Package-level declarations
Types
The caller is not authorized to perform this action.
Full AccessGrant structure returned by API operations.
Permission levels for AccessGrants. SPACE_ADMIN can manage grants within a space but cannot create spaces.
The principal receiving the grant. Specify principalId, principalAttributes, or both.
A single attribute condition used to match principals for attribute-based access.
Type of principal receiving the grant.
Summary of an AccessGrant. Call GetAccessGrant for the full grant.
Who manages an access grant.
An Access Profile.
Summary of an access profile. Call GetAccessProfile for the full profile.
Who manages an access profile.
The condition that determines when the alert fires. On UpdateAlert a supplied condition is replaced whole, not merged: an omitted {@code warningThreshold} or {@code criticalThreshold} removes that tier, and an omitted {@code thresholdField} clears it. A condition must keep at least one tier. {@code thresholdMode} and {@code comparator} are optional at the Smithy level (so a single-tier condition is expressible) but are required whenever a threshold is present; enforced by the service-side validator.
Evaluation cadence. {@code intervalSeconds} must be one of {30, 60, 120, 300, 600, 900, 1800, 3600}; {@code pendingDurationSeconds} and {@code recoveryDurationSeconds} must be multiples of {@code intervalSeconds}. A duration of 0 means fire/clear immediately with no delay. On UpdateAlert a supplied evaluation block is replaced whole, not merged: an omitted {@code pendingDurationSeconds} or {@code recoveryDurationSeconds} is cleared to unset (no such duration), not preserved and not defaulted to 0. {@code intervalSeconds} is required whenever the block is present. All enforced server-side / by the front-door validator.
Filter criteria for ListAlerts. All members are optional; each omitted member is unconstrained. At most one of {@code names}, {@code namePrefix}, {@code ids} may be provided (mutually exclusive; the service rejects more than one). The remaining members combine with AND.
Query expression and the language it's written in.
Field by which alerts can be sorted.
Sort order for list results.
Flat alert state. Severity is folded in: a WARNING/CRITICAL alert reports that state directly. {@code NODATA} indicates the evaluation produced no data (subject to the rule's noData.treatAs handling).
Structured detail about the current evaluation.
Live evaluation state for an alert. Read-only, system-managed.
Summary representation of an alert used in list responses.
An API key used to authenticate an integration with its external system.
The calling principal's authorization to assume an access profile.
A set of temporary AWS credentials.
Base class for all service related exceptions thrown by the CloudWatchOmni client
Comparison operator for a threshold.
The operation could not be completed because of a conflict with the current state of the resource.
Counts of contributors currently breaching each severity threshold.
The request for creating an integration with a third-party provider.
The response from creating an integration.
The request for deleting an integration.
The response from deleting an integration. Empty by contract — a successful call indicates the deletion was accepted (DeleteIntegration is idempotent).
Current status of a domain.
Summary of a domain. Call GetDomain for the full domain.
Criteria for filtering edges in a context graph query.
Edge attributes promoted out of the flat attribute map onto typed members. Which members are present depends entirely on what produced the edge, so most edges carry only a few of them.
Additive traffic counters accumulated over an edge's observation window. Which counters are populated depends on what produced the edge.
How a resource's data at rest is encrypted. kmsKeyArn is required when encryptionStrategy is CUSTOMER_MANAGED and must be absent when it is AWS_OWNED; a mismatch is a ValidationException rather than a silently ignored field, so a caller that selects AWS_OWNED while still passing a key learns that the key was not applied.
Which kind of KMS key protects a resource's data at rest.
The request for retrieving a slice of the context graph.
The response containing the requested slice of the context graph.
The request for retrieving a single integration.
The response containing the requested integration.
The request for retrieving the intelligence configuration of the calling account.
The intelligence configuration for the calling account.
Identity Center specific configuration.
Identity provider type for a domain. Determines which identity mechanisms are active for authentication.
Identity provider configuration for domain authentication. Contains provider-specific configuration blocks.
A connection between CloudWatch and an external system — such as a source of telemetry or configuration data, a messaging destination, or a model provider.
The credential that an integration uses to authenticate with its external system. Exactly one member is set, matching the integration's authentication type.
Identifies a single integration by exactly one of its unique keys: the integration id, the integration ARN, or the integration name.
The current lifecycle state of an integration.
The type of external system that an integration connects to, such as a source of configuration data, a messaging destination, or a model provider.
An unexpected error occurred while processing the request.
The request for listing the integrations in an account.
The response containing a page of integrations.
One LOGS query selector block on a node. The attributes map's keys are AND'd; each selects with col = value. Deliberately RAW/un-normalized so the selector matches the store, not the node's merged identity.
A single metric observed on a context graph node.
The meaning and unit of a single metric.
Coarse classification of what a node is. Orthogonal to NodeType, which says whether the node is a service, a resource, or a remote service. Absent on most nodes today because few producers emit the source attribute.
Criteria for selecting nodes in a context graph query.
Node identity attributes promoted out of the flat attribute map onto typed members. The first four are part of the node's merge key, so a node that merged across sources reports one resolved value for each.
Semantic description of the service a context graph node represents.
Single notification rule: which transitions trigger this rule and where the resulting notification should be sent.
The destination for a notification.
Supported notification target type.
Trigger conditions for a notification rule. {@code stateValues} entries combine with OR semantics; empty / omitted = any state.
Credentials for an OAuth 2.0 client-credentials grant used to authenticate an integration with its external system.
Credentials for an OAuth 2.0 authorization-code grant, supplied when completing the authorization of an integration.
A dashboard within a space, including its body.
Summary of a dashboard. Call GetOmniDashboard for the full dashboard.
An organization-scoped access grant.
The principal receiving an organization-level domain access grant. Specify principalId, principalAttributes, or both.
Summary of an organization access grant. Call GetDomainAccessGrantForOrganization for the full grant.
Selects which member-account credential GetSpaceCredentialsForOrganization returns.
Detailed information about an organization domain.
Permission level for an organization-scoped grant.
Principal types valid for organization-level domain access grants.
Indicates whether a query returned partial results.
A user or group matched by SearchPrincipals.
Whether a principal is a user or a group.
The request for updating the intelligence configuration of the calling account.
The intelligence configuration for the calling account after the update.
Query language for an alert rule expression.
Statistics about a telemetry query execution.
The current status of a telemetry query.
The specified resource does not exist.
A single resource scope entry within an AccessGrant. Associates a resource type with optional ARN patterns, tag conditions, and row-level filters.
Match operator for a row-scope filter. Only IN is supported.
Whether an integration is account-scoped (customer-created) or organization-scoped (created by an org-enablement rule on behalf of the destination account). Mirrors the {@code Scope} discriminator used by CloudWatch Centralization / Observability Admin.
A group of actions within an access grant, together with the resource scopes and context conditions that apply to exactly those actions.
A service quota was exceeded.
Summary information about a query session, including its identifier, name, and activity timestamps.
Telemetry signal type that row-scoped access control applies to.
Identifies what the credentials are for: either an existing space, or a target account in a domain. Specify spaceId, or both domainId and targetAccountId.
Status of a space.
Summary of a space. Call GetSpace for the full space.
Telemetry-based rule: what to query, how to evaluate the result, what condition makes it fire, and what to do on missing data.
The type of telemetry data.
How a threshold is applied to query results.
The request was throttled due to exceeding the allowed request rate.
One TRACES query selector block on a node/edge (see LogMetadata).
The request for updating an existing integration.
The response from updating an integration.
A parameter is specified incorrectly.
Summary information about a view. Does not include the view definition.