Maximum value of 10 Default: 1
         :param report_batch_item_failures: Allow functions to return partially successful responses for a batch of records. Default: false
         :param retry_attempts: Maximum number of retry attempts Valid Range: * Minimum value of 0 * Maximum value of 10000. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source. Default: -1
@@ -4007,7 +4007,7 @@ class KinesisEventSourceProps(StreamEventSourceProps):
 
     @builtins.property
     def on_failure(self) -> typing.Optional[_IEventSourceDlq_5e2c6ad9]:
-        '''An Amazon SQS queue or Amazon SNS topic destination for discarded records.
+        '''An Amazon S3, Amazon SQS queue or Amazon SNS topic destination for discarded records.
 
         :default: - discarded records are ignored
         '''

aws_cdk/aws_logs/__init__.py

@@ -456,6 +456,28 @@ logs.LogGroup(self, "LogGroupLambda",
 )
 ```
 
+## Field Index Policies
+
+Creates or updates a field index policy for the specified log group. You can use field index policies to create field indexes on fields found in log events in the log group. Creating field indexes lowers the costs for CloudWatch Logs Insights queries that reference those field indexes, because these queries attempt to skip the processing of log events that are known to not match the indexed field. Good fields to index are fields that you often need to query for and fields that have high cardinality of values.
+
+For more information, see [Create field indexes to improve query performance and reduce costs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing.html).
+
+Only log groups in the Standard log class support field index policies.
+Currently, this array supports only one field index policy object.
+
+Example:
+
+```python
+field_index_policy = logs.FieldIndexPolicy(
+    fields=["Operation", "RequestId"]
+)
+
+logs.LogGroup(self, "LogGroup",
+    log_group_name="cdkIntegLogGroup",
+    field_index_policies=[field_index_policy]
+)
+```
+
 ## Notes
 
 Be aware that Log Group ARNs will always have the string `:*` appended to
@@ -9558,6 +9580,88 @@ class Distribution(enum.Enum):
     '''Log events are distributed across the log destinations randomly.'''
 
 
+class FieldIndexPolicy(
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_logs.FieldIndexPolicy",
+):
+    '''Creates a field index policy for CloudWatch Logs log groups.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        field_index_policy = logs.FieldIndexPolicy(
+            fields=["Operation", "RequestId"]
+        )
+        
+        logs.LogGroup(self, "LogGroup",
+            log_group_name="cdkIntegLogGroup",
+            field_index_policies=[field_index_policy]
+        )
+    '''
+
+    def __init__(self, *, fields: typing.Sequence[builtins.str]) -> None:
+        '''
+        :param fields: List of fields to index in log events. Default: no fields
+        '''
+        props = FieldIndexPolicyProps(fields=fields)
+
+        jsii.create(self.__class__, self, [props])
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_logs.FieldIndexPolicyProps",
+    jsii_struct_bases=[],
+    name_mapping={"fields": "fields"},
+)
+class FieldIndexPolicyProps:
+    def __init__(self, *, fields: typing.Sequence[builtins.str]) -> None:
+        '''Properties for creating field index policies.
+
+        :param fields: List of fields to index in log events. Default: no fields
+
+        :exampleMetadata: infused
+
+        Example::
+
+            field_index_policy = logs.FieldIndexPolicy(
+                fields=["Operation", "RequestId"]
+            )
+            
+            logs.LogGroup(self, "LogGroup",
+                log_group_name="cdkIntegLogGroup",
+                field_index_policies=[field_index_policy]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__8587c6606bf8df6db1fab55d5f7ea689b5960f088bf6825593078b791719378c)
+            check_type(argname="argument fields", value=fields, expected_type=type_hints["fields"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "fields": fields,
+        }
+
+    @builtins.property
+    def fields(self) -> typing.List[builtins.str]:
+        '''List of fields to index in log events.
