{
  "version":"2.0",
  "metadata":{
    "apiVersion":"2018-05-10",
    "auth":["aws.auth#sigv4"],
    "endpointPrefix":"observabilityadmin",
    "protocol":"rest-json",
    "protocols":["rest-json"],
    "serviceFullName":"CloudWatch Observability Admin Service",
    "serviceId":"ObservabilityAdmin",
    "signatureVersion":"v4",
    "signingName":"observabilityadmin",
    "uid":"observabilityadmin-2018-05-10"
  },
  "operations":{
    "CreateCentralizationRuleForOrganization":{
      "name":"CreateCentralizationRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/CreateCentralizationRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"CreateCentralizationRuleForOrganizationInput"},
      "output":{"shape":"CreateCentralizationRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Creates a centralization rule that applies across an Amazon Web Services Organization. This operation can only be called by the organization's management account or a delegated administrator account.</p>"
    },
    "CreateS3TableIntegration":{
      "name":"CreateS3TableIntegration",
      "http":{
        "method":"POST",
        "requestUri":"/CreateS3TableIntegration",
        "responseCode":200
      },
      "input":{"shape":"CreateS3TableIntegrationInput"},
      "output":{"shape":"CreateS3TableIntegrationOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Creates an integration between CloudWatch and S3 Tables for analytics. This integration enables querying CloudWatch telemetry data using analytics engines like Amazon Athena, Amazon Redshift, and Apache Spark.</p>"
    },
    "CreateTelemetryPipeline":{
      "name":"CreateTelemetryPipeline",
      "http":{
        "method":"POST",
        "requestUri":"/CreateTelemetryPipeline",
        "responseCode":200
      },
      "input":{"shape":"CreateTelemetryPipelineInput"},
      "output":{"shape":"CreateTelemetryPipelineOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Creates a telemetry pipeline for processing and transforming telemetry data. The pipeline defines how data flows from sources through processors to destinations, enabling data transformation and delivering capabilities. </p>"
    },
    "CreateTelemetryRule":{
      "name":"CreateTelemetryRule",
      "http":{
        "method":"POST",
        "requestUri":"/CreateTelemetryRule",
        "responseCode":200
      },
      "input":{"shape":"CreateTelemetryRuleInput"},
      "output":{"shape":"CreateTelemetryRuleOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Creates a telemetry rule that defines how telemetry should be configured for Amazon Web Services resources in your account. The rule specifies which resources should have telemetry enabled and how that telemetry data should be collected based on resource type, telemetry type, and selection criteria. </p>"
    },
    "CreateTelemetryRuleForOrganization":{
      "name":"CreateTelemetryRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/CreateTelemetryRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"CreateTelemetryRuleForOrganizationInput"},
      "output":{"shape":"CreateTelemetryRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Creates a telemetry rule that applies across an Amazon Web Services Organization. This operation can only be called by the organization's management account or a delegated administrator account. </p>"
    },
    "DeleteCentralizationRuleForOrganization":{
      "name":"DeleteCentralizationRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/DeleteCentralizationRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"DeleteCentralizationRuleForOrganizationInput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Deletes an organization-wide centralization rule. This operation can only be called by the organization's management account or a delegated administrator account.</p>"
    },
    "DeleteS3TableIntegration":{
      "name":"DeleteS3TableIntegration",
      "http":{
        "method":"POST",
        "requestUri":"/DeleteS3TableIntegration",
        "responseCode":204
      },
      "input":{"shape":"DeleteS3TableIntegrationInput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"InvalidStateException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Deletes an S3 Table integration and its associated data. This operation removes the connection between CloudWatch Observability Admin and S3 Tables.</p>"
    },
    "DeleteTelemetryPipeline":{
      "name":"DeleteTelemetryPipeline",
      "http":{
        "method":"POST",
        "requestUri":"/DeleteTelemetryPipeline",
        "responseCode":200
      },
      "input":{"shape":"DeleteTelemetryPipelineInput"},
      "output":{"shape":"DeleteTelemetryPipelineOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Deletes a telemetry pipeline and its associated resources. This operation stops data processing and removes the pipeline configuration.</p>",
      "idempotent":true
    },
    "DeleteTelemetryRule":{
      "name":"DeleteTelemetryRule",
      "http":{
        "method":"POST",
        "requestUri":"/DeleteTelemetryRule",
        "responseCode":200
      },
      "input":{"shape":"DeleteTelemetryRuleInput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Deletes a telemetry rule from your account. Any telemetry configurations previously created by the rule will remain but no new resources will be configured by this rule. </p>"
    },
    "DeleteTelemetryRuleForOrganization":{
      "name":"DeleteTelemetryRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/DeleteTelemetryRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"DeleteTelemetryRuleForOrganizationInput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Deletes an organization-wide telemetry rule. This operation can only be called by the organization's management account or a delegated administrator account. </p>"
    },
    "GetCentralizationRuleForOrganization":{
      "name":"GetCentralizationRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/GetCentralizationRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"GetCentralizationRuleForOrganizationInput"},
      "output":{"shape":"GetCentralizationRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Retrieves the details of a specific organization centralization rule. This operation can only be called by the organization's management account or a delegated administrator account.</p>",
      "readonly":true
    },
    "GetS3TableIntegration":{
      "name":"GetS3TableIntegration",
      "http":{
        "method":"POST",
        "requestUri":"/GetS3TableIntegration",
        "responseCode":200
      },
      "input":{"shape":"GetS3TableIntegrationInput"},
      "output":{"shape":"GetS3TableIntegrationOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Retrieves information about a specific S3 Table integration, including its configuration, status, and metadata.</p>",
      "readonly":true
    },
    "GetTelemetryEnrichmentStatus":{
      "name":"GetTelemetryEnrichmentStatus",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryEnrichmentStatus",
        "responseCode":200
      },
      "output":{"shape":"GetTelemetryEnrichmentStatusOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Returns the current status of the resource tags for telemetry feature, which enhances telemetry data with additional resource metadata from Resource Explorer. </p>",
      "readonly":true
    },
    "GetTelemetryEvaluationStatus":{
      "name":"GetTelemetryEvaluationStatus",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryEvaluationStatus",
        "responseCode":200
      },
      "output":{"shape":"GetTelemetryEvaluationStatusOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Returns the current onboarding status of the telemetry config feature, including the status of the feature and reason the feature failed to start or stop. </p>",
      "readonly":true
    },
    "GetTelemetryEvaluationStatusForOrganization":{
      "name":"GetTelemetryEvaluationStatusForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryEvaluationStatusForOrganization",
        "responseCode":200
      },
      "output":{"shape":"GetTelemetryEvaluationStatusForOrganizationOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> This returns the onboarding status of the telemetry configuration feature for the organization. It can only be called by a Management Account of an Amazon Web Services Organization or an assigned Delegated Admin Account of Amazon CloudWatch telemetry config. </p>",
      "readonly":true
    },
    "GetTelemetryPipeline":{
      "name":"GetTelemetryPipeline",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryPipeline",
        "responseCode":200
      },
      "input":{"shape":"GetTelemetryPipelineInput"},
      "output":{"shape":"GetTelemetryPipelineOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Retrieves information about a specific telemetry pipeline, including its configuration, status, and metadata.</p>",
      "readonly":true
    },
    "GetTelemetryRule":{
      "name":"GetTelemetryRule",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryRule",
        "responseCode":200
      },
      "input":{"shape":"GetTelemetryRuleInput"},
      "output":{"shape":"GetTelemetryRuleOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Retrieves the details of a specific telemetry rule in your account. </p>",
      "readonly":true
    },
    "GetTelemetryRuleForOrganization":{
      "name":"GetTelemetryRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/GetTelemetryRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"GetTelemetryRuleForOrganizationInput"},
      "output":{"shape":"GetTelemetryRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Retrieves the details of a specific organization telemetry rule. This operation can only be called by the organization's management account or a delegated administrator account. </p>",
      "readonly":true
    },
    "ListCentralizationRulesForOrganization":{
      "name":"ListCentralizationRulesForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/ListCentralizationRulesForOrganization",
        "responseCode":200
      },
      "input":{"shape":"ListCentralizationRulesForOrganizationInput"},
      "output":{"shape":"ListCentralizationRulesForOrganizationOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Lists all centralization rules in your organization. This operation can only be called by the organization's management account or a delegated administrator account.</p>",
      "readonly":true
    },
    "ListResourceTelemetry":{
      "name":"ListResourceTelemetry",
      "http":{
        "method":"POST",
        "requestUri":"/ListResourceTelemetry",
        "responseCode":200
      },
      "input":{"shape":"ListResourceTelemetryInput"},
      "output":{"shape":"ListResourceTelemetryOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Returns a list of telemetry configurations for Amazon Web Services resources supported by telemetry config. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.html\">Auditing CloudWatch telemetry configurations</a>. </p>",
      "readonly":true
    },
    "ListResourceTelemetryForOrganization":{
      "name":"ListResourceTelemetryForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/ListResourceTelemetryForOrganization",
        "responseCode":200
      },
      "input":{"shape":"ListResourceTelemetryForOrganizationInput"},
      "output":{"shape":"ListResourceTelemetryForOrganizationOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Returns a list of telemetry configurations for Amazon Web Services resources supported by telemetry config in the organization. </p>",
      "readonly":true
    },
    "ListS3TableIntegrations":{
      "name":"ListS3TableIntegrations",
      "http":{
        "method":"POST",
        "requestUri":"/ListS3TableIntegrations",
        "responseCode":200
      },
      "input":{"shape":"ListS3TableIntegrationsInput"},
      "output":{"shape":"ListS3TableIntegrationsOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Lists all S3 Table integrations in your account. We recommend using pagination to ensure that the operation returns quickly and successfully.</p>",
      "readonly":true
    },
    "ListTagsForResource":{
      "name":"ListTagsForResource",
      "http":{
        "method":"POST",
        "requestUri":"/ListTagsForResource",
        "responseCode":200
      },
      "input":{"shape":"ListTagsForResourceInput"},
      "output":{"shape":"ListTagsForResourceOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Lists all tags attached to the specified resource. Supports telemetry rule resources and telemetry pipeline resources. </p>",
      "readonly":true
    },
    "ListTelemetryPipelines":{
      "name":"ListTelemetryPipelines",
      "http":{
        "method":"POST",
        "requestUri":"/ListTelemetryPipelines",
        "responseCode":200
      },
      "input":{"shape":"ListTelemetryPipelinesInput"},
      "output":{"shape":"ListTelemetryPipelinesOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Returns a list of telemetry pipelines in your account. Returns up to 100 results. If more than 100 telemetry pipelines exist, include the <code>NextToken</code> value from the response to retrieve the next set of results.</p>",
      "readonly":true
    },
    "ListTelemetryRules":{
      "name":"ListTelemetryRules",
      "http":{
        "method":"POST",
        "requestUri":"/ListTelemetryRules",
        "responseCode":200
      },
      "input":{"shape":"ListTelemetryRulesInput"},
      "output":{"shape":"ListTelemetryRulesOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Lists all telemetry rules in your account. You can filter the results by specifying a rule name prefix. </p>",
      "readonly":true
    },
    "ListTelemetryRulesForOrganization":{
      "name":"ListTelemetryRulesForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/ListTelemetryRulesForOrganization",
        "responseCode":200
      },
      "input":{"shape":"ListTelemetryRulesForOrganizationInput"},
      "output":{"shape":"ListTelemetryRulesForOrganizationOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Lists all telemetry rules in your organization. This operation can only be called by the organization's management account or a delegated administrator account. </p>",
      "readonly":true
    },
    "StartTelemetryEnrichment":{
      "name":"StartTelemetryEnrichment",
      "http":{
        "method":"POST",
        "requestUri":"/StartTelemetryEnrichment",
        "responseCode":202
      },
      "output":{"shape":"StartTelemetryEnrichmentOutput"},
      "errors":[
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Enables the resource tags for telemetry feature for your account, which enhances telemetry data with additional resource metadata from Resource Explorer to provide richer context for monitoring and observability. </p>"
    },
    "StartTelemetryEvaluation":{
      "name":"StartTelemetryEvaluation",
      "http":{
        "method":"POST",
        "requestUri":"/StartTelemetryEvaluation",
        "responseCode":200
      },
      "input":{"shape":"StartTelemetryEvaluationInput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> This action begins onboarding the caller Amazon Web Services account to the telemetry config feature. </p>"
    },
