CloudWatchLogs / Client / describe_account_policies



Returns a list of all CloudWatch Logs account policies in the account.

See also: AWS API Documentation

Request Syntax

response = client.describe_account_policies(
  • policyType (string) –


    Use this parameter to limit the returned policies to only the policies that match the policy type that you specify.

  • policyName (string) – Use this parameter to limit the returned policies to only the policy with the name that you specify.

  • accountIdentifiers (list) –

    If you are using an account that is set up as a monitoring account for CloudWatch unified cross-account observability, you can use this to specify the account ID of a source account. If you do, the operation returns the account policy for the specified account. Currently, you can specify only one account ID in this parameter.

    If you omit this parameter, only the policy in the current account is returned.

    • (string) –

Return type:



Response Syntax

    'accountPolicies': [
            'policyName': 'string',
            'policyDocument': 'string',
            'lastUpdatedTime': 123,
            'scope': 'ALL',
            'selectionCriteria': 'string',
            'accountId': 'string'

Response Structure

  • (dict) –

    • accountPolicies (list) –

      An array of structures that contain information about the CloudWatch Logs account policies that match the specified filters.

      • (dict) –

        A structure that contains information about one CloudWatch Logs account policy.

        • policyName (string) –

          The name of the account policy.

        • policyDocument (string) –

          The policy document for this account policy.

          The JSON specified in policyDocument can be up to 30,720 characters.

        • lastUpdatedTime (integer) –

          The date and time that this policy was most recently updated.

        • policyType (string) –

          The type of policy for this account policy.

        • scope (string) –

          The scope of the account policy.

        • selectionCriteria (string) –

          The log group selection criteria for this subscription filter policy.

        • accountId (string) –

          The Amazon Web Services account ID that the policy applies to.


  • CloudWatchLogs.Client.exceptions.InvalidParameterException

  • CloudWatchLogs.Client.exceptions.OperationAbortedException

  • CloudWatchLogs.Client.exceptions.ResourceNotFoundException

  • CloudWatchLogs.Client.exceptions.ServiceUnavailableException