Provisions a CMK-encrypted CloudWatch Logs vended log-delivery pipeline for a resource: a
MdaaLogGroup (CMK-encrypted, retention per MdaaVendedLogDeliveryProps.retention)
plus a CfnDeliverySource on the resource ARN → a CfnDeliveryDestination → a
CfnDelivery. Adds no KMS grants (see MdaaVendedLogDeliveryProps).
Children are created in scope (not in a wrapper construct) so callers keep their existing
construct-id tree and CloudFormation logical ids — reusable across L3s (e.g. the Bedrock Knowledge
Base and AgentCore Gateway constructs) without moving released baselines.
Provisions a CMK-encrypted CloudWatch Logs vended log-delivery pipeline for a resource: a MdaaLogGroup (CMK-encrypted, retention per MdaaVendedLogDeliveryProps.retention) plus a CfnDeliverySource on the resource ARN → a CfnDeliveryDestination → a CfnDelivery. Adds no KMS grants (see MdaaVendedLogDeliveryProps).
Children are created in
scope(not in a wrapper construct) so callers keep their existing construct-id tree and CloudFormation logical ids — reusable across L3s (e.g. the Bedrock Knowledge Base and AgentCore Gateway constructs) without moving released baselines.