feat(client-observabilityadmin): Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field

Author: awstools

clients/client-observabilityadmin/src/commands/CreateCentralizationRuleForOrganizationCommand.ts

@@ -69,6 +69,9 @@ export interface CreateCentralizationRuleForOrganizationCommandOutput extends Cr
  *           Region: "STRING_VALUE", // required
  *           KmsKeyArn: "STRING_VALUE",
  *         },
+ *         LogGroupNameConfiguration: { // LogGroupNameConfiguration
+ *           LogGroupNamePattern: "STRING_VALUE", // required
+ *         },
  *       },
  *     },
  *   },

clients/client-observabilityadmin/src/commands/GetCentralizationRuleForOrganizationCommand.ts

@@ -81,6 +81,9 @@ export interface GetCentralizationRuleForOrganizationCommandOutput extends GetCe
  * //           Region: "STRING_VALUE", // required
  * //           KmsKeyArn: "STRING_VALUE",
  * //         },
+ * //         LogGroupNameConfiguration: { // LogGroupNameConfiguration
+ * //           LogGroupNamePattern: "STRING_VALUE", // required
+ * //         },
  * //       },
  * //     },
  * //   },

clients/client-observabilityadmin/src/commands/ListResourceTelemetryCommand.ts

@@ -69,6 +69,7 @@ export interface ListResourceTelemetryCommandOutput extends ListResourceTelemetr
  * //         "<keys>": "STRING_VALUE",
  * //       },
  * //       LastUpdateTimeStamp: Number("long"),
+ * //       TelemetrySourceType: "VPC_FLOW_LOGS" || "ROUTE53_RESOLVER_QUERY_LOGS" || "EKS_AUDIT_LOGS" || "EKS_AUTHENTICATOR_LOGS" || "EKS_CONTROLLER_MANAGER_LOGS" || "EKS_SCHEDULER_LOGS" || "EKS_API_LOGS",
  * //     },
  * //   ],
  * //   NextToken: "STRING_VALUE",

clients/client-observabilityadmin/src/commands/ListResourceTelemetryForOrganizationCommand.ts

@@ -75,6 +75,7 @@ export interface ListResourceTelemetryForOrganizationCommandOutput extends ListR
  * //         "<keys>": "STRING_VALUE",
  * //       },
  * //       LastUpdateTimeStamp: Number("long"),
+ * //       TelemetrySourceType: "VPC_FLOW_LOGS" || "ROUTE53_RESOLVER_QUERY_LOGS" || "EKS_AUDIT_LOGS" || "EKS_AUTHENTICATOR_LOGS" || "EKS_CONTROLLER_MANAGER_LOGS" || "EKS_SCHEDULER_LOGS" || "EKS_API_LOGS",
  * //     },
  * //   ],
  * //   NextToken: "STRING_VALUE",

clients/client-observabilityadmin/src/commands/UpdateCentralizationRuleForOrganizationCommand.ts

@@ -69,6 +69,9 @@ export interface UpdateCentralizationRuleForOrganizationCommandOutput extends Up
  *           Region: "STRING_VALUE", // required
  *           KmsKeyArn: "STRING_VALUE",
  *         },
+ *         LogGroupNameConfiguration: { // LogGroupNameConfiguration
+ *           LogGroupNamePattern: "STRING_VALUE", // required
+ *         },
  *       },
  *     },
  *   },

clients/client-observabilityadmin/src/commands/UpdateTelemetryPipelineCommand.ts

@@ -31,7 +31,7 @@ export interface UpdateTelemetryPipelineCommandInput extends UpdateTelemetryPipe
 export interface UpdateTelemetryPipelineCommandOutput extends UpdateTelemetryPipelineOutput, __MetadataBearer {}
 
