{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/amazon-cloudwatch/json-schema/amazon-cloudwatch-create-log-group-request-schema.json",
  "title": "CreateLogGroupRequest",
  "x-generated": "2026-11-11",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/amazon-cloudwatch-log-group-api-openapi.yml#/components/schemas/CreateLogGroupRequest",
  "type": "object",
  "properties": {
    "logGroupName": {
      "type": "string",
      "description": "A name for the log group."
    },
    "kmsKeyId": {
      "type": "string",
      "description": "The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data. For more information, see Amazon Resource Names."
    },
    "tags": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      },
      "description": "The key-value pairs to use for the tags. You can grant users access to certain log groups while preventing them from accessing other log groups. To do so, tag your groups and use IAM policies that refer to those tags. To assign tags when you create a log group, you must have either the logs:TagResource or logs:TagLogGroup permission. For more information about tagging, see Tagging Amazon Web Services resources. For more information about using tags to control access, see Controlling access to Amazon Web Services resources using tags."
    },
    "logGroupClass": {
      "type": "string",
      "enum": [
        "STANDARD",
        "INFREQUENT_ACCESS",
        "DELIVERY",
        "ESSENTIALS"
      ],
      "description": "Use this parameter to specify the log group class for this log group. There are four classes: The Standard log class supports all CloudWatch Logs features. The Infrequent Access log class supports a subset of CloudWatch Logs features and incurs lower costs. The Essentials log class supports a subset of CloudWatch Logs features and incurs lower costs. Use the Delivery log class only for delivering Lambda logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't offer rich CloudWatch Log"
    },
    "deletionProtectionEnabled": {
      "type": "boolean",
      "description": "Use this parameter to enable deletion protection for the new log group. When enabled on a log group, deletion protection blocks all deletion operations until it is explicitly disabled. By default log groups are created without deletion protection enabled."
    }
  },
  "required": [
    "logGroupName"
  ]
}