@swamp/aws/logs
v2026.04.23.3
AWS LOGS infrastructure models
Repository
https://github.com/systeminit/swamp-extensions
Labels
awslogscloudinfrastructure
Contents
Quality score
Verified by SwampHow well-documented and verifiable this extension is.
Grade A
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types1/1earned
- Has description1/1earned
- At least one platform tag (or universal)1/1earned
- Two or more platform tags (or universal)1/1earned
- License declared1/1earned
- Verified public repository2/2earned
Install
$ swamp extension pull @swamp/aws/logs@swamp/aws/logs/account-policyv2026.04.23.2account_policy.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| PolicyName | string | The name of the account policy |
| PolicyDocument | string | The body of the policy document you want to use for this topic. You can only add one policy per PolicyType. The policy must be in JSON string format. Length Constraints: Maximum length of 30720 |
| PolicyType | enum | Type of the policy. |
| Scope? | enum | Scope for policy application |
| SelectionCriteria? | string | Log group selection criteria to apply policy only to a subset of log groups. SelectionCriteria string can be up to 25KB and cloudwatchlogs determines the length of selectionCriteria by using its UTF-8 bytes |
createCreate a Logs AccountPolicy
getGet a Logs AccountPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs AccountPolicy |
updateUpdate a Logs AccountPolicy
deleteDelete a Logs AccountPolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs AccountPolicy |
syncSync Logs AccountPolicy state from AWS
Resources
state(infinite)— Logs AccountPolicy resource state
@swamp/aws/logs/deliveryv2026.04.23.2delivery.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| DeliverySourceName | string | The name of the delivery source that is associated with this delivery. |
| DeliveryDestinationArn | string | The ARN of the delivery destination that is associated with this delivery. |
| Tags? | array | The tags that have been assigned to this delivery. |
| RecordFields? | array | The list of record fields to be delivered to the destination, in order. If the delivery's log source has mandatory fields, they must be included in this list. |
| FieldDelimiter? | string | The field delimiter to use between record fields when the final output format of a delivery is in Plain, W3C, or Raw format. |
| S3SuffixPath? | string | This string allows re-configuring the S3 object prefix to contain either static or variable sections. The valid variables to use in the suffix path will vary by each log source. See ConfigurationTemplate$allowedSuffixPathFields for more info on what values are supported in the suffix path for each log source. |
| S3EnableHiveCompatiblePath? | boolean | This parameter causes the S3 objects that contain delivered logs to use a prefix structure that allows for integration with Apache Hive. |
createCreate a Logs Delivery
getGet a Logs Delivery
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Delivery |
updateUpdate a Logs Delivery
deleteDelete a Logs Delivery
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Delivery |
syncSync Logs Delivery state from AWS
Resources
state(infinite)— Logs Delivery resource state
@swamp/aws/logs/delivery-destinationv2026.04.23.2delivery_destination.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| Name | string | The name of this delivery destination. |
| DestinationResourceArn? | string | The ARN of the Amazon Web Services destination that this delivery destination represents. That Amazon Web Services destination can be a log group in CloudWatch Logs, an Amazon S3 bucket, or a delivery stream in Firehose. |
| Tags? | array | The tags that have been assigned to this delivery destination. |
| DeliveryDestinationType? | string | Displays whether this delivery destination is CloudWatch Logs, Amazon S3, Kinesis Data Firehose, or XRay. |
| DeliveryDestinationPolicy? | object | IAM policy that grants permissions to CloudWatch Logs to deliver logs cross-account to a specified destination in this account. The policy must be in JSON string format. Length Constraints: Maximum length of 51200 |
| OutputFormat? | string | The format of the logs that are sent to this delivery destination. |
createCreate a Logs DeliveryDestination
getGet a Logs DeliveryDestination
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs DeliveryDestination |
updateUpdate a Logs DeliveryDestination
deleteDelete a Logs DeliveryDestination
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs DeliveryDestination |
syncSync Logs DeliveryDestination state from AWS
Resources
state(infinite)— Logs DeliveryDestination resource state
@swamp/aws/logs/delivery-sourcev2026.04.23.2delivery_source.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| Name | string | The unique name of the Log source. |
| ResourceArn? | string | The Amazon Resource Name (ARN) that uniquely identifies this delivery source. |
| LogType? | string | The type of logs being delivered. Only mandatory when the resourceArn could match more than one. In such a case, the error message will contain all the possible options. |