 /**
- * <p>Updates the configuration of an existing telemetry pipeline.</p> <note> <p>The following attributes cannot be updated after pipeline creation:</p> <ul> <li> <p> <b>Pipeline name</b> - The pipeline name is immutable</p> </li> <li> <p> <b>Pipeline ARN</b> - The ARN is automatically generated and cannot be changed</p> </li> <li> <p> <b>Source type</b> - Once a pipeline is created with a specific source type (such as S3, CloudWatch Logs, GitHub, or third-party sources), it cannot be changed to a different source type</p> </li> </ul> <p>Processors can be added, removed, or modified. However, some processors are not supported for third-party pipelines and cannot be added through updates.</p> </note> <p> <b>Source-Specific Update Rules</b> </p> <dl> <dt>CloudWatch Logs Sources (Vended and Custom)</dt> <dd> <p> <b>Updatable:</b> <code>sts_role_arn</code> </p> <p> <b>Fixed:</b> <code>data_source_name</code>, <code>data_source_type</code>, sink (must remain <code>@original</code>)</p> </dd> <dt>S3 Sources (Crowdstrike, Zscaler, SentinelOne, Custom)</dt> <dd> <p> <b>Updatable:</b> All SQS configuration parameters, <code>sts_role_arn</code>, codec settings, compression type, bucket ownership settings, sink log group</p> <p> <b>Fixed:</b> <code>notification_type</code>, <code>aws.region</code> </p> </dd> <dt>GitHub Audit Logs</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>scope</code> (can switch between ORGANIZATION/ENTERPRISE), <code>organization</code> or <code>enterprise</code> name, <code>range</code>, authentication credentials (PAT or GitHub App)</p> </dd> <dt>Microsoft Sources (Entra ID, Office365, Windows)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>tenant_id</code>, <code>workspace_id</code> (Windows only), OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Okta Sources (SSO, Auth0)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>domain</code>, <code>range</code> (SSO only), OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Palo Alto Networks</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>hostname</code>, basic authentication credentials (<code>username</code>, <code>password</code>)</p> </dd> <dt>ServiceNow CMDB</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>instance_url</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Wiz CNAPP</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>region</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> </dl>
+ * <p>Updates the configuration of an existing telemetry pipeline.</p> <note> <p>The following attributes cannot be updated after pipeline creation:</p> <ul> <li> <p> <b>Pipeline name</b> - The pipeline name is immutable</p> </li> <li> <p> <b>Pipeline ARN</b> - The ARN is automatically generated and cannot be changed</p> </li> <li> <p> <b>Source type</b> - Once a pipeline is created with a specific source type (such as S3, CloudWatch Logs, GitHub, or third-party sources), it cannot be changed to a different source type</p> </li> </ul> <p>Processors can be added, removed, or modified. However, some processors are not supported for third-party pipelines and cannot be added through updates.</p> </note> <p> <b>Source-Specific Update Rules</b> </p> <dl> <dt>CloudWatch Logs Sources (Vended and Custom)</dt> <dd> <p> <b>Updatable:</b> <code>sts_role_arn</code> </p> <p> <b>Fixed:</b> <code>data_source_name</code>, <code>data_source_type</code>, sink (must remain <code>@original</code>)</p> </dd> <dt>S3 Sources (Crowdstrike, Zscaler, SentinelOne, Custom)</dt> <dd> <p> <b>Updatable:</b> All SQS configuration parameters, <code>sts_role_arn</code>, codec settings, compression type, bucket ownership settings, sink log group</p> <p> <b>Fixed:</b> <code>notification_type</code>, <code>aws.region</code> </p> </dd> <dt>GitHub Audit Logs</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>scope</code> (can switch between ORGANIZATION/ENTERPRISE), <code>organization</code> or <code>enterprise</code> name, <code>range</code>, authentication credentials (PAT or GitHub App)</p> </dd> <dt>Microsoft Sources (Entra ID, Office365, Windows)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>tenant_id</code>, <code>workspace_id</code> (Windows only), OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Okta Sources (SSO, Auth0)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>domain</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Palo Alto Networks</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>hostname</code>, basic authentication credentials (<code>username</code>, <code>password</code>)</p> </dd> <dt>ServiceNow CMDB</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>instance_url</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Wiz CNAPP</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>region</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> </dl>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

clients/client-observabilityadmin/src/models/models_0.ts

@@ -120,6 +120,18 @@ export interface LogsBackupConfiguration {
   KmsKeyArn?: string | undefined;
 }
 
