{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/amazon-cloudwatch/json-schema/amazon-cloudwatch-put-data-protection-policy-request-schema.json",
  "title": "PutDataProtectionPolicyRequest",
  "x-generated": "2026-11-11",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/amazon-cloudwatch-data-protection-policy-api-openapi.yml#/components/schemas/PutDataProtectionPolicyRequest",
  "type": "object",
  "properties": {
    "logGroupIdentifier": {
      "type": "string",
      "description": "Specify either the log group name or log group ARN."
    },
    "policyDocument": {
      "type": "string",
      "description": "Specify the data protection policy, in JSON. This policy must include two JSON blocks: The first block must include both a DataIdentifer array and an Operation property with an Audit action. The DataIdentifer array lists the types of sensitive data that you want to mask. For more information about the available options, see Types of data that you can mask. The Operation property with an Audit action is required to find the sensitive data terms. This Audit action must contain a FindingsDestination object. You can optionally use that FindingsDestination object to list one or more destinations to"
    }
  },
  "required": [
    "logGroupIdentifier",
    "policyDocument"
  ]
}