| Tags? | array | The tags that have been assigned to this delivery source. |
createCreate a Logs DeliverySource
getGet a Logs DeliverySource
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs DeliverySource |
updateUpdate a Logs DeliverySource
deleteDelete a Logs DeliverySource
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs DeliverySource |
syncSync Logs DeliverySource state from AWS
Resources
state(infinite)— Logs DeliverySource resource state
@swamp/aws/logs/destinationv2026.04.23.2destination.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| Tags? | array | An array of key-value pairs to apply to this resource. |
| DestinationName | string | The name of the destination resource |
| DestinationPolicy? | string | An IAM policy document that governs which AWS accounts can create subscription filters against this destination. |
| RoleArn | string | The ARN of an IAM role that permits CloudWatch Logs to send data to the specified AWS resource |
| TargetArn | string | The ARN of the physical target where the log events are delivered (for example, a Kinesis stream) |
createCreate a Logs Destination
getGet a Logs Destination
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Destination |
updateUpdate a Logs Destination
deleteDelete a Logs Destination
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Destination |
syncSync Logs Destination state from AWS
Resources
state(infinite)— Logs Destination resource state
@swamp/aws/logs/integrationv2026.04.23.2integration.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| IntegrationName | string | User provided identifier for integration, unique to the user account. |
| IntegrationType | enum | The type of the Integration. |
| ResourceConfig | object | OpenSearchResourceConfig for the given Integration |
createCreate a Logs Integration
getGet a Logs Integration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Integration |
deleteDelete a Logs Integration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Integration |
syncSync Logs Integration state from AWS
Resources
state(infinite)— Logs Integration resource state
@swamp/aws/logs/log-anomaly-detectorv2026.04.23.2log_anomaly_detector.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| AccountId? | string | Account ID for owner of detector |
| KmsKeyId? | string | The Amazon Resource Name (ARN) of the CMK to use when encrypting log data. |
| DetectorName? | string | Name of detector |
| LogGroupArnList? | array | List of Arns for the given log group |
| EvaluationFrequency? | enum | How often log group is evaluated |
| FilterPattern? | string | |
| AnomalyVisibilityTime? | number |
createCreate a Logs LogAnomalyDetector
getGet a Logs LogAnomalyDetector
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogAnomalyDetector |
updateUpdate a Logs LogAnomalyDetector
deleteDelete a Logs LogAnomalyDetector
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogAnomalyDetector |
syncSync Logs LogAnomalyDetector state from AWS
Resources
state(infinite)— Logs LogAnomalyDetector resource state
@swamp/aws/logs/log-groupv2026.04.23.2log_group.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| LogGroupName? | string | The name of the log group. If you don't specify a name, CFNlong generates a unique ID for the log group. |
| KmsKeyId? | string | The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data. To associate an KMS key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CWL. This enables CWL to decrypt this data whenever it is requested. If you attempt to associate a KMS key with the log group but the KMS key doesn't exist or is deactivated, you will receive |
| DataProtectionPolicy? | string | Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks. |
| FieldIndexPolicies? | array | Creates or updates a *field index policy* for the specified log group. Only log groups in the Standard log class support field index policies. For more information about log classes, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html). You can use field index policies to create *field indexes* on fields found in log events in the log group. Creating field indexes lowers the costs for CWL Insights queries that reference those field indexes, |
| LogGroupClass? | enum | Specifies the log group class for this log group. There are two classes: The Standard log class supports all CWL features. The Infrequent Access log class supports a subset of CWL features and incurs lower costs. For details about the features supported by each class, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html) |
| RetentionInDays? | union | The number of days to retain the log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653. To set a log group so that its log events do not expire, do not specify this property. |
| Tags? | array | An array of key-value pairs to apply to the log group. For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html). |
| ResourcePolicyDocument? | string | Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy. |
| DeletionProtectionEnabled? | boolean | Indicates whether deletion protection is enabled for this log group. When enabled, deletion protection blocks all deletion operations until it is explicitly disabled. |