+/**
+ * <p>Configuration that specifies a naming pattern for destination log groups created during centralization. The pattern supports static text and dynamic variables that are replaced with source attributes when log groups are created.</p>
+ * @public
+ */
+export interface LogGroupNameConfiguration {
+  /**
+   * <p>The pattern used to generate destination log group names during centralization. The pattern can contain static text and dynamic variables that are replaced with source attributes. If a variable cannot be resolved, it inherits the value from its parent variable in the hierarchy. The pattern must be between 1 and 512 characters.</p> <p>Supported variables:</p> <ul> <li> <p> <b>$\{source.logGroup\}</b> — The original log group name from the source account.</p> </li> <li> <p> <b>$\{source.accountId\}</b> — The AWS account ID where the log originated.</p> </li> <li> <p> <b>$\{source.region\}</b> — The AWS Region where the log originated.</p> </li> <li> <p> <b>$\{source.org.id\}</b> — The AWS Organization ID of the source account.</p> </li> <li> <p> <b>$\{source.org.ouId\}</b> — The organizational unit ID of the source account.</p> </li> <li> <p> <b>$\{source.org.rootId\}</b> — The organization Root ID.</p> </li> <li> <p> <b>$\{source.org.path\}</b> — The organizational path from account to root.</p> </li> </ul>
+   * @public
+   */
+  LogGroupNamePattern: string | undefined;
+}
+
 /**
  * <p>Configuration for encrypting centralized log groups. This configuration is only applied to destination log groups for which the corresponding source log groups are encrypted using Customer Managed KMS Keys.</p>
  * @public
@@ -160,6 +172,12 @@ export interface DestinationLogsConfiguration {
    * @public
    */
   BackupConfiguration?: LogsBackupConfiguration | undefined;
+
+  /**
+   * <p>Configuration that specifies a naming pattern for destination log groups created during centralization. The pattern supports static text and dynamic variables that are replaced with source attributes when log groups are created.</p>
+   * @public
+   */
+  LogGroupNameConfiguration?: LogGroupNameConfiguration | undefined;
 }
 
 /**
@@ -531,7 +549,7 @@ export interface CreateS3TableIntegrationOutput {
 }
 
 /**
- * <p>Defines the configuration for a telemetry pipeline, including how data flows from sources through processors to destinations.</p>
+ * <p>Defines the configuration for a pipeline, including how data flows from sources through processors to destinations. The configuration is specified in YAML format and must include a valid pipeline definition with required source and sink components. This pipeline enables end-to-end telemetry data collection, transformation, and delivery while supporting optional processing steps and extensions for enhanced functionality.</p> <p>The primary pipeline configuration section are:</p> <ul> <li> <p> <b>Source:</b> Defines where log data originates from (S3 buckets, CloudWatch Logs, third-party APIs). Each pipeline must have exactly one source.</p> </li> <li> <p> <b>Processors (optional):</b> Transform, parse, and enrich log data as it flows through the pipeline. Processors are applied sequentially in the order they are defined.</p> </li> <li> <p> <b>Sink:</b> Defines the destination where processed log data is sent. Each pipeline must have exactly one sink.</p> </li> <li> <p> <b>Extensions (optional):</b> Provide additional functionality such as Amazon Web Services Secrets Manager integration for credential management.</p> </li> </ul> <p>For more details on each configuration section see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-pipelines.html">CloudWatch pipelines User Guide</a>. Additional comprehensive configuration examples can be found in the <a href="https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryPipeline.html#API_CreateTelemetryPipeline_Examples">CreateTelemetryPipeline API docs</a>.</p>
  * @public
  */
 export interface TelemetryPipelineConfiguration {
@@ -1460,6 +1478,12 @@ export interface TelemetryConfiguration {
    * @public
    */
   LastUpdateTimeStamp?: number | undefined;
+
+  /**
+   * <p> Specifies the type of telemetry source for a resource, such as EKS cluster logs. </p>
+   * @public
+   */
+  TelemetrySourceType?: TelemetrySourceType | undefined;
 }
 
