# LogGroupProps

Properties for a LogGroup.

Extends: LogGroupProps
Used as props by: LogGroup

- Source: [`aws-logs/lib/log-group.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-logs/lib/log-group.ts#L543)
- Type last changed: v2.236.0 · 23 Jan 2026

## Example

```ts
const repository = new ecr.Repository(this, 'TestRepository', {
  repositoryName: 'test-agent-runtime',
});

const agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, 'v1.0.0');

// Use a /aws/vendedlogs/ log group for same-account delivery without explicit resource policy
const logGroup = new logs.LogGroup(this, 'RuntimeLogGroup', {
  logGroupName: '/aws/vendedlogs/bedrock-agentcore/my-runtime',
});

new agentcore.Runtime(this, 'test-runtime', {
  runtimeName: 'test_runtime',
  agentRuntimeArtifact: agentRuntimeArtifact,
  tracingEnabled: true,
  loggingConfigs: [
    {
      logType: agentcore.LogType.APPLICATION_LOGS,
      destination: agentcore.LoggingDestination.cloudWatchLogs(logGroup),
    },
  ],
  manageDeliveryResourcePolicy: false,
});
```

## Properties

- `dataProtectionPolicy`: [DataProtectionPolicy](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.DataProtectionPolicy.html) — Data Protection Policy for this log group.

  **Default:** no data protection policy

- `deletionProtectionEnabled`: boolean = false — Indicates whether deletion protection is enabled for this log group.

  When enabled,
  deletion protection blocks all deletion operations until it is explicitly disabled.

- `encryptionKey`: [IKeyRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_kms.IKeyRef.html) — The KMS customer managed key to encrypt the log group with.

  **Default:** Server-side encryption managed by the CloudWatch Logs service

- `fieldIndexPolicies`: [FieldIndexPolicy](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.FieldIndexPolicy.html)[] — Field Index Policies for this log group.

  **Default:** no field index policies for this log group.

- `logGroupClass`: [LogGroupClass](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.LogGroupClass.html) = LogGroupClass.STANDARD — The class of the log group. Possible values are: STANDARD, INFREQUENT_ACCESS and DELIVERY.

  INFREQUENT_ACCESS class provides customers a cost-effective way to consolidate
  logs which supports querying using Logs Insights. The logGroupClass property cannot
  be changed once the log group is created.

  DELIVERY class is used to deliver logs to a destination such as Amazon S3 or Amazon
  Data Firehose (for example, Lambda vended logs). A Delivery log group forwards events
  to a destination instead of storing them, so it does not support `retention`,
  `dataProtectionPolicy`, or `fieldIndexPolicies`; setting any of these together with
  `LogGroupClass.DELIVERY` results in a synthesis-time error.

- `logGroupName`: string — Name of the log group.

  **Default:** Automatically generated

- `removalPolicy`: [RemovalPolicy](/cdk/api/v2/docs/aws-cdk-lib.RemovalPolicy.html) = RemovalPolicy.Retain — Determine the removal policy of this log group.

  Normally you want to retain the log group so you can diagnose issues
  from logs even after a deployment that no longer includes the log group.
  In that case, use the normal date-based retention policy to age out your
  logs.

- `retention`: [RetentionDays](/cdk/api/v2/docs/aws-cdk-lib.aws_logs.RetentionDays.html) = RetentionDays.TWO_YEARS — How long, in days, the log contents will be retained.

  To retain all logs, set this value to RetentionDays.INFINITE.