+
+        :default: no fields
+        '''
+        result = self._values.get("fields")
+        assert result is not None, "Required property 'fields' is missing"
+        return typing.cast(typing.List[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "FieldIndexPolicyProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 class FilterPattern(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_logs.FilterPattern",
@@ -10613,6 +10717,7 @@ class LogGroup(
         *,
         data_protection_policy: typing.Optional[DataProtectionPolicy] = None,
         encryption_key: typing.Optional[_IKey_5f11635f] = None,
+        field_index_policies: typing.Optional[typing.Sequence[FieldIndexPolicy]] = None,
         log_group_class: typing.Optional["LogGroupClass"] = None,
         log_group_name: typing.Optional[builtins.str] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -10623,6 +10728,7 @@ class LogGroup(
         :param id: -
         :param data_protection_policy: Data Protection Policy for this log group. Default: - no data protection policy
         :param encryption_key: The KMS customer managed key to encrypt the log group with. Default: Server-side encryption managed by the CloudWatch Logs service
+        :param field_index_policies: Field Index Policies for this log group. Default: - no field index policies for this log group.
         :param log_group_class: The class of the log group. Possible values are: STANDARD and INFREQUENT_ACCESS. INFREQUENT_ACCESS class provides customers a cost-effective way to consolidate logs which supports querying using Logs Insights. The logGroupClass property cannot be changed once the log group is created. Default: LogGroupClass.STANDARD
         :param log_group_name: Name of the log group. Default: Automatically generated
         :param removal_policy: Determine the removal policy of this log group. Normally you want to retain the log group so you can diagnose issues from logs even after a deployment that no longer includes the log group. In that case, use the normal date-based retention policy to age out your logs. Default: RemovalPolicy.Retain
@@ -10635,6 +10741,7 @@ class LogGroup(
         props = LogGroupProps(
             data_protection_policy=data_protection_policy,
             encryption_key=encryption_key,
+            field_index_policies=field_index_policies,
             log_group_class=log_group_class,
             log_group_name=log_group_name,
             removal_policy=removal_policy,
@@ -11081,6 +11188,7 @@ class LogGroupClass(enum.Enum):
     name_mapping={
         "data_protection_policy": "dataProtectionPolicy",
         "encryption_key": "encryptionKey",
+        "field_index_policies": "fieldIndexPolicies",
         "log_group_class": "logGroupClass",
         "log_group_name": "logGroupName",
         "removal_policy": "removalPolicy",
@@ -11093,6 +11201,7 @@ class LogGroupProps:
         *,
         data_protection_policy: typing.Optional[DataProtectionPolicy] = None,
         encryption_key: typing.Optional[_IKey_5f11635f] = None,
+        field_index_policies: typing.Optional[typing.Sequence[FieldIndexPolicy]] = None,
         log_group_class: typing.Optional[LogGroupClass] = None,
         log_group_name: typing.Optional[builtins.str] = None,
         removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -11102,6 +11211,7 @@ class LogGroupProps:
 
         :param data_protection_policy: Data Protection Policy for this log group. Default: - no data protection policy
         :param encryption_key: The KMS customer managed key to encrypt the log group with. Default: Server-side encryption managed by the CloudWatch Logs service
+        :param field_index_policies: Field Index Policies for this log group. Default: - no field index policies for this log group.
