aws-cdk-lib.aws_logs.LogGroupProps

LogGroupProps Struct

Properties for a LogGroup.

Source

aws-logs/lib/log-group.ts

Type last changed

v2.236.0 · 23 Jan 2026

Example

const repository = new ecr.Repository(this, 'TestRepository', {
  repositoryName: 'test-agent-runtime',
});

const agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, 'v1.0.0');

// Use a /aws/vendedlogs/ log group for same-account delivery without explicit resource policy
const logGroup = new logs.LogGroup(this, 'RuntimeLogGroup', {
  logGroupName: '/aws/vendedlogs/bedrock-agentcore/my-runtime',
});

new agentcore.Runtime(this, 'test-runtime', {
  runtimeName: 'test_runtime',
  agentRuntimeArtifact: agentRuntimeArtifact,
  tracingEnabled: true,
  loggingConfigs: [
    {
      logType: agentcore.LogType.APPLICATION_LOGS,
      destination: agentcore.LoggingDestination.cloudWatchLogs(logGroup),
    },
  ],
  manageDeliveryResourcePolicy: false,
});

Properties

dataProtectionPolicyDataProtectionPolicydata_protection_policyDataProtectionPolicydataProtectionPolicyDataProtectionPolicyDataProtectionPolicyDataProtectionPolicyDataProtectionPolicyDataProtectionPolicy= no data protection policy#

Data Protection Policy for this log group.

deletionProtectionEnabledbooleandeletion_protection_enabledbooldeletionProtectionEnabledBooleanDeletionProtectionEnabledboolDeletionProtectionEnabled*bool= false#

Indicates whether deletion protection is enabled for this log group.

When enabled, deletion protection blocks all deletion operations until it is explicitly disabled.

encryptionKeyIKeyRefencryption_keyIKeyRefencryptionKeyIKeyRefEncryptionKeyIKeyRefEncryptionKeyIKeyRef= Server-side encryption managed b…#

The KMS customer managed key to encrypt the log group with.

default

Default: Server-side encryption managed by the CloudWatch Logs service

fieldIndexPoliciesFieldIndexPolicy[]field_index_policiestyping.List[FieldIndexPolicy]fieldIndexPoliciesList<FieldIndexPolicy>FieldIndexPoliciesFieldIndexPolicy[]FieldIndexPolicies*[]FieldIndexPolicy= no field index policies for this…#

Field Index Policies for this log group.

default

Default: no field index policies for this log group.

logGroupClassLogGroupClasslog_group_classLogGroupClasslogGroupClassLogGroupClassLogGroupClassLogGroupClassLogGroupClassLogGroupClass= LogGroupClass.STANDARD#

The class of the log group. Possible values are: STANDARD, INFREQUENT_ACCESS and DELIVERY.

notes

INFREQUENT_ACCESS class provides customers a cost-effective way to consolidate logs which supports querying using Logs Insights. The logGroupClass property cannot be changed once the log group is created.

DELIVERY class is used to deliver logs to a destination such as Amazon S3 or Amazon Data Firehose (for example, Lambda vended logs). A Delivery log group forwards events to a destination instead of storing them, so it does not support retention, dataProtectionPolicy, or fieldIndexPolicies; setting any of these together with LogGroupClass.DELIVERY results in a synthesis-time error.

logGroupNamestringlog_group_namestrlogGroupNameStringLogGroupNamestringLogGroupName*string= Automatically generated#

Name of the log group.

removalPolicyRemovalPolicyremoval_policyRemovalPolicyremovalPolicyRemovalPolicyRemovalPolicyRemovalPolicyRemovalPolicyRemovalPolicy= RemovalPolicy.Retain#

Determine the removal policy of this log group.

Normally you want to retain the log group so you can diagnose issues from logs even after a deployment that no longer includes the log group. In that case, use the normal date-based retention policy to age out your logs.

retentionRetentionDaysretentionRetentionDaysretentionRetentionDaysRetentionRetentionDaysRetentionRetentionDays= RetentionDays.TWO_YEARS#

How long, in days, the log contents will be retained.

To retain all logs, set this value to RetentionDays.INFINITE.

Used as props by

• LogGroup