AWS cli documentation change

Service: cli · 2026-03-28 · Documentation medium

File: cli/latest/reference/logs/create-scheduled-query.md

Summary

Updated query language valid values from 'LogsQL' to 'CWLI' and added two new parameters (ownerAccountId and kmsKeyId) to S3 configuration for scheduled queries

Security assessment

The addition of kmsKeyId parameter enables encryption at rest for query results stored in S3, which is a security enhancement. The ownerAccountId parameter helps with cross-account access control. However, there is no evidence this addresses a specific security vulnerability; it appears to be a feature enhancement.

Diff

diff --git a/cli/latest/reference/logs/create-scheduled-query.md b/cli/latest/reference/logs/create-scheduled-query.md
index badc20d95..7a891314c 100644
--- a//cli/latest/reference/logs/create-scheduled-query.md
+++ b//cli/latest/reference/logs/create-scheduled-query.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.19 Command Reference](../../index.html) »
@@ -130 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/logs-2
-> The query language to use for the scheduled query. Valid values are `LogsQL` , `PPL` , and `SQL` .
+> The query language to use for the scheduled query. Valid values are `CWLI` , `PPL` , and `SQL` .
@@ -229,0 +230,22 @@ Syntax:
+>> 
+>> ownerAccountId -> (string)
+>>
+>>> The AWS accountId for the bucket owning account.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `12`
+>>>   * max: `12`
+>>>   * pattern: `^\d{12}$`
+>>> 
+
+>> 
+>> kmsKeyId -> (string)
+>>
+>>> The Amazon Resource Name (ARN) of the KMS encryption key. Must belong to the same AWS Region as the destination Amazon S3 bucket.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * max: `256`
+>>> 
+
@@ -234 +256 @@ Shorthand Syntax:
-    s3Configuration={destinationIdentifier=string,roleArn=string}
+    s3Configuration={destinationIdentifier=string,roleArn=string,ownerAccountId=string,kmsKeyId=string}
@@ -243 +265,3 @@ JSON Syntax:
-        "roleArn": "string"
+        "roleArn": "string",
+        "ownerAccountId": "string",
+        "kmsKeyId": "string"
@@ -470 +494 @@ state -> (string)
-  * [AWS CLI 2.34.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.19 Command Reference](../../index.html) »