AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Creates a data protection policy for the specified log group. A data protection policy
can help safeguard sensitive data that's ingested by the log group by auditing and
masking the sensitive log data.
Sensitive data is detected and masked when it is ingested into the log group. When
you set a data protection policy, log events ingested into the log group before that
time are not masked.
By default, when a user views a log event that includes masked data, the sensitive
data is replaced by asterisks. A user who has the logs:Unmask permission can
use a GetLogEvents
or FilterLogEvents
operation with the unmask parameter set to true to view the unmasked
log events. Users with the logs:Unmask can also view unmasked data in the CloudWatch
Logs console by running a CloudWatch Logs Insights query with the unmask query
command.
For more information, including a list of types of data that can be audited and masked, see Protect sensitive log data with masking.
The PutDataProtectionPolicy operation applies to only the specified log group.
You can also use PutAccountPolicy
to create an account-level data protection policy that applies to all log groups in
the account, including both existing log groups and log groups that are created level.
If a log group has its own data protection policy and the account also has an account-level
data protection policy, then the two policies are cumulative. Any sensitive term specified
in either policy is masked.
This is an asynchronous operation using the standard naming convention for .NET 4.5 or higher. For .NET 3.5 the operation is implemented as a pair of methods using the standard naming convention of BeginPutDataProtectionPolicy and EndPutDataProtectionPolicy.
Namespace: Amazon.CloudWatchLogs
Assembly: AWSSDK.CloudWatchLogs.dll
Version: 3.x.y.z
public virtual Task<PutDataProtectionPolicyResponse> PutDataProtectionPolicyAsync( PutDataProtectionPolicyRequest request, CancellationToken cancellationToken )
Container for the necessary parameters to execute the PutDataProtectionPolicy service method.
A cancellation token that can be used by other objects or threads to receive notice of cancellation.
| Exception | Condition |
|---|---|
| InvalidParameterException | A parameter is specified incorrectly. |
| LimitExceededException | You have reached the maximum number of resources that can be created. |
| OperationAbortedException | Multiple concurrent requests to update the same resource were in conflict. |
| ResourceNotFoundException | The specified resource does not exist. |
| ServiceUnavailableException | The service cannot complete the request. |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5