Skip to content

Commit 230b56b

Browse files
authored
feat(logs): enabling IA log group creation in CN and GovCloud regions (#30904)
### Reason for this change CloudwatchLogs recently launched support for Infrequent Access Log Group Class in china and gov cloud regions. We are adding support in CDK to use this feature. ### Description of changes Added LogGroup Class attribute support in CDK for China and GovCloud regions. This feature is already launched by CWL in china and gov-cloud regions. This PR would add CDK support for the same. ### Description of how you validated changes This feature is already has integ test coverage in commercial region. We have validated the feature on service side already. ### Checklist - [-] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 836c507 commit 230b56b

File tree

2 files changed

+10
-4
lines changed

2 files changed

+10
-4
lines changed

packages/aws-cdk-lib/aws-logs/README.md

+10
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,16 @@ publish their log group to a specific region, such as AWS Chatbot creating a log
4040

4141
By default, the log group created by LogRetention will be retained after the stack is deleted. If the RemovalPolicy is set to DESTROY, then the log group will be deleted when the stack is deleted.
4242

43+
## Log Group Class
44+
45+
CloudWatch Logs offers two classes of log groups:
46+
47+
1. The CloudWatch Logs Standard log class is a full-featured option for logs that require real-time monitoring or logs that you access frequently.
48+
49+
2. The CloudWatch Logs Infrequent Access log class is a new log class that you can use to cost-effectively consolidate your logs. This log class offers a subset of CloudWatch Logs capabilities including managed ingestion, storage, cross-account log analytics, and encryption with a lower ingestion price per GB. The Infrequent Access log class is ideal for ad-hoc querying and after-the-fact forensic analysis on infrequently accessed logs.
50+
51+
For more details please check: [log group class documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)
52+
4353
## Resource Policy
4454

4555
CloudWatch Resource Policies allow other AWS services or IAM Principals to put log events into the log groups.

packages/aws-cdk-lib/aws-logs/lib/log-group.ts

-4
Original file line numberDiff line numberDiff line change
@@ -520,13 +520,9 @@ export class LogGroup extends LogGroupBase {
520520
let logGroupClass = props.logGroupClass;
521521
const stack = Stack.of(scope);
522522
const logGroupClassUnsupportedRegions = [
523-
'cn-north-1', // BJS
524-
'cn-northwest-1', // ZHY
525523
'us-iso-west-1', // APA
526524
'us-iso-east-1', // DCA
527525
'us-isob-east-1', // LCK
528-
'us-gov-west-1', // PDT
529-
'us-gov-east-1', // OSU
530526
];
531527
if (logGroupClass !== undefined && !Token.isUnresolved(stack.region) && logGroupClassUnsupportedRegions.includes(stack.region)) {
532528
Annotations.of(this).addWarningV2('@aws-cdk/aws-logs:propertyNotSupported', `The LogGroupClass property is not supported in the following regions: ${logGroupClassUnsupportedRegions}`);

0 commit comments

Comments
 (0)