    "StartTelemetryEvaluationForOrganization":{
      "name":"StartTelemetryEvaluationForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/StartTelemetryEvaluationForOrganization",
        "responseCode":200
      },
      "input":{"shape":"StartTelemetryEvaluationForOrganizationInput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> This actions begins onboarding the organization and all member accounts to the telemetry config feature. </p>"
    },
    "StopTelemetryEnrichment":{
      "name":"StopTelemetryEnrichment",
      "http":{
        "method":"POST",
        "requestUri":"/StopTelemetryEnrichment",
        "responseCode":202
      },
      "output":{"shape":"StopTelemetryEnrichmentOutput"},
      "errors":[
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Disables the resource tags for telemetry feature for your account, stopping the enhancement of telemetry data with additional resource metadata. </p>"
    },
    "StopTelemetryEvaluation":{
      "name":"StopTelemetryEvaluation",
      "http":{
        "method":"POST",
        "requestUri":"/StopTelemetryEvaluation",
        "responseCode":200
      },
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> This action begins offboarding the caller Amazon Web Services account from the telemetry config feature. </p>"
    },
    "StopTelemetryEvaluationForOrganization":{
      "name":"StopTelemetryEvaluationForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/StopTelemetryEvaluationForOrganization",
        "responseCode":200
      },
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> This action offboards the Organization of the caller Amazon Web Services account from the telemetry config feature. </p>"
    },
    "TagResource":{
      "name":"TagResource",
      "http":{
        "method":"POST",
        "requestUri":"/TagResource",
        "responseCode":200
      },
      "input":{"shape":"TagResourceInput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Adds or updates tags for a resource. Supports telemetry rule resources and telemetry pipeline resources. </p>"
    },
    "TestTelemetryPipeline":{
      "name":"TestTelemetryPipeline",
      "http":{
        "method":"POST",
        "requestUri":"/TestTelemetryPipeline",
        "responseCode":200
      },
      "input":{"shape":"TestTelemetryPipelineInput"},
      "output":{"shape":"TestTelemetryPipelineOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Tests a pipeline configuration with sample records to validate data processing before deployment. This operation helps ensure your pipeline configuration works as expected. </p>"
    },
    "UntagResource":{
      "name":"UntagResource",
      "http":{
        "method":"POST",
        "requestUri":"/UntagResource",
        "responseCode":200
      },
      "input":{"shape":"UntagResourceInput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Removes tags from a resource. Supports telemetry rule resources and telemetry pipeline resources. </p>"
    },
    "UpdateCentralizationRuleForOrganization":{
      "name":"UpdateCentralizationRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/UpdateCentralizationRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"UpdateCentralizationRuleForOrganizationInput"},
      "output":{"shape":"UpdateCentralizationRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Updates an existing centralization rule that applies across an Amazon Web Services Organization. This operation can only be called by the organization's management account or a delegated administrator account.</p>"
    },
    "UpdateTelemetryPipeline":{
      "name":"UpdateTelemetryPipeline",
      "http":{
        "method":"POST",
        "requestUri":"/UpdateTelemetryPipeline",
        "responseCode":200
      },
      "input":{"shape":"UpdateTelemetryPipelineInput"},
      "output":{"shape":"UpdateTelemetryPipelineOutput"},
      "errors":[
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Updates the configuration of an existing telemetry pipeline.</p> <note> <p>The following attributes cannot be updated after pipeline creation:</p> <ul> <li> <p> <b>Pipeline name</b> - The pipeline name is immutable</p> </li> <li> <p> <b>Pipeline ARN</b> - The ARN is automatically generated and cannot be changed</p> </li> <li> <p> <b>Source type</b> - Once a pipeline is created with a specific source type (such as S3, CloudWatch Logs, GitHub, or third-party sources), it cannot be changed to a different source type</p> </li> </ul> <p>Processors can be added, removed, or modified. However, some processors are not supported for third-party pipelines and cannot be added through updates.</p> </note> <p> <b>Source-Specific Update Rules</b> </p> <dl> <dt>CloudWatch Logs Sources (Vended and Custom)</dt> <dd> <p> <b>Updatable:</b> <code>sts_role_arn</code> </p> <p> <b>Fixed:</b> <code>data_source_name</code>, <code>data_source_type</code>, sink (must remain <code>@original</code>)</p> </dd> <dt>S3 Sources (Crowdstrike, Zscaler, SentinelOne, Custom)</dt> <dd> <p> <b>Updatable:</b> All SQS configuration parameters, <code>sts_role_arn</code>, codec settings, compression type, bucket ownership settings, sink log group</p> <p> <b>Fixed:</b> <code>notification_type</code>, <code>aws.region</code> </p> </dd> <dt>GitHub Audit Logs</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>scope</code> (can switch between ORGANIZATION/ENTERPRISE), <code>organization</code> or <code>enterprise</code> name, <code>range</code>, authentication credentials (PAT or GitHub App)</p> </dd> <dt>Microsoft Sources (Entra ID, Office365, Windows)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>tenant_id</code>, <code>workspace_id</code> (Windows only), OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Okta Sources (SSO, Auth0)</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>domain</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Palo Alto Networks</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>hostname</code>, basic authentication credentials (<code>username</code>, <code>password</code>)</p> </dd> <dt>ServiceNow CMDB</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>instance_url</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> <dt>Wiz CNAPP</dt> <dd> <p> <b>Updatable:</b> All Amazon Web Services Secrets Manager attributes, <code>region</code>, <code>range</code>, OAuth2 credentials (<code>client_id</code>, <code>client_secret</code>)</p> </dd> </dl>"
    },
    "UpdateTelemetryRule":{
      "name":"UpdateTelemetryRule",
      "http":{
        "method":"POST",
        "requestUri":"/UpdateTelemetryRule",
        "responseCode":200
      },
      "input":{"shape":"UpdateTelemetryRuleInput"},
      "output":{"shape":"UpdateTelemetryRuleOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ResourceNotFoundException"},
        {"shape":"ConflictException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Updates an existing telemetry rule in your account. If multiple users attempt to modify the same telemetry rule simultaneously, a ConflictException is returned to provide specific error information for concurrent modification scenarios. </p>"
    },
    "UpdateTelemetryRuleForOrganization":{
      "name":"UpdateTelemetryRuleForOrganization",
      "http":{
        "method":"POST",
        "requestUri":"/UpdateTelemetryRuleForOrganization",
        "responseCode":200
      },
      "input":{"shape":"UpdateTelemetryRuleForOrganizationInput"},
      "output":{"shape":"UpdateTelemetryRuleForOrganizationOutput"},
      "errors":[
        {"shape":"ServiceQuotaExceededException"},
        {"shape":"ResourceNotFoundException"},
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p> Updates an existing telemetry rule that applies across an Amazon Web Services Organization. This operation can only be called by the organization's management account or a delegated administrator account. </p>"
    },
    "ValidateTelemetryPipelineConfiguration":{
      "name":"ValidateTelemetryPipelineConfiguration",
      "http":{
        "method":"POST",
        "requestUri":"/ValidateTelemetryPipelineConfiguration",
        "responseCode":200
      },
      "input":{"shape":"ValidateTelemetryPipelineConfigurationInput"},
      "output":{"shape":"ValidateTelemetryPipelineConfigurationOutput"},
      "errors":[
        {"shape":"AccessDeniedException"},
        {"shape":"InternalServerException"},
        {"shape":"ValidationException"},
        {"shape":"TooManyRequestsException"}
      ],
      "documentation":"<p>Validates a pipeline configuration without creating the pipeline. This operation checks the configuration for syntax errors and compatibility issues.</p>"
    }
  },
  "shapes":{
    "AccessDeniedException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "amznErrorType":{
          "shape":"String",
          "documentation":"<p> The name of the exception. </p>",
          "location":"header",
          "locationName":"x-amzn-ErrorType"
        }
      },
      "documentation":"<p> Indicates you don't have permissions to perform the requested operation. The user or role that is making the request must have at least one IAM permissions policy attached that grants the required permissions. For more information, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html\">Access management for Amazon Web Services resources</a> in the IAM user guide. </p>",
      "error":{
        "httpStatusCode":400,
        "senderFault":true
      },
      "exception":true
    },
    "AccountIdentifier":{
      "type":"string",
      "max":12,
      "min":12,
      "pattern":"[0-9]{12}"
    },
    "AccountIdentifiers":{
      "type":"list",
      "member":{"shape":"AccountIdentifier"},
      "max":10,
      "min":1
    },
    "Action":{
      "type":"string",
      "documentation":"<p> Enumeration of WAF actions that can be matched in filter conditions. </p>",
      "enum":[
        "ALLOW",
        "BLOCK",
        "COUNT",
        "CAPTCHA",
        "CHALLENGE",
        "EXCLUDED_AS_COUNT"
      ]
    },
    "ActionCondition":{
      "type":"structure",
      "members":{
        "Action":{
          "shape":"Action",
          "documentation":"<p> The WAF action to match against (ALLOW, BLOCK, COUNT, CAPTCHA, CHALLENGE, EXCLUDED_AS_COUNT). </p>"
        }
      },
      "documentation":"<p> Condition that matches based on the specific WAF action taken on the request. </p>"
    },
    "AdvancedEventSelector":{
      "type":"structure",
      "required":["FieldSelectors"],
      "members":{
        "Name":{
          "shape":"String",
          "documentation":"<p>An optional, descriptive name for an advanced event selector, such as \"Log data events for only two S3 buckets\".</p>"
        },
        "FieldSelectors":{
          "shape":"FieldSelectors",
          "documentation":"<p>Contains all selector statements in an advanced event selector.</p>"
        }
      },
      "documentation":"<p>Advanced event selectors let you create fine-grained selectors for management, data, and network activity events.</p>"
    },
    "AdvancedEventSelectors":{
      "type":"list",
      "member":{"shape":"AdvancedEventSelector"}
    },
    "AdvancedFieldSelector":{
      "type":"structure",
      "required":["Field"],
      "members":{
        "Field":{
          "shape":"String",
          "documentation":"<p> The name of the field to use for selection. </p>"
        },
        "Equals":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value equals the specified value. </p>"
        },
        "StartsWith":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value starts with the specified value. </p>"
        },
        "EndsWith":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value ends with the specified value. </p>"
        },
        "NotEquals":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value does not equal the specified value. </p>"
        },
        "NotStartsWith":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value does not start with the specified value. </p>"
        },
        "NotEndsWith":{
          "shape":"StringList",
          "documentation":"<p> Matches if the field value does not end with the specified value. </p>"
        }
      },
      "documentation":"<p> Defines criteria for selecting resources based on field values. </p>"
    },
    "AllRegions":{
      "type":"boolean",
      "box":true
    },
    "AwsResourceExplorerManagedViewArn":{
      "type":"string",
      "max":2048,
      "min":20,
      "pattern":"arn:aws([a-z0-9\\-]+)?:resource-explorer-2:([a-z0-9\\-]+)?:([0-9]{12})?:managed-view/(.+)"
    },
    "Boolean":{
      "type":"boolean",
      "box":true
    },
    "CentralizationFailureReason":{
      "type":"string",
      "enum":[
        "TRUSTED_ACCESS_NOT_ENABLED",
        "DESTINATION_ACCOUNT_NOT_IN_ORGANIZATION",
        "INTERNAL_SERVER_ERROR"
      ]
    },
    "CentralizationRule":{
      "type":"structure",
      "required":[
        "Source",
        "Destination"
      ],
      "members":{
        "Source":{
          "shape":"CentralizationRuleSource",
          "documentation":"<p>Configuration determining the source of the telemetry data to be centralized.</p>"
        },
        "Destination":{
          "shape":"CentralizationRuleDestination",
          "documentation":"<p>Configuration determining where the telemetry data should be centralized, backed up, as well as encryption configuration for the primary and backup destinations.</p>"
        }
      },
      "documentation":"<p>Defines how telemetry data should be centralized across an Amazon Web Services Organization, including source and destination configurations.</p>"
    },
    "CentralizationRuleDestination":{
      "type":"structure",
      "required":["Region"],
      "members":{
        "Region":{
          "shape":"Region",
          "documentation":"<p>The primary destination region to which telemetry data should be centralized.</p>"
        },
        "Account":{
          "shape":"AccountIdentifier",
          "documentation":"<p>The destination account (within the organization) to which the telemetry data should be centralized.</p>"
        },
        "DestinationLogsConfiguration":{
          "shape":"DestinationLogsConfiguration",
          "documentation":"<p>Log specific configuration for centralization destination log groups.</p>"
        },
        "DestinationMetricsConfiguration":{
          "shape":"DestinationMetricsConfiguration",
          "documentation":"<p>Metric specific configuration for centralization destination metrics.</p>"
        }
      },
      "documentation":"<p>Configuration specifying the primary destination for centralized telemetry data.</p>"
    },
    "CentralizationRuleSource":{
      "type":"structure",
      "required":["Regions"],
      "members":{
        "Regions":{
          "shape":"Regions",
          "documentation":"<p>The list of source regions from which telemetry data should be centralized.</p>"
        },
        "Scope":{
          "shape":"SourceFilterString",
          "documentation":"<p>The organizational scope from which telemetry data should be centralized, specified using organization id, accounts or organizational unit ids.</p>"
        },
        "SourceLogsConfiguration":{
          "shape":"SourceLogsConfiguration",