 /**

clients/client-observabilityadmin/src/schemas/schemas_0.ts

@@ -117,6 +117,8 @@ const _LDP = "LogDeliveryParameters";
 const _LEC = "LogsEncryptionConfiguration";
 const _LF = "LoggingFilter";
 const _LFo = "LogFormat";
+const _LGNC = "LogGroupNameConfiguration";
+const _LGNP = "LogGroupNamePattern";
 const _LGSC = "LogGroupSelectionCriteria";
 const _LN = "LabelName";
 const _LNC = "LabelNameCondition";
@@ -229,7 +231,8 @@ const _TRI = "TagResourceInput";
 const _TRS = "TelemetryRuleSummaries";
 const _TRSe = "TelemetryRuleSummary";
 const _TRa = "TagResource";
-const _TST = "TelemetrySourceTypes";
+const _TST = "TelemetrySourceType";
+const _TSTe = "TelemetrySourceTypes";
 const _TT = "TelemetryType";
 const _TTP = "TestTelemetryPipeline";
 const _TTPI = "TestTelemetryPipelineInput";
@@ -492,8 +495,8 @@ export var DeleteTelemetryRuleInput$: StaticStructureSchema = [3, n0, _DTRI,
 ];
 export var DestinationLogsConfiguration$: StaticStructureSchema = [3, n0, _DLC,
   0,
-  [_LEC, _BC],
-  [() => LogsEncryptionConfiguration$, () => LogsBackupConfiguration$]
+  [_LEC, _BC, _LGNC],
+  [() => LogsEncryptionConfiguration$, () => LogsBackupConfiguration$, () => LogGroupNameConfiguration$]
 ];
 export var ELBLoadBalancerLoggingParameters$: StaticStructureSchema = [3, n0, _ELBLBLP,
   0,
@@ -680,6 +683,11 @@ export var LoggingFilter$: StaticStructureSchema = [3, n0, _LF,
   [_Fil, _DB],
   [() => Filters, 0]
 ];
+export var LogGroupNameConfiguration$: StaticStructureSchema = [3, n0, _LGNC,
+  0,
+  [_LGNP],
+  [0], 1
+];
 export var LogsBackupConfiguration$: StaticStructureSchema = [3, n0, _LBC,
   0,
   [_R, _KKA],
@@ -737,8 +745,8 @@ export var TagResourceInput$: StaticStructureSchema = [3, n0, _TRI,
 ];
 export var TelemetryConfiguration$: StaticStructureSchema = [3, n0, _TCe,
   0,
-  [_AIc, _TCS, _RT, _RIe, _RTes, _LUTS],
-  [0, 128 | 0, 0, 0, 128 | 0, 1]
+  [_AIc, _TCS, _RT, _RIe, _RTes, _LUTS, _TST],
+  [0, 128 | 0, 0, 0, 128 | 0, 1, 0]
 ];
 export var TelemetryDestinationConfiguration$: StaticStructureSchema = [3, n0, _TDC,
   0,
@@ -767,12 +775,12 @@ export var TelemetryPipelineSummary$: StaticStructureSchema = [3, n0, _TPS,
 ];
 export var TelemetryRule$: StaticStructureSchema = [3, n0, _TR,
   0,
-  [_TT, _RT, _TST, _DC, _Sc, _SCe],
+  [_TT, _RT, _TSTe, _DC, _Sc, _SCe],
   [0, 0, 64 | 0, () => TelemetryDestinationConfiguration$, 0, 0], 1
 ];
 export var TelemetryRuleSummary$: StaticStructureSchema = [3, n0, _TRSe,
   0,
-  [_RN, _RAu, _CTS, _LUTS, _RT, _TT, _TST],
+  [_RN, _RAu, _CTS, _LUTS, _RT, _TT, _TSTe],
   [0, 0, 1, 1, 0, 0, 64 | 0]
 ];
 export var TestTelemetryPipelineInput$: StaticStructureSchema = [3, n0, _TTPI,

clients/client-observabilityadmin/test/index-objects.spec.mjs

@@ -134,6 +134,7 @@ import {
   ListTelemetryRulesOutput$,
   LogDeliveryParameters$,
   LoggingFilter$,
+  LogGroupNameConfiguration$,
   LogsBackupConfiguration$,
   LogsEncryptionConfiguration$,
   LogType,
@@ -379,6 +380,7 @@ assert(typeof ListTelemetryRulesInput$ === "object");
 assert(typeof ListTelemetryRulesOutput$ === "object");
 assert(typeof LogDeliveryParameters$ === "object");
 assert(typeof LoggingFilter$ === "object");
+assert(typeof LogGroupNameConfiguration$ === "object");
 assert(typeof LogsBackupConfiguration$ === "object");
 assert(typeof LogsEncryptionConfiguration$ === "object");
 assert(typeof PipelineOutput$ === "object");

clients/client-observabilityadmin/test/index-types.ts

@@ -209,6 +209,7 @@ export type {
   ListTelemetryRulesOutput,
   LogDeliveryParameters,
   LoggingFilter,
+  LogGroupNameConfiguration,
   LogsBackupConfiguration,
   LogsEncryptionConfiguration,
   PipelineOutput,