Read-only CloudWatch Logs JSON transport using the optional :ex_aws_auth signer.
Credentials or a zero-argument credential resolver must be supplied explicitly;
this client never resolves credentials from environment, profiles or metadata.
Summary
Functions
Sends only FilterLogEvents with explicit interval/group and unmask=false; errors omit response bodies.
Validates explicit region, credentials/resolver and optional injected Plug transport.
Types
@type credentials() :: %{ :access_key_id => String.t(), :secret_access_key => String.t(), optional(:security_token) => String.t() | nil }
Caller-supplied credential map at the AWS signing boundary.
@type safe_reason() :: :unavailable | :invalid_request
@type t() :: %ReqManagedAgents.CloudWatch.Client{ credentials: credentials() | (-> {:ok, credentials()} | {:error, term()}) | nil, region: String.t(), timeout_ms: pos_integer(), transport: (term() -> term()) | nil }
Functions
@spec filter_log_events(t(), map()) :: {:ok, map()} | {:error, safe_reason()}
Sends only FilterLogEvents with explicit interval/group and unmask=false; errors omit response bodies.
@spec new(keyword() | t()) :: {:ok, t()} | {:error, ReqManagedAgents.Evidence.Error.t()}
Validates explicit region, credentials/resolver and optional injected Plug transport.