          "documentation":"<p>Log specific configuration for centralization source log groups.</p>"
        },
        "SourceMetricsConfiguration":{
          "shape":"SourceMetricsConfiguration",
          "documentation":"<p>Metric specific configuration for centralization source metrics.</p>"
        }
      },
      "documentation":"<p>Configuration specifying the source of telemetry data to be centralized.</p>"
    },
    "CentralizationRuleSummaries":{
      "type":"list",
      "member":{"shape":"CentralizationRuleSummary"}
    },
    "CentralizationRuleSummary":{
      "type":"structure",
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p>The name of the organization centralization rule.</p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the organization centralization rule.</p>"
        },
        "CreatorAccountId":{
          "shape":"String",
          "documentation":"<p>The Amazon Web Services Account that created the organization centralization rule.</p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the organization centralization rule was created.</p>"
        },
        "CreatedRegion":{
          "shape":"Region",
          "documentation":"<p>The Amazon Web Services region where the organization centralization rule was created.</p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the organization centralization rule was last updated.</p>"
        },
        "RuleHealth":{
          "shape":"RuleHealth",
          "documentation":"<p>The health status of the organization centralization rule.</p>"
        },
        "FailureReason":{
          "shape":"CentralizationFailureReason",
          "documentation":"<p>The reason why an organization centralization rule is marked UNHEALTHY.</p>"
        },
        "DestinationAccountId":{
          "shape":"String",
          "documentation":"<p>The primary destination account of the organization centralization rule.</p>"
        },
        "DestinationRegion":{
          "shape":"Region",
          "documentation":"<p>The primary destination region of the organization centralization rule.</p>"
        }
      },
      "documentation":"<p>A summary of a centralization rule's key properties and status.</p>"
    },
    "CloudtrailParameters":{
      "type":"structure",
      "required":["AdvancedEventSelectors"],
      "members":{
        "AdvancedEventSelectors":{
          "shape":"AdvancedEventSelectors",
          "documentation":"<p> The advanced event selectors to use for filtering Amazon Web Services CloudTrail events. </p>"
        }
      },
      "documentation":"<p> Parameters specific to Amazon Web Services CloudTrail telemetry configuration. </p>"
    },
    "Condition":{
      "type":"structure",
      "members":{
        "ActionCondition":{
          "shape":"ActionCondition",
          "documentation":"<p> Matches log records based on the WAF rule action taken (ALLOW, BLOCK, COUNT, etc.). </p>"
        },
        "LabelNameCondition":{
          "shape":"LabelNameCondition",
          "documentation":"<p> Matches log records based on WAF rule labels applied to the request. </p>"
        }
      },
      "documentation":"<p> A single condition that can match based on WAF rule action or label name. </p>"
    },
    "Conditions":{
      "type":"list",
      "member":{"shape":"Condition"},
      "documentation":"<p> A list of conditions for filter matching, with at least one condition required. </p>",
      "min":1
    },
    "ConfigurationSummary":{
      "type":"structure",
      "members":{
        "Sources":{
          "shape":"Sources",
          "documentation":"<p>The list of data sources configured in the pipeline.</p>"
        },
        "DataSources":{
          "shape":"DataSources",
          "documentation":"<p>The list of data sources that provide telemetry data to the pipeline.</p>"
        },
        "Processors":{
          "shape":"Processors",
          "documentation":"<p>The list of processors configured in the pipeline for data transformation.</p>"
        },
        "ProcessorCount":{
          "shape":"Integer",
          "documentation":"<p>The total number of processors configured in the pipeline.</p>"
        },
        "Sinks":{
          "shape":"Sinks",
          "documentation":"<p>The list of destinations where processed data is sent.</p>"
        }
      },
      "documentation":"<p>Provides a summary of pipeline configuration components including sources, processors, and destinations.</p>"
    },
    "ConflictException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "ResourceId":{
          "shape":"String",
          "documentation":"<p> The identifier of the resource which is in conflict with the requested operation. </p>"
        },
        "ResourceType":{
          "shape":"String",
          "documentation":"<p> The type of the resource which is in conflict with the requested operation. </p>"
        }
      },
      "documentation":"<p> The requested operation conflicts with the current state of the specified resource or with another request. </p>",
      "error":{
        "httpStatusCode":409,
        "senderFault":true
      },
      "exception":true
    },
    "CreateCentralizationRuleForOrganizationInput":{
      "type":"structure",
      "required":[
        "RuleName",
        "Rule"
      ],
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p>A unique name for the organization-wide centralization rule being created.</p>"
        },
        "Rule":{
          "shape":"CentralizationRule",
          "documentation":"<p>The configuration details for the organization-wide centralization rule, including the source configuration and the destination configuration to centralize telemetry data across the organization.</p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p>The key-value pairs to associate with the organization telemetry rule resource for categorization and management purposes.</p>"
        }
      }
    },
    "CreateCentralizationRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the created organization centralization rule.</p>"
        }
      }
    },
    "CreateS3TableIntegrationInput":{
      "type":"structure",
      "required":[
        "Encryption",
        "RoleArn"
      ],
      "members":{
        "Encryption":{
          "shape":"Encryption",
          "documentation":"<p>The encryption configuration for the S3 Table integration, including the encryption algorithm and KMS key settings.</p>"
        },
        "RoleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the IAM role that grants permissions for the S3 Table integration to access necessary resources.</p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p>The key-value pairs to associate with the S3 Table integration resource for categorization and management purposes.</p>"
        }
      }
    },
    "CreateS3TableIntegrationOutput":{
      "type":"structure",
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the created S3 Table integration.</p>"
        }
      }
    },
    "CreateTelemetryPipelineInput":{
      "type":"structure",
      "required":[
        "Name",
        "Configuration"
      ],
      "members":{
        "Name":{
          "shape":"TelemetryPipelineName",
          "documentation":"<p>The name of the telemetry pipeline to create. The name must be unique within your account.</p>"
        },
        "Configuration":{
          "shape":"TelemetryPipelineConfiguration",
          "documentation":"<p>The configuration that defines how the telemetry pipeline processes data, including sources, processors, and destinations. For more information about pipeline components, see the <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/pipeline-components-reference.html\">Amazon CloudWatch User Guide</a> </p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p>The key-value pairs to associate with the telemetry pipeline resource for categorization and management purposes.</p>"
        }
      }
    },
    "CreateTelemetryPipelineOutput":{
      "type":"structure",
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the created telemetry pipeline.</p>"
        }
      }
    },
    "CreateTelemetryRuleForOrganizationInput":{
      "type":"structure",
      "required":[
        "RuleName",
        "Rule"
      ],
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p> A unique name for the organization-wide telemetry rule being created. </p>"
        },
        "Rule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The configuration details for the organization-wide telemetry rule, including the resource type, telemetry type, destination configuration, and selection criteria for which resources the rule applies to across the organization. </p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p> The key-value pairs to associate with the organization telemetry rule resource for categorization and management purposes. </p>"
        }
      }
    },
    "CreateTelemetryRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the created organization telemetry rule. </p>"
        }
      }
    },
    "CreateTelemetryRuleInput":{
      "type":"structure",
      "required":[
        "RuleName",
        "Rule"
      ],
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p> A unique name for the telemetry rule being created. </p>"
        },
        "Rule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The configuration details for the telemetry rule, including the resource type, telemetry type, destination configuration, and selection criteria for which resources the rule applies to. </p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p> The key-value pairs to associate with the telemetry rule resource for categorization and management purposes. </p>"
        }
      }
    },
    "CreateTelemetryRuleOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the created telemetry rule. </p>"
        }
      }
    },
    "DataSource":{
      "type":"structure",
      "members":{
        "Name":{
          "shape":"String",
          "documentation":"<p>The name of the data source. For CloudWatch Logs sources, this corresponds to the <code>data_source_name</code> from the log event metadata. For third-party sources, this is either the configured <code>data_source_name</code> or defaults to the plugin name if not specified.</p>"
        },
        "Type":{
          "shape":"String",
          "documentation":"<p>The type of the data source. For CloudWatch Logs sources, this corresponds to the <code>data_source_type</code> from the log event metadata. For third-party sources, this field is empty.</p>"
        }
      },
      "documentation":"<p>Information about a data source associated with the telemetry pipeline. For CloudWatch Logs sources, this includes both a name and type extracted from the log event metadata. For third-party sources (such as S3), this includes only a name, with the type field left empty.</p>"
    },
    "DataSourceFilterString":{
      "type":"string",
      "max":2000,
      "min":1
    },
    "DataSources":{
      "type":"list",
      "member":{"shape":"DataSource"}
    },
    "DeleteCentralizationRuleForOrganizationInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p>The identifier (name or ARN) of the organization centralization rule to delete.</p>"
        }
      }
    },
    "DeleteS3TableIntegrationInput":{
      "type":"structure",
      "required":["Arn"],
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the S3 Table integration to delete.</p>"
        }
      }
    },
    "DeleteTelemetryPipelineInput":{
      "type":"structure",
      "required":["PipelineIdentifier"],
      "members":{
        "PipelineIdentifier":{
          "shape":"TelemetryPipelineIdentifier",
          "documentation":"<p>The ARN of the telemetry pipeline to delete.</p>"
        }
      }
    },
    "DeleteTelemetryPipelineOutput":{
      "type":"structure",
      "members":{}
    },
    "DeleteTelemetryRuleForOrganizationInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the organization telemetry rule to delete. </p>"
        }
      }
    },
    "DeleteTelemetryRuleInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the telemetry rule to delete. </p>"
        }
      }
    },
    "DestinationLogsConfiguration":{
      "type":"structure",
      "members":{
        "LogsEncryptionConfiguration":{
          "shape":"LogsEncryptionConfiguration",
          "documentation":"<p>The encryption configuration for centralization destination log groups.</p>"
        },
        "BackupConfiguration":{
          "shape":"LogsBackupConfiguration",
          "documentation":"<p>Configuration defining the backup region and an optional KMS key for the backup destination.</p>"
        },
        "LogGroupNameConfiguration":{
          "shape":"LogGroupNameConfiguration",
          "documentation":"<p>Configuration that specifies a naming pattern for destination log groups created during centralization. The pattern supports static text and dynamic variables that are replaced with source attributes when log groups are created.</p>"
        }
      },
      "documentation":"<p>Configuration for centralization destination log groups, including encryption and backup settings.</p>"
    },
    "DestinationMetricsConfiguration":{
      "type":"structure",
      "members":{
        "BackupConfiguration":{
          "shape":"MetricsBackupConfiguration",
          "documentation":"<p>Configuration defining the backup region for the metrics backup destination.</p>"
        }
      },
      "documentation":"<p>Configuration for centralization destination metrics, including backup settings.</p>"
    },
    "DestinationType":{
      "type":"string",
      "enum":["cloud-watch-logs"]
    },
    "ELBLoadBalancerLoggingParameters":{
      "type":"structure",
      "members":{
        "OutputFormat":{
          "shape":"OutputFormat",
          "documentation":"<p> The format for ELB access log entries (plain text or JSON format). </p>"
        },
        "FieldDelimiter":{
          "shape":"String",
          "documentation":"<p> The delimiter character used to separate fields in ELB access log entries when using plain text format. </p>"
        }
      },
      "documentation":"<p> Configuration parameters for ELB load balancer logging, including output format and field delimiter settings. </p>"
    },
    "EncryptedLogGroupStrategy":{
      "type":"string",
      "enum":[
        "ALLOW",
        "SKIP"
      ]
    },
    "Encryption":{
      "type":"structure",
      "required":["SseAlgorithm"],
      "members":{
        "SseAlgorithm":{
          "shape":"SSEAlgorithm",
          "documentation":"<p>The server-side encryption algorithm used for encrypting data in the S3 Table integration.</p>"
        },
        "KmsKeyArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the KMS key used for encryption when using customer-managed keys.</p>"
        }
      },
      "documentation":"<p>Defines the encryption configuration for S3 Table integrations, including the encryption algorithm and KMS key settings.</p>"
    },
    "EncryptionConflictResolutionStrategy":{
      "type":"string",
      "enum":[
        "ALLOW",
        "SKIP"
      ]
    },
    "EncryptionScope":{
      "type":"string",
