Amazon CloudWatch Logs Enhances Infrequent Access Analytics and Data Protection

CloudWatch Logs added support for OpenSearch PPL/SQL queries and data protection to the Infrequent Access ingestion class, improving analytics and security for infrequently queried logs.

By Elena Parker · Editorial pseudonym · 2026-03-27 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-03-27. Source published: 2026-03-27. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

The Logs IA tier targets cost-effective storage for logs accessed occasionally, such as forensic or troubleshooting data. AWS expanded query capabilities to include OpenSearch’s Piped Processing Language (PPL) and SQL, providing advanced log analytics beyond the existing Logs Insights language.

Data protection features now enable automatic detection and masking of sensitive information in logs, helping meet compliance requirements. These improvements facilitate secure, flexible analysis of less-frequently accessed logs, complementing prior features like export to S3 and encryption while reducing ingestion costs.

Source & further reading

Amazon CloudWatch Logs now supports data protection, OpenSearch PPL and OpenSearch SQL for the Infrequent Access ingestion class ↗

Source published 2026-03-27. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.