| BearerTokenAuthenticationEnabled? | boolean | Indicates whether bearer token authentication is enabled for this log group. When enabled, bearer token authentication is allowed on operations until it is explicitly disabled. |
createCreate a Logs LogGroup
getGet a Logs LogGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogGroup |
updateUpdate a Logs LogGroup
deleteDelete a Logs LogGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogGroup |
syncSync Logs LogGroup state from AWS
Resources
state(infinite)— Logs LogGroup resource state
@swamp/aws/logs/log-streamv2026.04.23.2log_stream.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| LogStreamName? | string | The name of the log stream. The name must be unique wihtin the log group. |
| LogGroupName | string | The name of the log group where the log stream is created. |
createCreate a Logs LogStream
getGet a Logs LogStream
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogStream |
deleteDelete a Logs LogStream
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs LogStream |
syncSync Logs LogStream state from AWS
Resources
state(infinite)— Logs LogStream resource state
@swamp/aws/logs/metric-filterv2026.04.23.2metric_filter.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| FieldSelectionCriteria? | string | The filter expression that specifies which log events are processed by this metric filter based on system fields. Returns the fieldSelectionCriteria value if it was specified when the metric filter was created. |
| MetricTransformations | array | The metric transformations. |
| FilterPattern | string | A filter pattern for extracting metric data out of ingested log events. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html). |
| EmitSystemFieldDimensions? | array | The list of system fields that are emitted as additional dimensions in the generated metrics. Returns the emitSystemFieldDimensions value if it was specified when the metric filter was created. |
| LogGroupName | string | The name of an existing log group that you want to associate with this metric filter. |
| ApplyOnTransformedLogs? | boolean | This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html). If this value is true, the metric filter is applied on the transformed version of the log events instead of the original ingested log events. |
| FilterName? | string | The name of the metric filter. |
createCreate a Logs MetricFilter
getGet a Logs MetricFilter
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs MetricFilter |
updateUpdate a Logs MetricFilter
deleteDelete a Logs MetricFilter
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs MetricFilter |
syncSync Logs MetricFilter state from AWS
Resources
state(infinite)— Logs MetricFilter resource state
@swamp/aws/logs/query-definitionv2026.04.23.2query_definition.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Name | string | A name for the saved query definition |
| QueryString | string | The query string to use for this definition |
| LogGroupNames? | array | Optionally define specific log groups as part of your query definition |
| QueryLanguage? | enum | Query language of the query string. Possible values are CWLI, SQL, PPL, with CWLI being the default. |
| Parameters? | array | Use this parameter to include specific query parameters as part of your query definition. Query parameters are supported only for Logs Insights QL queries. Query parameters allow you to use placeholder variables in your query string that are substituted with values at execution time. Use the {{parameterName}} syntax in your query string to reference a parameter. |
createCreate a Logs QueryDefinition
getGet a Logs QueryDefinition
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs QueryDefinition |
updateUpdate a Logs QueryDefinition
deleteDelete a Logs QueryDefinition
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs QueryDefinition |
syncSync Logs QueryDefinition state from AWS
Resources
state(infinite)— Logs QueryDefinition resource state
@swamp/aws/logs/resource-policyv2026.04.23.2resource_policy.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| PolicyName | string | A name for resource policy |
| PolicyDocument | string | The policy document |
createCreate a Logs ResourcePolicy
getGet a Logs ResourcePolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs ResourcePolicy |
updateUpdate a Logs ResourcePolicy
deleteDelete a Logs ResourcePolicy
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs ResourcePolicy |
syncSync Logs ResourcePolicy state from AWS
Resources
state(infinite)— Logs ResourcePolicy resource state
@swamp/aws/logs/scheduled-queryv2026.04.23.2scheduled_query.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| Name | string | |
| Description? | string | |
| QueryLanguage | string | |
| QueryString | string | |
| LogGroupIdentifiers? | array | |
| ScheduleExpression | string | |
| Timezone? | string | |
| StartTimeOffset? | number | |
| DestinationConfiguration? | object | |
| ScheduleStartTime? | number | |
| ScheduleEndTime? | number | |