      "documentation":"<p>Determines which newly created destination log groups are encrypted with the configured KMS key.</p>",
      "enum":[
        "ENCRYPTED_SOURCE_ONLY",
        "NEW_DESTINATION_LOG_GROUPS"
      ]
    },
    "EncryptionStrategy":{
      "type":"string",
      "enum":[
        "CUSTOMER_MANAGED",
        "AWS_OWNED"
      ]
    },
    "FailureReason":{"type":"string"},
    "FieldMap":{
      "type":"map",
      "key":{"shape":"String"},
      "value":{"shape":"String"}
    },
    "FieldSelectors":{
      "type":"list",
      "member":{"shape":"AdvancedFieldSelector"}
    },
    "FieldToMatch":{
      "type":"structure",
      "members":{
        "SingleHeader":{
          "shape":"SingleHeader",
          "documentation":"<p> Redacts a specific header field by name from WAF logs. </p>"
        },
        "UriPath":{
          "shape":"String",
          "documentation":"<p> Redacts the URI path from WAF logs. </p>"
        },
        "QueryString":{
          "shape":"String",
          "documentation":"<p> Redacts the entire query string from WAF logs. </p>"
        },
        "Method":{
          "shape":"String",
          "documentation":"<p> Redacts the HTTP method from WAF logs. </p>"
        }
      },
      "documentation":"<p> Specifies a field in the request to redact from WAF logs, such as headers, query parameters, or body content. </p>"
    },
    "Filter":{
      "type":"structure",
      "members":{
        "Behavior":{
          "shape":"FilterBehavior",
          "documentation":"<p> The action to take for log records matching this filter (KEEP or DROP). </p>"
        },
        "Requirement":{
          "shape":"FilterRequirement",
          "documentation":"<p> Whether the log record must meet all conditions (MEETS_ALL) or any condition (MEETS_ANY) to match this filter. </p>"
        },
        "Conditions":{
          "shape":"Conditions",
          "documentation":"<p> The list of conditions that determine if a log record matches this filter. </p>"
        }
      },
      "documentation":"<p> A single filter condition that specifies behavior, requirement, and matching conditions for WAF log records. </p>"
    },
    "FilterBehavior":{
      "type":"string",
      "documentation":"<p> Enumeration of filter actions: KEEP to include log records, DROP to exclude them. </p>",
      "enum":[
        "KEEP",
        "DROP"
      ]
    },
    "FilterRequirement":{
      "type":"string",
      "documentation":"<p> Enumeration of condition matching requirements: MEETS_ALL requires all conditions to match, MEETS_ANY requires at least one. </p>",
      "enum":[
        "MEETS_ALL",
        "MEETS_ANY"
      ]
    },
    "Filters":{
      "type":"list",
      "member":{"shape":"Filter"},
      "documentation":"<p> A list of filter conditions, with at least one filter required. </p>",
      "min":1
    },
    "GetCentralizationRuleForOrganizationInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p>The identifier (name or ARN) of the organization centralization rule to retrieve.</p>"
        }
      }
    },
    "GetCentralizationRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p>The name of the organization centralization rule.</p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the organization centralization rule.</p>"
        },
        "CreatorAccountId":{
          "shape":"String",
          "documentation":"<p>The Amazon Web Services Account that created the organization centralization rule.</p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the organization centralization rule was created.</p>"
        },
        "CreatedRegion":{
          "shape":"Region",
          "documentation":"<p>The Amazon Web Services region where the organization centralization rule was created.</p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the organization centralization rule was last updated.</p>"
        },
        "RuleHealth":{
          "shape":"RuleHealth",
          "documentation":"<p>The health status of the organization centralization rule.</p>"
        },
        "FailureReason":{
          "shape":"CentralizationFailureReason",
          "documentation":"<p>The reason why an organization centralization rule is marked UNHEALTHY.</p>"
        },
        "CentralizationRule":{
          "shape":"CentralizationRule",
          "documentation":"<p>The configuration details for the organization centralization rule.</p>"
        }
      }
    },
    "GetS3TableIntegrationInput":{
      "type":"structure",
      "required":["Arn"],
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the S3 Table integration to retrieve.</p>"
        }
      }
    },
    "GetS3TableIntegrationOutput":{
      "type":"structure",
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the S3 Table integration.</p>"
        },
        "RoleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the IAM role used by the S3 Table integration.</p>"
        },
        "Status":{
          "shape":"IntegrationStatus",
          "documentation":"<p>The current status of the S3 Table integration.</p>"
        },
        "Encryption":{
          "shape":"Encryption",
          "documentation":"<p>The encryption configuration for the S3 Table integration.</p>"
        },
        "DestinationTableBucketArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the S3 bucket used as the destination for the table data.</p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the S3 Table integration was created.</p>"
        }
      }
    },
    "GetTelemetryEnrichmentStatusOutput":{
      "type":"structure",
      "members":{
        "Status":{
          "shape":"TelemetryEnrichmentStatus",
          "documentation":"<p> The current status of the resource tags for telemetry feature (<code>Running</code>, <code>Stopped</code>, or <code>Impaired</code>). </p>"
        },
        "AwsResourceExplorerManagedViewArn":{
          "shape":"AwsResourceExplorerManagedViewArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the Resource Explorer managed view used for resource tags for telemetry, if the feature is enabled. </p>"
        }
      }
    },
    "GetTelemetryEvaluationStatusForOrganizationOutput":{
      "type":"structure",
      "members":{
        "Status":{
          "shape":"Status",
          "documentation":"<p> The onboarding status of the telemetry config feature for the organization. </p>"
        },
        "FailureReason":{
          "shape":"FailureReason",
          "documentation":"<p> This field describes the reason for the failure status. The field will only be populated if <code>Status</code> is <code>FAILED_START</code> or <code>FAILED_STOP</code>. </p>"
        },
        "HomeRegion":{
          "shape":"Region",
          "documentation":"<p> The Amazon Web Services Region that is designated as the home region for multi-region telemetry evaluation for the organization. The home region is the single management point for all multi-region operations on this organization. This field is only present when multi-region telemetry evaluation is active. </p>"
        },
        "RegionStatuses":{
          "shape":"RegionStatuses",
          "documentation":"<p> A list of per-region telemetry evaluation statuses for the organization. Each entry indicates the evaluation status for a specific spoke region included in the multi-region configuration. This field is only present when multi-region telemetry evaluation is active. </p>"
        }
      }
    },
    "GetTelemetryEvaluationStatusOutput":{
      "type":"structure",
      "members":{
        "Status":{
          "shape":"Status",
          "documentation":"<p> The onboarding status of the telemetry config feature. </p>"
        },
        "FailureReason":{
          "shape":"FailureReason",
          "documentation":"<p> Describes the reason for the failure status. The field will only be populated if <code>Status</code> is <code>FAILED_START</code> or <code>FAILED_STOP</code>. </p>"
        },
        "HomeRegion":{
          "shape":"Region",
          "documentation":"<p> The Amazon Web Services Region that is designated as the home region for multi-region telemetry evaluation. The home region is the single management point for all multi-region operations on this account. This field is only present when multi-region telemetry evaluation is active. </p>"
        },
        "RegionStatuses":{
          "shape":"RegionStatuses",
          "documentation":"<p> A list of per-region telemetry evaluation statuses. Each entry indicates the evaluation status for a specific spoke region included in the multi-region configuration. This field is only present when multi-region telemetry evaluation is active. </p>"
        }
      }
    },
    "GetTelemetryPipelineInput":{
      "type":"structure",
      "required":["PipelineIdentifier"],
      "members":{
        "PipelineIdentifier":{
          "shape":"TelemetryPipelineIdentifier",
          "documentation":"<p>The identifier (name or ARN) of the telemetry pipeline to retrieve.</p>"
        }
      }
    },
    "GetTelemetryPipelineOutput":{
      "type":"structure",
      "members":{
        "Pipeline":{
          "shape":"TelemetryPipeline",
          "documentation":"<p>The complete telemetry pipeline resource information, including configuration, status, and metadata.</p>"
        }
      }
    },
    "GetTelemetryRuleForOrganizationInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the organization telemetry rule to retrieve. </p>"
        }
      }
    },
    "GetTelemetryRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p> The name of the organization telemetry rule. </p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the organization telemetry rule. </p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the organization telemetry rule was created. </p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the organization telemetry rule was last updated. </p>"
        },
        "TelemetryRule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The configuration details of the organization telemetry rule. </p>"
        },
        "HomeRegion":{
          "shape":"Region",
          "documentation":"<p> The Amazon Web Services Region where the organization telemetry rule was originally created. For replicated rules in spoke regions, this indicates the region that manages the rule. For rules created without multi-region scope, this field is not present. </p>"
        },
        "IsReplicated":{
          "shape":"IsReplicated",
          "documentation":"<p> Indicates whether this organization telemetry rule is a replica that was created in this region through multi-region fan-out from the home region. Replicated rules cannot be directly updated or deleted in the spoke region. To modify a replicated rule, make changes in the home region. </p>"
        },
        "RegionStatuses":{
          "shape":"RegionStatuses",
          "documentation":"<p> A list of per-region replication statuses for the organization telemetry rule. Each entry indicates the replication status of the rule in a specific spoke region. This field is only present for rules created with multi-region scope. </p>"
        }
      }
    },
    "GetTelemetryRuleInput":{
      "type":"structure",
      "required":["RuleIdentifier"],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the telemetry rule to retrieve. </p>"
        }
      }
    },
    "GetTelemetryRuleOutput":{
      "type":"structure",
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p> The name of the telemetry rule. </p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule. </p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the telemetry rule was created. </p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the telemetry rule was last updated. </p>"
        },
        "TelemetryRule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The configuration details of the telemetry rule. </p>"
        },
        "HomeRegion":{
          "shape":"Region",
          "documentation":"<p> The Amazon Web Services Region where the telemetry rule was originally created. For replicated rules in spoke regions, this indicates the region that manages the rule. For rules created without multi-region scope, this field is not present. </p>"
        },
        "IsReplicated":{
          "shape":"IsReplicated",
          "documentation":"<p> Indicates whether this telemetry rule is a replica that was created in this region through multi-region fan-out from the home region. Replicated rules cannot be directly updated or deleted in the spoke region. To modify a replicated rule, make changes in the home region. </p>"
        },
        "RegionStatuses":{
          "shape":"RegionStatuses",
          "documentation":"<p> A list of per-region replication statuses for the telemetry rule. Each entry indicates the replication status of the rule in a specific spoke region. This field is only present for rules created with multi-region scope. </p>"
        }
      }
    },
    "Integer":{
      "type":"integer",
      "box":true
    },
    "IntegrationStatus":{
      "type":"string",
      "enum":[
        "ACTIVE",
        "DELETING"
      ]
    },
    "IntegrationSummaries":{
      "type":"list",
      "member":{"shape":"IntegrationSummary"}
    },
    "IntegrationSummary":{
      "type":"structure",
      "members":{
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the S3 Table integration.</p>"
        },
        "Status":{
          "shape":"IntegrationStatus",
          "documentation":"<p>The current status of the S3 Table integration.</p>"
        }
      },
      "documentation":"<p>Contains summary information about an S3 Table integration for listing operations.</p>"
    },
    "InternalServerException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "amznErrorType":{
          "shape":"String",
          "documentation":"<p> The name of the exception. </p>",
          "location":"header",
          "locationName":"x-amzn-ErrorType"
        },
        "retryAfterSeconds":{
          "shape":"Integer",
          "documentation":"<p>The number of seconds to wait before retrying the request.</p>",
          "location":"header",
          "locationName":"Retry-After"
        }
      },
      "documentation":"<p> Indicates the request has failed to process because of an unknown server error, exception, or failure. </p>",
      "error":{"httpStatusCode":500},
      "exception":true,
      "fault":true
    },
    "InvalidStateException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"}
      },
      "documentation":"<p> The requested operation cannot be completed on the specified resource in the current state. </p>",
      "error":{
        "httpStatusCode":400,
        "senderFault":true
      },
      "exception":true
    },
    "IsReplicated":{
      "type":"boolean",
      "box":true
    },
    "KmsKeyArn":{
      "type":"string",
      "max":2048,
      "min":1,
      "pattern":"arn:aws[a-zA-Z-]*:kms:[a-z0-9-]+:\\d{12}:key/(mrk-)?[a-f0-9-]+"
    },
    "LabelNameCondition":{
      "type":"structure",
      "members":{
        "LabelName":{
          "shape":"LabelNameConditionLabelNameString",
          "documentation":"<p> The label name to match, supporting alphanumeric characters, underscores, hyphens, and colons. </p>"
