---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_logs_log_group{% #aws_logs_log_group %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `arn`{% #arn %}

**Type**: `STRING`**Provider name**: `arn`**Description**: The Amazon Resource Name (ARN) of the log group. This version of the ARN includes a trailing `:` after the log group name. Use this version to refer to the ARN in IAM policies when specifying permissions for most API actions. The exception is when specifying permissions for [TagResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_TagResource.html), [UntagResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UntagResource.html), and [ListTagsForResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html). The permissions for those three actions require the ARN version that doesn't include a trailing `:`.

## `creation_time`{% #creation_time %}

**Type**: `INT64`**Provider name**: `creationTime`**Description**: The creation time of the log group, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.

## `data_protection_status`{% #data_protection_status %}

**Type**: `STRING`**Provider name**: `dataProtectionStatus`**Description**: Displays whether this log group has a protection policy, or whether it had one in the past. For more information, see [PutDataProtectionPolicy](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDataProtectionPolicy.html).

## `inherited_properties`{% #inherited_properties %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `inheritedProperties`**Description**: Displays all the properties that this log group has inherited from account-level settings.

## `kms_key_id`{% #kms_key_id %}

**Type**: `STRING`**Provider name**: `kmsKeyId`**Description**: The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data.

## `log_group_arn`{% #log_group_arn %}

**Type**: `STRING`**Provider name**: `logGroupArn`**Description**: The Amazon Resource Name (ARN) of the log group. This version of the ARN doesn't include a trailing `:*` after the log group name. Use this version to refer to the ARN in the following situations:

- In the `logGroupIdentifier` input field in many CloudWatch Logs APIs.
- In the `resourceArn` field in tagging APIs
- In IAM policies, when specifying permissions for [TagResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_TagResource.html), [UntagResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UntagResource.html), and [ListTagsForResource](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html).



## `log_group_class`{% #log_group_class %}

**Type**: `STRING`**Provider name**: `logGroupClass`**Description**: This specifies the log group class for this log group. There are three classes:

- The `Standard` log class supports all CloudWatch Logs features.
- The `Infrequent Access` log class supports a subset of CloudWatch Logs features and incurs lower costs.
- Use the `Delivery` log class only for delivering Lambda logs to store in Amazon S3 or Amazon Data Firehose. Log events in log groups in the Delivery class are kept in CloudWatch Logs for only one day. This log class doesn't offer rich CloudWatch Logs capabilities such as CloudWatch Logs Insights queries.
For details about the features supported by the Standard and Infrequent Access classes, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)


## `log_group_name`{% #log_group_name %}

**Type**: `STRING`**Provider name**: `logGroupName`**Description**: The name of the log group.

## `metric_filter_count`{% #metric_filter_count %}

**Type**: `INT32`**Provider name**: `metricFilterCount`**Description**: The number of metric filters.

## `retention_in_days`{% #retention_in_days %}

**Type**: `INT32`**Provider name**: `retentionInDays`

## `stored_bytes`{% #stored_bytes %}

**Type**: `INT64`**Provider name**: `storedBytes`**Description**: The number of bytes stored.

## `subscription_filters`{% #subscription_filters %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `subscriptionFilters`**Description**: The subscription filters.

- `apply_on_transformed_logs`**Type**: `BOOLEAN`**Provider name**: `applyOnTransformedLogs`**Description**: This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html). If this value is `true`, the subscription filter is applied on the transformed version of the log events instead of the original ingested log events.
- `creation_time`**Type**: `INT64`**Provider name**: `creationTime`**Description**: The creation time of the subscription filter, expressed as the number of milliseconds after `Jan 1, 1970 00:00:00 UTC`.
- `destination_arn`**Type**: `STRING`**Provider name**: `destinationArn`**Description**: The Amazon Resource Name (ARN) of the destination.
- `distribution`**Type**: `STRING`**Provider name**: `distribution`
- `filter_name`**Type**: `STRING`**Provider name**: `filterName`**Description**: The name of the subscription filter.
- `filter_pattern`**Type**: `STRING`**Provider name**: `filterPattern`
- `log_group_name`**Type**: `STRING`**Provider name**: `logGroupName`**Description**: The name of the log group.
- `role_arn`**Type**: `STRING`**Provider name**: `roleArn`**Description**:

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`