| ExecutionRoleArn | string | |
| State? | enum | |
| Tags? | array |
createCreate a Logs ScheduledQuery
getGet a Logs ScheduledQuery
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs ScheduledQuery |
updateUpdate a Logs ScheduledQuery
deleteDelete a Logs ScheduledQuery
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs ScheduledQuery |
syncSync Logs ScheduledQuery state from AWS
Resources
state(infinite)— Logs ScheduledQuery resource state
@swamp/aws/logs/subscription-filterv2026.04.23.2subscription_filter.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| FilterName? | string | The name of the subscription filter. |
| DestinationArn | string | The Amazon Resource Name (ARN) of the destination. |
| FilterPattern | string | The filtering expressions that restrict what gets delivered to the destination AWS resource. For more information about the filter pattern syntax, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html). |
| LogGroupName | string | The log group to associate with the subscription filter. All log events that are uploaded to this log group are filtered and delivered to the specified AWS resource if the filter pattern matches the log events. |
| RoleArn? | string | The ARN of an IAM role that grants CWL permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery. |
| Distribution? | enum | The method used to distribute log data to the destination, which can be either random or grouped by log stream. |
| ApplyOnTransformedLogs? | boolean | This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html). If this value is true, the subscription filter is applied on the transformed version of the log events instead of the original ingested log events. |
| FieldSelectionCriteria? | string | The filter expression that specifies which log events are processed by this subscription filter based on system fields. Returns the fieldSelectionCriteria value if it was specified when the subscription filter was created. |
| EmitSystemFields? | array | The list of system fields that are included in the log events sent to the subscription destination. Returns the emitSystemFields value if it was specified when the subscription filter was created. |
createCreate a Logs SubscriptionFilter
getGet a Logs SubscriptionFilter
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs SubscriptionFilter |
updateUpdate a Logs SubscriptionFilter
deleteDelete a Logs SubscriptionFilter
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs SubscriptionFilter |
syncSync Logs SubscriptionFilter state from AWS
Resources
state(infinite)— Logs SubscriptionFilter resource state
@swamp/aws/logs/transformerv2026.04.23.2transformer.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| LogGroupIdentifier | string | Existing log group that you want to associate with this transformer. |
| TransformerConfig | array | List of processors in a transformer |
createCreate a Logs Transformer
getGet a Logs Transformer
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Transformer |
updateUpdate a Logs Transformer
deleteDelete a Logs Transformer
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Logs Transformer |
syncSync Logs Transformer state from AWS
Resources
state(infinite)— Logs Transformer resource state
2026.04.23.22.9 MBApr 23, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: account_policy, delivery, delivery_destination, delivery_source, destination, integration, log_anomaly_detector, log_group, log_stream, metric_filter, query_definition, resource_policy, scheduled_query, subscription_filter, transformer
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.04.22.12.9 MBApr 22, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: log_group, resource_policy
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.04.03.22.9 MBApr 3, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: account_policy, delivery, delivery_destination, delivery_source, destination, integration, log_anomaly_detector, log_group, log_stream, metric_filter, query_definition, resource_policy, scheduled_query, subscription_filter, transformer
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.03.23.13.1 MBMar 23, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: log_group
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.03.19.13.1 MBMar 19, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: account_policy, delivery, delivery_destination, delivery_source, destination, integration, log_anomaly_detector, log_group, log_stream, metric_filter, query_definition, resource_policy, scheduled_query, subscription_filter, transformer
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.03.16.13.0 MBMar 16, 2026
AWS LOGS infrastructure models
Release Notes
- Updated: account_policy, delivery, delivery_destination, delivery_source, destination, integration, log_anomaly_detector, log_group, log_stream, metric_filter, query_definition, resource_policy, scheduled_query, subscription_filter, transformer
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure
2026.03.10.53.0 MBMar 10, 2026
AWS LOGS infrastructure models
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
awslogscloudinfrastructure