        }
      },
      "documentation":"<p> Condition that matches based on WAF rule labels, with label names limited to 1024 characters. </p>"
    },
    "LabelNameConditionLabelNameString":{
      "type":"string",
      "max":1024,
      "min":1,
      "pattern":"[0-9A-Za-z_\\-:]+"
    },
    "ListCentralizationRulesForOrganizationInput":{
      "type":"structure",
      "members":{
        "RuleNamePrefix":{
          "shape":"ListCentralizationRulesForOrganizationInputRuleNamePrefixString",
          "documentation":"<p>A string to filter organization centralization rules whose names begin with the specified prefix.</p>"
        },
        "AllRegions":{
          "shape":"Boolean",
          "documentation":"<p>A flag determining whether to return organization centralization rules from all regions or only the current region.</p>"
        },
        "MaxResults":{
          "shape":"ListCentralizationRulesForOrganizationMaxResults",
          "documentation":"<p>The maximum number of organization centralization rules to return in a single call.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>The token for the next set of results. A previous call generates this token.</p>"
        }
      }
    },
    "ListCentralizationRulesForOrganizationInputRuleNamePrefixString":{
      "type":"string",
      "max":100,
      "min":1
    },
    "ListCentralizationRulesForOrganizationMaxResults":{
      "type":"integer",
      "box":true,
      "max":100,
      "min":1
    },
    "ListCentralizationRulesForOrganizationOutput":{
      "type":"structure",
      "members":{
        "CentralizationRuleSummaries":{
          "shape":"CentralizationRuleSummaries",
          "documentation":"<p>A list of centralization rule summaries.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>A token to resume pagination of results.</p>"
        }
      }
    },
    "ListResourceTelemetryForOrganizationInput":{
      "type":"structure",
      "members":{
        "AccountIdentifiers":{
          "shape":"AccountIdentifiers",
          "documentation":"<p> A list of Amazon Web Services accounts used to filter the resources to those associated with the specified accounts. </p>"
        },
        "ResourceIdentifierPrefix":{
          "shape":"ResourceIdentifierPrefix",
          "documentation":"<p> A string used to filter resources in the organization which have a <code>ResourceIdentifier</code> starting with the <code>ResourceIdentifierPrefix</code>. </p>"
        },
        "ResourceTypes":{
          "shape":"ResourceTypes",
          "documentation":"<p> A list of resource types used to filter resources in the organization. If this parameter is provided, the resources will be returned in the same order used in the request. </p>"
        },
        "TelemetryConfigurationState":{
          "shape":"TelemetryConfigurationState",
          "documentation":"<p> A key-value pair to filter resources in the organization based on the telemetry type and the state of the telemetry configuration. The key is the telemetry type and the value is the state. </p>"
        },
        "ResourceTags":{
          "shape":"TagMapInput",
          "documentation":"<p> A key-value pair to filter resources in the organization based on tags associated with the resource. Fore more information about tags, see <a href=\"https://docs.aws.amazon.com/whitepapers/latest/tagging-best-practices/what-are-tags.html\">What are tags?</a> </p>"
        },
        "MaxResults":{
          "shape":"ListResourceTelemetryForOrganizationMaxResults",
          "documentation":"<p> A number field used to limit the number of results within the returned list. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of items to return. A previous call provides this token. </p>"
        }
      }
    },
    "ListResourceTelemetryForOrganizationMaxResults":{
      "type":"integer",
      "box":true,
      "max":50,
      "min":1
    },
    "ListResourceTelemetryForOrganizationOutput":{
      "type":"structure",
      "members":{
        "TelemetryConfigurations":{
          "shape":"TelemetryConfigurations",
          "documentation":"<p> A list of telemetry configurations for Amazon Web Services resources supported by telemetry config in the organization. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of items to return. A previous call provides this token. </p>"
        }
      }
    },
    "ListResourceTelemetryInput":{
      "type":"structure",
      "members":{
        "ResourceIdentifierPrefix":{
          "shape":"ResourceIdentifierPrefix",
          "documentation":"<p> A string used to filter resources which have a <code>ResourceIdentifier</code> starting with the <code>ResourceIdentifierPrefix</code>. </p>"
        },
        "ResourceTypes":{
          "shape":"ResourceTypes",
          "documentation":"<p> A list of resource types used to filter resources supported by telemetry config. If this parameter is provided, the resources will be returned in the same order used in the request. </p>"
        },
        "TelemetryConfigurationState":{
          "shape":"TelemetryConfigurationState",
          "documentation":"<p> A key-value pair to filter resources based on the telemetry type and the state of the telemetry configuration. The key is the telemetry type and the value is the state. </p>"
        },
        "ResourceTags":{
          "shape":"TagMapInput",
          "documentation":"<p> A key-value pair to filter resources based on tags associated with the resource. For more information about tags, see <a href=\"https://docs.aws.amazon.com/whitepapers/latest/tagging-best-practices/what-are-tags.html\">What are tags?</a> </p>"
        },
        "MaxResults":{
          "shape":"ListResourceTelemetryMaxResults",
          "documentation":"<p> A number field used to limit the number of results within the returned list. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of items to return. A previous call generates this token. </p>"
        }
      }
    },
    "ListResourceTelemetryMaxResults":{
      "type":"integer",
      "box":true,
      "max":50,
      "min":1
    },
    "ListResourceTelemetryOutput":{
      "type":"structure",
      "members":{
        "TelemetryConfigurations":{
          "shape":"TelemetryConfigurations",
          "documentation":"<p> A list of telemetry configurations for Amazon Web Services resources supported by telemetry config in the caller's account. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of items to return. A previous call generates this token. </p>"
        }
      }
    },
    "ListS3TableIntegrationsInput":{
      "type":"structure",
      "members":{
        "MaxResults":{
          "shape":"ListS3TableIntegrationsMaxResults",
          "documentation":"<p>The maximum number of S3 Table integrations to return in a single call.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>The token for the next set of results. A previous call generates this token.</p>"
        }
      }
    },
    "ListS3TableIntegrationsMaxResults":{
      "type":"integer",
      "box":true,
      "max":100,
      "min":1
    },
    "ListS3TableIntegrationsOutput":{
      "type":"structure",
      "members":{
        "IntegrationSummaries":{
          "shape":"IntegrationSummaries",
          "documentation":"<p>A list of S3 Table integration summaries containing key information about each integration.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>A token to resume pagination of results.</p>"
        }
      }
    },
    "ListTagsForResourceInput":{
      "type":"structure",
      "required":["ResourceARN"],
      "members":{
        "ResourceARN":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule resource whose tags you want to list. </p>"
        }
      }
    },
    "ListTagsForResourceOutput":{
      "type":"structure",
      "required":["Tags"],
      "members":{
        "Tags":{
          "shape":"TagMapOutput",
          "documentation":"<p> The list of tags associated with the telemetry rule resource. </p>"
        }
      }
    },
    "ListTelemetryPipelinesInput":{
      "type":"structure",
      "members":{
        "MaxResults":{
          "shape":"ListTelemetryPipelinesMaxResults",
          "documentation":"<p>The maximum number of telemetry pipelines to return in a single call.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>The token for the next set of results. A previous call generates this token.</p>"
        }
      }
    },
    "ListTelemetryPipelinesMaxResults":{
      "type":"integer",
      "box":true,
      "max":100,
      "min":1
    },
    "ListTelemetryPipelinesOutput":{
      "type":"structure",
      "members":{
        "PipelineSummaries":{
          "shape":"TelemetryPipelineSummaries",
          "documentation":"<p>A list of telemetry pipeline summaries containing key information about each pipeline.</p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p>A token to resume pagination of results.</p>"
        }
      }
    },
    "ListTelemetryRulesForOrganizationInput":{
      "type":"structure",
      "members":{
        "RuleNamePrefix":{
          "shape":"String",
          "documentation":"<p> A string to filter organization telemetry rules whose names begin with the specified prefix. </p>"
        },
        "SourceAccountIds":{
          "shape":"AccountIdentifiers",
          "documentation":"<p> The list of account IDs to filter organization telemetry rules by their source accounts. </p>"
        },
        "SourceOrganizationUnitIds":{
          "shape":"OrganizationUnitIdentifiers",
          "documentation":"<p> The list of organizational unit IDs to filter organization telemetry rules by their source organizational units. </p>"
        },
        "MaxResults":{
          "shape":"ListTelemetryRulesForOrganizationMaxResults",
          "documentation":"<p> The maximum number of organization telemetry rules to return in a single call. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of results. A previous call generates this token. </p>"
        }
      }
    },
    "ListTelemetryRulesForOrganizationMaxResults":{
      "type":"integer",
      "box":true,
      "max":100,
      "min":1
    },
    "ListTelemetryRulesForOrganizationOutput":{
      "type":"structure",
      "members":{
        "TelemetryRuleSummaries":{
          "shape":"TelemetryRuleSummaries",
          "documentation":"<p> A list of organization telemetry rule summaries. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> A token to resume pagination of results. </p>"
        }
      }
    },
    "ListTelemetryRulesInput":{
      "type":"structure",
      "members":{
        "RuleNamePrefix":{
          "shape":"String",
          "documentation":"<p> A string to filter telemetry rules whose names begin with the specified prefix. </p>"
        },
        "MaxResults":{
          "shape":"ListTelemetryRulesMaxResults",
          "documentation":"<p> The maximum number of telemetry rules to return in a single call. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> The token for the next set of results. A previous call generates this token. </p>"
        }
      }
    },
    "ListTelemetryRulesMaxResults":{
      "type":"integer",
      "box":true,
      "max":100,
      "min":1
    },
    "ListTelemetryRulesOutput":{
      "type":"structure",
      "members":{
        "TelemetryRuleSummaries":{
          "shape":"TelemetryRuleSummaries",
          "documentation":"<p> A list of telemetry rule summaries. </p>"
        },
        "NextToken":{
          "shape":"NextToken",
          "documentation":"<p> A token to resume pagination of results. </p>"
        }
      }
    },
    "LogDeliveryParameters":{
      "type":"structure",
      "members":{
        "LogTypes":{
          "shape":"LogTypes",
          "documentation":"<p>The types of logs to collect from the resource.</p>"
        }
      },
      "documentation":"<p>The configuration parameters for log delivery, including <code>logType</code> settings. Applies to resource types that support configurable log delivery, such as Amazon Bedrock Knowledge Bases and Elastic Load Balancing Application Load Balancers.</p>"
    },
    "LogGroupNameConfiguration":{
      "type":"structure",
      "required":["LogGroupNamePattern"],
      "members":{
        "LogGroupNamePattern":{
          "shape":"LogGroupNamePattern",
          "documentation":"<p>The pattern used to generate destination log group names during centralization. The pattern can contain static text and dynamic variables that are replaced with source attributes. If a variable cannot be resolved, it inherits the value from its parent variable in the hierarchy. The pattern must be between 1 and 512 characters.</p> <p>Supported variables:</p> <ul> <li> <p> <b>${source.logGroup}</b> — The original log group name from the source account.</p> </li> <li> <p> <b>${source.accountId}</b> — The Amazon Web Services account ID where the log originated.</p> </li> <li> <p> <b>${source.region}</b> — The Amazon Web Services Region where the log originated.</p> </li> <li> <p> <b>${source.org.id}</b> — The Amazon Web Services Organization ID of the source account.</p> </li> <li> <p> <b>${source.org.ouId}</b> — The organizational unit ID of the source account.</p> </li> <li> <p> <b>${source.org.rootId}</b> — The organization Root ID.</p> </li> <li> <p> <b>${source.org.path}</b> — The organizational path from account to root.</p> </li> </ul>"
        }
      },
      "documentation":"<p>Configuration that specifies a naming pattern for destination log groups created during centralization. The pattern supports static text and dynamic variables that are replaced with source attributes when log groups are created.</p>"
    },
    "LogGroupNamePattern":{
      "type":"string",
      "documentation":"<p>The pattern used to generate destination log group names during centralization. The pattern can contain static text and dynamic variables that are replaced with source attributes. If a variable cannot be resolved, it inherits the value from its parent variable in the hierarchy. The pattern must be between 1 and 512 characters.</p> <p>Supported variables:</p> <ul> <li> <p> <b>${source.logGroup}</b> — The original log group name from the source account.</p> </li> <li> <p> <b>${source.accountId}</b> — The Amazon Web Services account ID where the log originated.</p> </li> <li> <p> <b>${source.region}</b> — The Amazon Web Services Region where the log originated.</p> </li> <li> <p> <b>${source.org.id}</b> — The Amazon Web Services Organization ID of the source account.</p> </li> <li> <p> <b>${source.org.ouId}</b> — The organizational unit ID of the source account.</p> </li> <li> <p> <b>${source.org.rootId}</b> — The organization Root ID.</p> </li> <li> <p> <b>${source.org.path}</b> — The organizational path from account to root.</p> </li> </ul>",
      "max":512,
      "min":1,
      "pattern":"(?:[\\._\\-/#A-Za-z0-9]+|\\$\\{[A-Za-z]+(?:\\.[A-Za-z]+){1,2}\\})+"
    },
    "LogType":{
      "type":"string",
      "documentation":"<p>The following log types are supported for log delivery configuration:</p> <ul> <li> <p>APPLICATION_LOGS – Application-level logs.</p> </li> <li> <p>USAGE_LOGS – Resource usage logs.</p> </li> <li> <p>SECURITY_FINDING_LOGS – Security finding logs.</p> </li> <li> <p>ACCESS_LOGS – Access logs (such as Elastic Load Balancing access logs).</p> </li> <li> <p>CONNECTION_LOGS – Connection logs.</p> </li> <li> <p>S3_SERVER_ACCESS_LOGS – Amazon S3 server access logs.</p> </li> </ul>",