         :param log_group_class: The class of the log group. Possible values are: STANDARD and INFREQUENT_ACCESS. INFREQUENT_ACCESS class provides customers a cost-effective way to consolidate logs which supports querying using Logs Insights. The logGroupClass property cannot be changed once the log group is created. Default: LogGroupClass.STANDARD
         :param log_group_name: Name of the log group. Default: Automatically generated
         :param removal_policy: Determine the removal policy of this log group. Normally you want to retain the log group so you can diagnose issues from logs even after a deployment that no longer includes the log group. In that case, use the normal date-based retention policy to age out your logs. Default: RemovalPolicy.Retain
@@ -11147,6 +11257,7 @@ class LogGroupProps:
             type_hints = typing.get_type_hints(_typecheckingstub__df51a93f7809d59dd37d78a60967e0071dab4876ea1cd5ecd658ac3c8eae1320)
             check_type(argname="argument data_protection_policy", value=data_protection_policy, expected_type=type_hints["data_protection_policy"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
+            check_type(argname="argument field_index_policies", value=field_index_policies, expected_type=type_hints["field_index_policies"])
             check_type(argname="argument log_group_class", value=log_group_class, expected_type=type_hints["log_group_class"])
             check_type(argname="argument log_group_name", value=log_group_name, expected_type=type_hints["log_group_name"])
             check_type(argname="argument removal_policy", value=removal_policy, expected_type=type_hints["removal_policy"])
@@ -11156,6 +11267,8 @@ class LogGroupProps:
             self._values["data_protection_policy"] = data_protection_policy
         if encryption_key is not None:
             self._values["encryption_key"] = encryption_key
+        if field_index_policies is not None:
+            self._values["field_index_policies"] = field_index_policies
         if log_group_class is not None:
             self._values["log_group_class"] = log_group_class
         if log_group_name is not None:
@@ -11183,6 +11296,15 @@ class LogGroupProps:
         result = self._values.get("encryption_key")
         return typing.cast(typing.Optional[_IKey_5f11635f], result)
 
+    @builtins.property
+    def field_index_policies(self) -> typing.Optional[typing.List[FieldIndexPolicy]]:
+        '''Field Index Policies for this log group.
+
+        :default: - no field index policies for this log group.
+        '''
+        result = self._values.get("field_index_policies")
+        return typing.cast(typing.Optional[typing.List[FieldIndexPolicy]], result)
+
     @builtins.property
     def log_group_class(self) -> typing.Optional[LogGroupClass]:
         '''The class of the log group. Possible values are: STANDARD and INFREQUENT_ACCESS.
@@ -13616,6 +13738,8 @@ __all__ = [
     "DataProtectionPolicy",
     "DataProtectionPolicyProps",
     "Distribution",
+    "FieldIndexPolicy",
+    "FieldIndexPolicyProps",
     "FilterPattern",
     "IFilterPattern",
     "ILogGroup",
@@ -14865,6 +14989,13 @@ def _typecheckingstub__a7783165e1d00e232a8ee35869f53b7ff500c9680f96b895f705e2447
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__8587c6606bf8df6db1fab55d5f7ea689b5960f088bf6825593078b791719378c(
+    *,
+    fields: typing.Sequence[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__ef6e7314c6a5197496584b4f3fc9dc8a24050e8d3d30eabb788540b98e00e4f0(
     *patterns: JsonPattern,
 ) -> None:
@@ -15053,6 +15184,7 @@ def _typecheckingstub__308a02ff022bfc4531ef0c547fbfb8db809293b3cda70c61106c9bc27
     *,
     data_protection_policy: typing.Optional[DataProtectionPolicy] = None,
     encryption_key: typing.Optional[_IKey_5f11635f] = None,
+    field_index_policies: typing.Optional[typing.Sequence[FieldIndexPolicy]] = None,
     log_group_class: typing.Optional[LogGroupClass] = None,
     log_group_name: typing.Optional[builtins.str] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,
@@ -15165,6 +15297,7 @@ def _typecheckingstub__df51a93f7809d59dd37d78a60967e0071dab4876ea1cd5ecd658ac3c8
     *,
     data_protection_policy: typing.Optional[DataProtectionPolicy] = None,
     encryption_key: typing.Optional[_IKey_5f11635f] = None,
+    field_index_policies: typing.Optional[typing.Sequence[FieldIndexPolicy]] = None,
     log_group_class: typing.Optional[LogGroupClass] = None,
     log_group_name: typing.Optional[builtins.str] = None,
     removal_policy: typing.Optional[_RemovalPolicy_9f93c814] = None,