      "enum":[
        "APPLICATION_LOGS",
        "USAGE_LOGS",
        "SECURITY_FINDING_LOGS",
        "ACCESS_LOGS",
        "CONNECTION_LOGS",
        "S3_SERVER_ACCESS_LOGS",
        "ALB_ACCESS_LOGS",
        "ALB_CONNECTION_LOGS",
        "ALB_HEALTH_CHECK_LOGS"
      ]
    },
    "LogTypes":{
      "type":"list",
      "member":{"shape":"LogType"}
    },
    "LoggingFilter":{
      "type":"structure",
      "members":{
        "Filters":{
          "shape":"Filters",
          "documentation":"<p> A list of filter conditions that determine log record handling behavior. </p>"
        },
        "DefaultBehavior":{
          "shape":"FilterBehavior",
          "documentation":"<p> The default action (KEEP or DROP) for log records that don't match any filter conditions. </p>"
        }
      },
      "documentation":"<p> Configuration that determines which WAF log records to keep or drop based on specified conditions. </p>"
    },
    "LogsBackupConfiguration":{
      "type":"structure",
      "required":["Region"],
      "members":{
        "Region":{
          "shape":"Region",
          "documentation":"<p>Logs specific backup destination region within the primary destination account to which log data should be centralized.</p>"
        },
        "KmsKeyArn":{
          "shape":"ResourceArn",
          "documentation":"<p>KMS Key ARN belonging to the primary destination account and backup region, to encrypt newly created central log groups in the backup destination.</p>"
        }
      },
      "documentation":"<p>Configuration for backing up centralized log data to a secondary region.</p>"
    },
    "LogsEncryptionConfiguration":{
      "type":"structure",
      "required":["EncryptionStrategy"],
      "members":{
        "EncryptionStrategy":{
          "shape":"EncryptionStrategy",
          "documentation":"<p>Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.</p>"
        },
        "KmsKeyArn":{
          "shape":"ResourceArn",
          "documentation":"<p>KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.</p>"
        },
        "EncryptionConflictResolutionStrategy":{
          "shape":"EncryptionConflictResolutionStrategy",
          "documentation":"<p>Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.</p>"
        },
        "EncryptionScope":{
          "shape":"EncryptionScope",
          "documentation":"<p>Determines which newly created destination log groups are encrypted with the configured <code>KmsKeyArn</code> when <code>EncryptionStrategy</code> is <code>CUSTOMER_MANAGED</code>.</p> <p>If you set this to <code>ENCRYPTED_SOURCE_ONLY</code> (the default), only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured <code>KmsKeyArn</code>. Destination log groups derived from Amazon Web Services owned encrypted source log groups remain Amazon Web Services owned encrypted.</p> <p>If you set this to <code>NEW_DESTINATION_LOG_GROUPS</code>, every new destination log group created by this rule uses the configured <code>KmsKeyArn</code>, regardless of the source log group's encryption posture.</p> <p>This field is not valid when <code>EncryptionStrategy</code> is <code>AWS_OWNED</code>.</p>"
        }
      },
      "documentation":"<p>Configuration for encrypting centralized destination log groups. By default, this configuration applies only to destination log groups whose corresponding source log groups are encrypted using customer managed KMS keys. To encrypt all destination log groups created by the rule, set <code>EncryptionScope</code> to <code>NEW_DESTINATION_LOG_GROUPS</code>.</p>"
    },
    "LogsFilterString":{
      "type":"string",
      "max":2000,
      "min":1
    },
    "Long":{
      "type":"long",
      "box":true
    },
    "MetricsBackupConfiguration":{
      "type":"structure",
      "required":["Region"],
      "members":{
        "Region":{
          "shape":"Region",
          "documentation":"<p>Metrics specific backup destination region within the primary destination account to which metrics data should be centralized.</p>"
        }
      },
      "documentation":"<p>Configuration for backing up centralized metrics data to a secondary region.</p>"
    },
    "MetricsFilterString":{
      "type":"string",
      "max":2000,
      "min":1
    },
    "MskEnhancedMonitoringLevel":{
      "type":"string",
      "documentation":"<p> Enumeration of supported enhanced monitoring levels for Amazon MSK clusters: DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, and PER_TOPIC_PER_PARTITION. </p>",
      "enum":[
        "DEFAULT",
        "PER_BROKER",
        "PER_TOPIC_PER_BROKER",
        "PER_TOPIC_PER_PARTITION"
      ]
    },
    "MskMonitoringParameters":{
      "type":"structure",
      "members":{
        "EnhancedMonitoring":{
          "shape":"MskEnhancedMonitoringLevel",
          "documentation":"<p> The level of enhanced monitoring for the MSK cluster. </p>"
        }
      },
      "documentation":"<p> Configuration parameters for Amazon MSK cluster monitoring, including enhanced monitoring level settings. </p>"
    },
    "NextToken":{"type":"string"},
    "OrganizationUnitIdentifier":{
      "type":"string",
      "pattern":"ou-[0-9a-z]{4,32}-[a-z0-9]{8,32}"
    },
    "OrganizationUnitIdentifiers":{
      "type":"list",
      "member":{"shape":"OrganizationUnitIdentifier"},
      "min":1
    },
    "OutputFormat":{
      "type":"string",
      "documentation":"<p> Enumeration of supported output formats for ELB access logs: PLAIN for space-delimited format, JSON for structured JSON format. </p>",
      "enum":[
        "plain",
        "json"
      ]
    },
    "PipelineOutput":{
      "type":"structure",
      "members":{
        "Record":{
          "shape":"Record",
          "documentation":"<p>The processed record output from the pipeline test operation.</p>"
        },
        "Error":{
          "shape":"PipelineOutputError",
          "documentation":"<p>Any error that occurred during the pipeline test operation for this record.</p>"
        }
      },
      "documentation":"<p>Contains the output from pipeline test operations, including processed records and any errors encountered.</p>"
    },
    "PipelineOutputError":{
      "type":"structure",
      "members":{
        "Message":{
          "shape":"String",
          "documentation":"<p>The detailed error message describing what went wrong during the pipeline test operation for this record.</p>"
        }
      },
      "documentation":"<p>Contains detailed error information from pipeline test operations, providing structured error responses for better debugging and troubleshooting capabilities.</p>"
    },
    "PipelineOutputs":{
      "type":"list",
      "member":{"shape":"PipelineOutput"}
    },
    "Processors":{
      "type":"list",
      "member":{"shape":"String"}
    },
    "Record":{
      "type":"structure",
      "members":{
        "Data":{
          "shape":"String",
          "documentation":"<p>The data content of the test record used for pipeline validation.</p>"
        },
        "Type":{
          "shape":"RecordFormat",
          "documentation":"<p>The type of the test record, indicating the format or category of the data.</p>"
        }
      },
      "documentation":"<p>Represents a test record structure used for pipeline testing operations to validate data processing.</p>"
    },
    "RecordFormat":{
      "type":"string",
      "enum":[
        "STRING",
        "JSON"
      ]
    },
    "Records":{
      "type":"list",
      "member":{"shape":"Record"}
    },
    "RedactedFields":{
      "type":"list",
      "member":{"shape":"FieldToMatch"},
      "documentation":"<p> A list of fields to redact from WAF logs to protect sensitive information, with a maximum of 100 fields. </p>",
      "max":100,
      "min":0
    },
    "Region":{
      "type":"string",
      "min":1
    },
    "RegionStatus":{
      "type":"structure",
      "members":{
        "Region":{
          "shape":"Region",
          "documentation":"<p> The Amazon Web Services Region code (for example, <code>eu-west-1</code> or <code>us-west-2</code>) that this status applies to. </p>"
        },
        "Status":{
          "shape":"String",
          "documentation":"<p> The status of the operation in this region. For telemetry evaluation, valid values include <code>STARTING</code>, <code>RUNNING</code>, and <code>FAILED_START</code>. For telemetry rules, valid values include <code>PENDING</code>, <code>ACTIVE</code>, and <code>FAILED</code>. </p>"
        },
        "FailureReason":{
          "shape":"String",
          "documentation":"<p> The reason for a failure status in this region. This field is only populated when <code>Status</code> indicates a failure. </p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule in this spoke region. This field is only present for telemetry rule region statuses and is populated when the rule has been successfully created in the spoke region (status is <code>ACTIVE</code>). </p>"
        }
      },
      "documentation":"<p> Represents the status of a multi-region operation in a specific Amazon Web Services Region. This structure is used to report per-region progress for both telemetry evaluation and telemetry rule replication. </p>"
    },
    "RegionStatuses":{
      "type":"list",
      "member":{"shape":"RegionStatus"}
    },
    "Regions":{
      "type":"list",
      "member":{"shape":"Region"},
      "min":1
    },
    "ResourceArn":{
      "type":"string",
      "max":1011,
      "min":1,
      "pattern":"arn:aws([a-z0-9\\-]+)?:([a-zA-Z0-9\\-]+):([a-z0-9\\-]+)?:([0-9]{12})?:(.+)"
    },
    "ResourceIdentifier":{"type":"string"},
    "ResourceIdentifierPrefix":{
      "type":"string",
      "max":768,
      "min":3
    },
    "ResourceNotFoundException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "ResourceId":{
          "shape":"String",
          "documentation":"<p> The identifier of the resource which could not be found. </p>"
        },
        "ResourceType":{
          "shape":"String",
          "documentation":"<p> The type of the resource which could not be found. </p>"
        }
      },
      "documentation":"<p> The specified resource (such as a telemetry rule) could not be found. </p>",
      "error":{
        "httpStatusCode":404,
        "senderFault":true
      },
      "exception":true
    },
    "ResourceType":{
      "type":"string",
      "enum":[
        "AWS::EC2::Instance",
        "AWS::EC2::VPC",
        "AWS::Lambda::Function",
        "AWS::CloudTrail",
        "AWS::EKS::Cluster",
        "AWS::WAFv2::WebACL",
        "AWS::ElasticLoadBalancingV2::LoadBalancer",
        "AWS::Route53Resolver::ResolverEndpoint",
        "AWS::BedrockAgentCore::Runtime",
        "AWS::BedrockAgentCore::Browser",
        "AWS::BedrockAgentCore::CodeInterpreter",
        "AWS::BedrockAgentCore::Gateway",
        "AWS::BedrockAgentCore::Memory",
        "AWS::BedrockAgentCore::WorkloadIdentity",
        "AWS::SecurityHub::Hub",
        "AWS::CloudFront::Distribution",
        "AWS::SecurityHub::HubV2",
        "AWS::CloudWatch::OTelEnrichment",
        "AWS::MSK::Cluster",
        "AWS::S3::Bucket",
        "AWS::Bedrock::KnowledgeBase"
      ]
    },
    "ResourceTypes":{
      "type":"list",
      "member":{"shape":"ResourceType"},
      "max":9,
      "min":1
    },
    "RetentionPeriodInDays":{
      "type":"integer",
      "box":true,
      "max":3653,
      "min":1
    },
    "RuleHealth":{
      "type":"string",
      "enum":[
        "Healthy",
        "Unhealthy",
        "Provisioning"
      ]
    },
    "RuleIdentifier":{
      "type":"string",
      "max":1011,
      "min":1
    },
    "RuleName":{
      "type":"string",
      "max":100,
      "min":1,
      "pattern":"[0-9A-Za-z-_.#/]+"
    },
    "SSEAlgorithm":{
      "type":"string",
      "enum":[
        "aws:kms",
        "AES256"
      ]
    },
    "ServiceQuotaExceededException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "ResourceId":{
          "shape":"String",
          "documentation":"<p> The identifier of the resource which exceeds the service quota. </p>"
        },
        "ResourceType":{
          "shape":"String",
          "documentation":"<p> The type of the resource which exceeds the service quota. </p>"
        },
        "ServiceCode":{
          "shape":"String",
          "documentation":"<p> The code for the service of the exceeded quota. </p>"
        },
        "QuotaCode":{
          "shape":"String",
          "documentation":"<p> The code for the exceeded service quota. </p>"
        },
        "amznErrorType":{
          "shape":"String",
          "documentation":"<p> The name of the exception. </p>",
          "location":"header",
          "locationName":"x-amzn-ErrorType"
        }
      },
      "documentation":"<p> The requested operation would exceed the allowed quota for the specified resource type. </p>",
      "error":{
        "httpStatusCode":402,
        "senderFault":true
      },
      "exception":true
    },
    "SignalType":{
      "type":"string",
      "enum":[
        "LOG",
        "METRIC"
      ]
    },
    "SingleHeader":{
      "type":"structure",
      "members":{
        "Name":{
          "shape":"SingleHeaderNameString",
          "documentation":"<p> The name value, limited to 64 characters. </p>"
        }
      },
      "documentation":"<p> Structure containing a name field limited to 64 characters for header or query parameter identification. </p>"
    },
    "SingleHeaderNameString":{
      "type":"string",
      "max":64,
      "min":1
    },
    "Sinks":{
      "type":"list",
      "member":{"shape":"String"}
    },
    "Source":{
      "type":"structure",
      "members":{
        "Type":{
          "shape":"String",
          "documentation":"<p>The plugin name of the source, such as <code>cloudwatch_logs</code> or <code>s3</code>.</p>"
        }
      },
      "documentation":"<p>A list of source plugin types used in the pipeline configuration (such as <code>cloudwatch_logs</code> or <code>s3</code>). Currently supports a single source per pipeline, but is structured as a list to accommodate multiple pipelines in the configuration.</p>"
    },
    "SourceFilterString":{
      "type":"string",
      "max":2000,
      "min":1
    },
    "SourceLogsConfiguration":{
      "type":"structure",
      "required":["EncryptedLogGroupStrategy"],
      "members":{
        "LogGroupSelectionCriteria":{
          "shape":"LogsFilterString",
          "documentation":"<p>The selection criteria that specifies which source log groups to centralize. The selection criteria uses the same format as OAM link filters.</p>"
        },
        "DataSourceSelectionCriteria":{
          "shape":"DataSourceFilterString",
          "documentation":"<p>The selection criteria that specifies which data sources to centralize. The selection criteria uses the same filter expression format as <code>LogGroupSelectionCriteria</code>, but operates on <code>DataSourceName</code> and <code>DataSourceType</code> operands. When both <code>LogGroupSelectionCriteria</code> and <code>DataSourceSelectionCriteria</code> are specified, a log event must match both criteria to be centralized.</p>"
        },
        "EncryptedLogGroupStrategy":{
          "shape":"EncryptedLogGroupStrategy",
          "documentation":"<p>A strategy determining whether to centralize source log groups that are encrypted with customer managed KMS keys (CMK). ALLOW will consider CMK encrypted source log groups for centralization while SKIP will skip CMK encrypted source log groups from centralization.</p>"
        }
      },
      "documentation":"<p>Configuration for selecting and handling source log groups for centralization.</p>"
    },
    "SourceMetricsConfiguration":{
      "type":"structure",
      "members":{
        "MetricsSelectionCriteria":{
          "shape":"MetricsFilterString",
          "documentation":"<p>The filter expression that selects which source metrics to centralize. Currently, only <code>*</code> (all metrics) is supported. Other values return a validation error.</p>"
        }
      },
      "documentation":"<p>Configuration for selecting source metrics for centralization.</p>"
    },
    "Sources":{
      "type":"list",
      "member":{"shape":"Source"}
    },
    "StartTelemetryEnrichmentOutput":{
      "type":"structure",
      "members":{
        "Status":{
          "shape":"TelemetryEnrichmentStatus",
          "documentation":"<p> The status of the resource tags for telemetry feature after the start operation (<code>Running</code>, <code>Stopped</code>, or <code>Impaired</code>). </p>"
        },
        "AwsResourceExplorerManagedViewArn":{
          "shape":"AwsResourceExplorerManagedViewArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the Resource Explorer managed view created for resource tags for telemetry. </p>"
        }
      }
    },
    "StartTelemetryEvaluationForOrganizationInput":{
      "type":"structure",
      "members":{
        "Regions":{
          "shape":"Regions",
          "documentation":"<p> An optional list of Amazon Web Services Regions to include in multi-region telemetry evaluation for the organization. The current region is always implicitly included and must not be specified in this list. When provided, telemetry evaluation starts in the current region and propagates to all specified regions for the organization. Mutually exclusive with <code>AllRegions</code>. If neither <code>Regions</code> nor <code>AllRegions</code> is provided, the operation applies only to the current region. </p>"
        },
        "AllRegions":{
          "shape":"AllRegions",
          "documentation":"<p> If set to <code>true</code>, telemetry evaluation for the organization starts in all Amazon Web Services Regions where Amazon CloudWatch Observability Admin is available in the current partition. The current region becomes the home region for managing multi-region evaluation for the organization. When new regions become available, evaluation automatically expands to include them. Mutually exclusive with <code>Regions</code>. </p>"
        }
      }
    },
    "StartTelemetryEvaluationInput":{
      "type":"structure",
      "members":{
        "Regions":{
          "shape":"Regions",
          "documentation":"<p> An optional list of Amazon Web Services Regions to include in multi-region telemetry evaluation. The current region is always implicitly included and must not be specified in this list. When provided, telemetry evaluation starts in the current region and propagates to all specified regions. Mutually exclusive with <code>AllRegions</code>. If neither <code>Regions</code> nor <code>AllRegions</code> is provided, the operation applies only to the current region. </p>"
        },
        "AllRegions":{
          "shape":"AllRegions",
          "documentation":"<p> If set to <code>true</code>, telemetry evaluation starts in all Amazon Web Services Regions where Amazon CloudWatch Observability Admin is available in the current partition. The current region becomes the home region for managing multi-region evaluation. When new regions become available, evaluation automatically expands to include them. Mutually exclusive with <code>Regions</code>. </p>"
        }
      }
    },
    "Status":{
      "type":"string",
      "enum":[
        "NOT_STARTED",
        "STARTING",
        "FAILED_START",
        "RUNNING",
        "STOPPING",
        "FAILED_STOP",
        "STOPPED"
      ]
    },
    "StopTelemetryEnrichmentOutput":{
      "type":"structure",
      "members":{
        "Status":{
          "shape":"TelemetryEnrichmentStatus",
          "documentation":"<p> The status of the resource tags for telemetry feature after the stop operation (<code>Running</code>, <code>Stopped</code>, or <code>Impaired</code>). </p>"
        }
      }
    },
    "String":{"type":"string"},
    "StringList":{
      "type":"list",
      "member":{"shape":"String"}
    },
    "TagKey":{
      "type":"string",
      "max":128,
      "min":1,
      "pattern":"([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)"
    },
    "TagKeyList":{
      "type":"list",
      "member":{"shape":"TagKey"},
      "max":50,
      "min":1
    },
    "TagMapInput":{
      "type":"map",
      "key":{"shape":"TagKey"},
      "value":{"shape":"TagValue"},
      "max":50,
      "min":1
    },
    "TagMapOutput":{
      "type":"map",
      "key":{"shape":"String"},
      "value":{"shape":"String"}
    },
    "TagResourceInput":{
      "type":"structure",
      "required":[
        "ResourceARN",
        "Tags"
      ],
      "members":{
        "ResourceARN":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule resource to tag. </p>"
        },
        "Tags":{
          "shape":"TagMapInput",
          "documentation":"<p> The key-value pairs to add or update for the telemetry rule resource. </p>"
        }
      }
    },
    "TagValue":{
      "type":"string",
      "max":256,
      "min":0,
      "pattern":"([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)"
    },
    "TelemetryConfiguration":{
      "type":"structure",
      "members":{
        "AccountIdentifier":{
          "shape":"AccountIdentifier",
          "documentation":"<p> The account ID which contains the resource managed in telemetry configuration. An example of a valid account ID is <code>012345678901</code>. </p>"
        },
        "TelemetryConfigurationState":{
          "shape":"TelemetryConfigurationState",
          "documentation":"<p> The configuration state for the resource, for example <code>{ Logs: NotApplicable; Metrics: Enabled; Traces: NotApplicable; }</code>. </p>"
        },
        "ResourceType":{
          "shape":"ResourceType",
          "documentation":"<p> The type of resource, for example <code>Amazon Web Services::EC2::Instance</code>, or <code>Amazon Web Services::EKS::Cluster</code>, etc. </p>"
        },
        "ResourceIdentifier":{
          "shape":"ResourceIdentifier",
          "documentation":"<p> The identifier of the resource, for example for Amazon VPC, it would be <code>vpc-1a2b3c4d5e6f1a2b3</code>. </p>"
        },
        "ResourceTags":{
          "shape":"TagMapOutput",
          "documentation":"<p> Tags associated with the resource, for example <code>{ Name: \"ExampleInstance\", Environment: \"Development\" }</code>. </p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp of the last change to the telemetry configuration for the resource. For example, <code>1728679196318</code>. </p>"
        },
        "TelemetrySourceType":{"shape":"TelemetrySourceType"}
      },
      "documentation":"<p> A model representing the state of a resource within an account according to telemetry config. </p>"
    },
    "TelemetryConfigurationState":{
      "type":"map",
      "key":{"shape":"TelemetryType"},
      "value":{"shape":"TelemetryState"}
    },
    "TelemetryConfigurations":{
      "type":"list",
      "member":{"shape":"TelemetryConfiguration"}
    },
    "TelemetryDestinationConfiguration":{
      "type":"structure",
      "members":{
        "DestinationType":{
          "shape":"DestinationType",
          "documentation":"<p> The type of destination for the telemetry data (e.g., \"Amazon CloudWatch Logs\", \"S3\"). </p>"
        },
        "DestinationPattern":{
          "shape":"String",
          "documentation":"<p> The pattern used to generate the destination path or name, supporting macros like &lt;resourceId&gt; and &lt;accountId&gt;. </p>"
        },
        "RetentionInDays":{
          "shape":"RetentionPeriodInDays",
          "documentation":"<p> The number of days to retain the telemetry data in the destination. </p>"
        },
        "VPCFlowLogParameters":{
          "shape":"VPCFlowLogParameters",
          "documentation":"<p> Configuration parameters specific to VPC Flow Logs when VPC is the resource type. </p>"
        },
        "CloudtrailParameters":{
          "shape":"CloudtrailParameters",
          "documentation":"<p> Configuration parameters specific to Amazon Web Services CloudTrail when CloudTrail is the source type. </p>"
        },
        "ELBLoadBalancerLoggingParameters":{
          "shape":"ELBLoadBalancerLoggingParameters",
          "documentation":"<p> Configuration parameters specific to ELB load balancer logging when ELB is the resource type. </p>"
        },
        "WAFLoggingParameters":{
          "shape":"WAFLoggingParameters",
          "documentation":"<p> Configuration parameters specific to WAF logging when WAF is the resource type. </p>"
        },
        "LogDeliveryParameters":{
          "shape":"LogDeliveryParameters",
          "documentation":"<p>The configuration parameters for log delivery when the resource type supports configurable log types, such as Amazon Bedrock Knowledge Bases or Elastic Load Balancing Application Load Balancers.</p>"
        },
        "MskMonitoringParameters":{
          "shape":"MskMonitoringParameters",
          "documentation":"<p> Configuration parameters specific to MSK monitoring when MSK is the resource type. </p>"
        },
        "KmsKeyArn":{
          "shape":"KmsKeyArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the customer-managed Amazon Web Services KMS key used to encrypt the log groups created during telemetry rule remediation. </p>"
        }
      },
      "documentation":"<p> Configuration specifying where and how telemetry data should be delivered for Amazon Web Services resources. </p>"
    },
    "TelemetryEnrichmentStatus":{
      "type":"string",
      "enum":[
        "Running",
        "Stopped",
        "Impaired"
      ]
    },
    "TelemetryPipeline":{
      "type":"structure",
      "members":{
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the telemetry pipeline was created.</p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the telemetry pipeline was last updated.</p>"
        },
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the telemetry pipeline.</p>"
        },
        "Name":{
          "shape":"TelemetryPipelineName",
          "documentation":"<p>The name of the telemetry pipeline.</p>"
        },
        "Configuration":{
          "shape":"TelemetryPipelineConfiguration",
          "documentation":"<p>The configuration that defines how the telemetry pipeline processes data.</p>"
        },
        "Status":{
          "shape":"TelemetryPipelineStatus",
          "documentation":"<p>The current status of the telemetry pipeline.</p>"
        },
        "StatusReason":{
          "shape":"TelemetryPipelineStatusReason",
          "documentation":"<p>Additional information about the pipeline status, including reasons for failure states.</p>"
        },
        "Tags":{
          "shape":"TagMapOutput",
          "documentation":"<p>The key-value pairs associated with the telemetry pipeline resource.</p>"
        }
      },
      "documentation":"<p>Represents a complete telemetry pipeline resource with configuration, status, and metadata for data processing and transformation.</p>"
    },
    "TelemetryPipelineConfiguration":{
      "type":"structure",
      "required":["Body"],
      "members":{
        "Body":{
          "shape":"TelemetryPipelineConfigurationBody",
          "documentation":"<p>The pipeline configuration body that defines the data processing rules and transformations.</p>"
        }
      },
      "documentation":"<p>Defines the configuration for a pipeline, including how data flows from sources through processors to destinations. The configuration is specified in YAML format and must include a valid pipeline definition with required source and sink components. This pipeline enables end-to-end telemetry data collection, transformation, and delivery while supporting optional processing steps and extensions for enhanced functionality.</p> <p>The primary pipeline configuration section are:</p> <ul> <li> <p> <b>Source:</b> Defines where log data originates from (S3 buckets, CloudWatch Logs, third-party APIs). Each pipeline must have exactly one source.</p> </li> <li> <p> <b>Processors (optional):</b> Transform, parse, and enrich log data as it flows through the pipeline. Processors are applied sequentially in the order they are defined.</p> </li> <li> <p> <b>Sink:</b> Defines the destination where processed log data is sent. Each pipeline must have exactly one sink.</p> </li> <li> <p> <b>Extensions (optional):</b> Provide additional functionality such as Amazon Web Services Secrets Manager integration for credential management.</p> </li> </ul> <p>For more details on each configuration section see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-pipelines.html\">CloudWatch pipelines User Guide</a>. Additional comprehensive configuration examples can be found in the <a href=\"https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryPipeline.html#API_CreateTelemetryPipeline_Examples\">CreateTelemetryPipeline API docs</a>.</p>"
    },
    "TelemetryPipelineConfigurationBody":{
      "type":"string",
      "max":24000,
      "min":1
    },
    "TelemetryPipelineIdentifier":{
      "type":"string",
      "max":512,
      "min":1
    },
    "TelemetryPipelineName":{
      "type":"string",
      "max":28,
      "min":3,
      "pattern":".*[a-z][a-z0-9\\-]+.*"
    },
    "TelemetryPipelineStatus":{
      "type":"string",
      "enum":[
        "CREATING",
        "ACTIVE",
        "UPDATING",
        "DELETING",
        "CREATE_FAILED",
        "UPDATE_FAILED"
      ]
    },
    "TelemetryPipelineStatusReason":{
      "type":"structure",
      "members":{
        "Description":{
          "shape":"String",
          "documentation":"<p>A description of the pipeline status reason, providing additional context about the current state.</p>"
        }
      },
      "documentation":"<p>Provides detailed information about the status of a telemetry pipeline, including reasons for specific states.</p>"
    },
    "TelemetryPipelineSummaries":{
      "type":"list",
      "member":{"shape":"TelemetryPipelineSummary"}
    },
    "TelemetryPipelineSummary":{
      "type":"structure",
      "members":{
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the telemetry pipeline was created.</p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p>The timestamp when the telemetry pipeline was last updated.</p>"
        },
        "Arn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the telemetry pipeline.</p>"
        },
        "Name":{
          "shape":"TelemetryPipelineName",
          "documentation":"<p>The name of the telemetry pipeline.</p>"
        },
        "Status":{
          "shape":"TelemetryPipelineStatus",
          "documentation":"<p>The current status of the telemetry pipeline.</p>"
        },
        "Tags":{
          "shape":"TagMapOutput",
          "documentation":"<p>The key-value pairs associated with the telemetry pipeline resource.</p>"
        },
        "ConfigurationSummary":{
          "shape":"ConfigurationSummary",
          "documentation":"<p>A summary of the pipeline configuration components.</p>"
        }
      },
      "documentation":"<p>Contains summary information about a telemetry pipeline for listing operations.</p>"
    },
    "TelemetryRule":{
      "type":"structure",
      "required":["TelemetryType"],
      "members":{
        "ResourceType":{
          "shape":"ResourceType",
          "documentation":"<p> The type of Amazon Web Services resource to configure telemetry for (for example, <code>AWS::EC2::VPC</code>, <code>AWS::EKS::Cluster</code>, <code>AWS::ElasticLoadBalancingV2::LoadBalancer</code>, or <code>AWS::Bedrock::KnowledgeBase</code>). </p>"
        },
        "TelemetryType":{
          "shape":"TelemetryType",
          "documentation":"<p> The type of telemetry to collect (Logs, Metrics, or Traces). </p>"
        },
        "TelemetrySourceTypes":{
          "shape":"TelemetrySourceTypes",
          "documentation":"<p> The specific telemetry source types to configure for the resource, such as VPC_FLOW_LOGS or EKS_AUDIT_LOGS. TelemetrySourceTypes must be correlated with the specific resource type. </p>"
        },
        "DestinationConfiguration":{
          "shape":"TelemetryDestinationConfiguration",
          "documentation":"<p> Configuration specifying where and how the telemetry data should be delivered. </p>"
        },
        "Scope":{
          "shape":"String",
          "documentation":"<p> The organizational scope to which the rule applies, specified using accounts or organizational units. </p>"
        },
        "SelectionCriteria":{
          "shape":"String",
          "documentation":"<p> Criteria for selecting which resources the rule applies to, such as resource tags. </p>"
        },
        "AllowFieldUpdates":{
          "shape":"Boolean",
          "documentation":"<p> If set to <code>true</code>, Amazon CloudWatch Observability Admin detects and remediates configuration drift in telemetry resources that it manages. For example, if a VPC flow log's format, traffic type, or aggregation interval no longer matches the rule's destination configuration, the flow log is replaced with one that matches. Only Observability Admin-managed resources are updated; customer-created resources are never modified. Currently supported for <code>AWS::EC2::VPC</code> resources (VPC flow logs). </p>"
        },
        "Regions":{
          "shape":"Regions",
          "documentation":"<p> An optional list of Amazon Web Services Regions where this telemetry rule should be replicated. When specified, the rule is created in the home region and automatically replicated to all listed regions. Mutually exclusive with <code>AllRegions</code>. </p>"
        },
        "AllRegions":{
          "shape":"AllRegions",
          "documentation":"<p> If set to <code>true</code>, the telemetry rule is replicated to all Amazon Web Services Regions where Amazon CloudWatch Observability Admin is available in the current partition. When new regions become available, the rule automatically replicates to them. Mutually exclusive with <code>Regions</code>. </p>"
        }
      },
      "documentation":"<p> Defines how telemetry should be configured for specific Amazon Web Services resources. </p>"
    },
    "TelemetryRuleSummaries":{
      "type":"list",
      "member":{"shape":"TelemetryRuleSummary"}
    },
    "TelemetryRuleSummary":{
      "type":"structure",
      "members":{
        "RuleName":{
          "shape":"RuleName",
          "documentation":"<p> The name of the telemetry rule. </p>"
        },
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule. </p>"
        },
        "CreatedTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the telemetry rule was created. </p>"
        },
        "LastUpdateTimeStamp":{
          "shape":"Long",
          "documentation":"<p> The timestamp when the telemetry rule was last modified. </p>"
        },
        "ResourceType":{
          "shape":"ResourceType",
          "documentation":"<p> The type of Amazon Web Services resource the rule applies to. </p>"
        },
        "TelemetryType":{
          "shape":"TelemetryType",
          "documentation":"<p> The type of telemetry (Logs, Metrics, or Traces) the rule configures. </p>"
        },
        "TelemetrySourceTypes":{
          "shape":"TelemetrySourceTypes",
          "documentation":"<p> The types of telemetry sources configured for this rule, such as VPC Flow Logs or EKS audit logs. TelemetrySourceTypes must be correlated with the specific resource type. </p>"
        }
      },
      "documentation":"<p> A summary of a telemetry rule's key properties. </p>"
    },
    "TelemetrySourceType":{
      "type":"string",
      "documentation":"<p> Specifies the type of telemetry source for a resource, such as EKS cluster logs. </p>",
      "enum":[
        "VPC_FLOW_LOGS",
        "ROUTE53_RESOLVER_QUERY_LOGS",
        "EKS_AUDIT_LOGS",
        "EKS_AUTHENTICATOR_LOGS",
        "EKS_CONTROLLER_MANAGER_LOGS",
        "EKS_SCHEDULER_LOGS",
        "EKS_API_LOGS"
      ]
    },
    "TelemetrySourceTypes":{
      "type":"list",
      "member":{"shape":"TelemetrySourceType"},
      "documentation":"<p> A list of telemetry source types that specify what kind of telemetry data to collect from a resource. </p>"
    },
    "TelemetryState":{
      "type":"string",
      "enum":[
        "Enabled",
        "Disabled",
        "NotApplicable"
      ]
    },
    "TelemetryType":{
      "type":"string",
      "enum":[
        "Logs",
        "Metrics",
        "Traces"
      ]
    },
    "TestTelemetryPipelineInput":{
      "type":"structure",
      "required":[
        "Records",
        "Configuration"
      ],
      "members":{
        "Records":{
          "shape":"Records",
          "documentation":"<p>The sample records to process through the pipeline configuration for testing purposes.</p>"
        },
        "Configuration":{
          "shape":"TelemetryPipelineConfiguration",
          "documentation":"<p>The pipeline configuration to test with the provided sample records.</p>"
        },
        "SignalType":{
          "shape":"SignalType",
          "documentation":"<p>The type of telemetry signal to test. If not specified, defaults to log processing.</p>"
        }
      }
    },
    "TestTelemetryPipelineOutput":{
      "type":"structure",
      "members":{
        "Results":{
          "shape":"PipelineOutputs",
          "documentation":"<p>The results of processing the test records through the pipeline configuration, including any outputs or errors.</p>"
        }
      }
    },
    "TooManyRequestsException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"}
      },
      "documentation":"<p> The request throughput limit was exceeded. </p>",
      "error":{
        "httpStatusCode":429,
        "senderFault":true
      },
      "exception":true
    },
    "UntagResourceInput":{
      "type":"structure",
      "required":[
        "ResourceARN",
        "TagKeys"
      ],
      "members":{
        "ResourceARN":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the telemetry rule resource to remove tags from. </p>"
        },
        "TagKeys":{
          "shape":"TagKeyList",
          "documentation":"<p> The list of tag keys to remove from the telemetry rule resource. </p>"
        }
      }
    },
    "UpdateCentralizationRuleForOrganizationInput":{
      "type":"structure",
      "required":[
        "RuleIdentifier",
        "Rule"
      ],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p>The identifier (name or ARN) of the organization centralization rule to update.</p>"
        },
        "Rule":{
          "shape":"CentralizationRule",
          "documentation":"<p>The configuration details for the organization-wide centralization rule, including the source configuration and the destination configuration to centralize telemetry data across the organization.</p>"
        }
      }
    },
    "UpdateCentralizationRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p>The Amazon Resource Name (ARN) of the updated organization centralization rule.</p>"
        }
      }
    },
    "UpdateTelemetryPipelineInput":{
      "type":"structure",
      "required":[
        "PipelineIdentifier",
        "Configuration"
      ],
      "members":{
        "PipelineIdentifier":{
          "shape":"TelemetryPipelineIdentifier",
          "documentation":"<p>The ARN of the telemetry pipeline to update.</p>"
        },
        "Configuration":{
          "shape":"TelemetryPipelineConfiguration",
          "documentation":"<p>The new configuration for the telemetry pipeline, including updated sources, processors, and destinations.</p>"
        }
      }
    },
    "UpdateTelemetryPipelineOutput":{
      "type":"structure",
      "members":{}
    },
    "UpdateTelemetryRuleForOrganizationInput":{
      "type":"structure",
      "required":[
        "RuleIdentifier",
        "Rule"
      ],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the organization telemetry rule to update. </p>"
        },
        "Rule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The new configuration details for the organization telemetry rule, including resource type, telemetry type, and destination configuration. </p>"
        }
      }
    },
    "UpdateTelemetryRuleForOrganizationOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the updated organization telemetry rule. </p>"
        }
      }
    },
    "UpdateTelemetryRuleInput":{
      "type":"structure",
      "required":[
        "RuleIdentifier",
        "Rule"
      ],
      "members":{
        "RuleIdentifier":{
          "shape":"RuleIdentifier",
          "documentation":"<p> The identifier (name or ARN) of the telemetry rule to update. </p>"
        },
        "Rule":{
          "shape":"TelemetryRule",
          "documentation":"<p> The new configuration details for the telemetry rule. </p>"
        }
      }
    },
    "UpdateTelemetryRuleOutput":{
      "type":"structure",
      "members":{
        "RuleArn":{
          "shape":"ResourceArn",
          "documentation":"<p> The Amazon Resource Name (ARN) of the updated telemetry rule. </p>"
        }
      }
    },
    "VPCFlowLogParameters":{
      "type":"structure",
      "members":{
        "LogFormat":{
          "shape":"String",
          "documentation":"<p> The format in which VPC Flow Log entries should be logged. </p>"
        },
        "TrafficType":{
          "shape":"String",
          "documentation":"<p> The type of traffic to log (ACCEPT, REJECT, or ALL). </p>"
        },
        "MaxAggregationInterval":{
          "shape":"Integer",
          "documentation":"<p> The maximum interval in seconds between the capture of flow log records. </p>"
        }
      },
      "documentation":"<p> Configuration parameters specific to VPC Flow Logs. </p>"
    },
    "ValidateTelemetryPipelineConfigurationInput":{
      "type":"structure",
      "required":["Configuration"],
      "members":{
        "Configuration":{
          "shape":"TelemetryPipelineConfiguration",
          "documentation":"<p>The pipeline configuration to validate for syntax and compatibility.</p>"
        }
      }
    },
    "ValidateTelemetryPipelineConfigurationOutput":{
      "type":"structure",
      "members":{
        "Errors":{
          "shape":"ValidationErrors",
          "documentation":"<p>A list of validation errors found in the pipeline configuration, if any.</p>"
        }
      }
    },
    "ValidationError":{
      "type":"structure",
      "members":{
        "Message":{
          "shape":"String",
          "documentation":"<p>The error message describing the validation issue.</p>"
        },
        "Reason":{
          "shape":"String",
          "documentation":"<p>The reason code or category for the validation error.</p>"
        },
        "FieldMap":{
          "shape":"FieldMap",
          "documentation":"<p>A mapping of field names to specific validation issues within the configuration.</p>"
        }
      },
      "documentation":"<p>Represents a detailed validation error with message, reason, and field mapping for comprehensive error reporting.</p>"
    },
    "ValidationErrors":{
      "type":"list",
      "member":{"shape":"ValidationError"}
    },
    "ValidationException":{
      "type":"structure",
      "members":{
        "Message":{"shape":"String"},
        "Errors":{
          "shape":"ValidationErrors",
          "documentation":"<p> The errors in the input which caused the exception. </p>"
        }
      },
      "documentation":"<p> Indicates input validation failed. Check your request parameters and retry the request. </p>",
      "error":{
        "httpStatusCode":400,
        "senderFault":true
      },
      "exception":true
    },
    "WAFLogType":{
      "type":"string",
      "documentation":"<p> Enumeration of supported WAF log types. Currently only WAF_LOGS is supported. </p>",
      "enum":["WAF_LOGS"]
    },
    "WAFLoggingParameters":{
      "type":"structure",
      "members":{
        "RedactedFields":{
          "shape":"RedactedFields",
          "documentation":"<p> The fields to redact from WAF logs to protect sensitive information. </p>"
        },
        "LoggingFilter":{
          "shape":"LoggingFilter",
          "documentation":"<p> A filter configuration that determines which WAF log records to include or exclude. </p>"
        },
        "LogType":{
          "shape":"WAFLogType",
          "documentation":"<p> The type of WAF logs to collect (currently supports WAF_LOGS). </p>"
        }
      },
      "documentation":"<p> Configuration parameters for WAF logging, including redacted fields and logging filters. </p>"
    }
  },
  "documentation":"<p> You can use Amazon CloudWatch Observability Admin to discover and understand the state of telemetry configuration in CloudWatch for your Amazon Web Services Organization or account. This simplifies the process of auditing your telemetry collection configurations across multiple resource types within your Amazon Web Services Organization or account. By providing a consolidated view, it allows you to easily review and manage telemetry settings, helping you ensure proper monitoring and data collection across your Amazon Web Services environment. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.html\">Auditing CloudWatch telemetry conﬁgurations</a> in the CloudWatch User Guide.</p> <p>For information on the permissions you need to use this API, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html\">Identity and access management for Amazon CloudWatch</a> in the CloudWatch User Guide.</p>"
}
