---
title: "POST /UpdateTelemetryPipeline"
method: POST
path: "/UpdateTelemetryPipeline"
---

# POST /UpdateTelemetryPipeline

`POST /UpdateTelemetryPipeline`

Updates the configuration of an existing telemetry pipeline.

The following attributes cannot be updated after pipeline creation:

*   **Pipeline name** - The pipeline name is immutable
    
*   **Pipeline ARN** - The ARN is automatically generated and cannot be changed
    
*   **Source type** - Once a pipeline is created with a specific source type (such as S3, CloudWatch Logs, GitHub, or third-party sources), it cannot be changed to a different source type
    

Processors can be added, removed, or modified. However, some processors are not supported for third-party pipelines and cannot be added through updates.

**Source-Specific Update Rules**

CloudWatch Logs Sources (Vended and Custom)

**Updatable:** `sts_role_arn`

**Fixed:** `data_source_name`, `data_source_type`, sink (must remain `@original`)

S3 Sources (Crowdstrike, Zscaler, SentinelOne, Custom)

**Updatable:** All SQS configuration parameters, `sts_role_arn`, codec settings, compression type, bucket ownership settings, sink log group

**Fixed:** `notification_type`, `aws.region`

GitHub Audit Logs

**Updatable:** All Amazon Web Services Secrets Manager attributes, `scope` (can switch between ORGANIZATION/ENTERPRISE), `organization` or `enterprise` name, `range`, authentication credentials (PAT or GitHub App)

Microsoft Sources (Entra ID, Office365, Windows)

**Updatable:** All Amazon Web Services Secrets Manager attributes, `tenant_id`, `workspace_id` (Windows only), OAuth2 credentials (`client_id`, `client_secret`)

Okta Sources (SSO, Auth0)

**Updatable:** All Amazon Web Services Secrets Manager attributes, `domain`, `range`, OAuth2 credentials (`client_id`, `client_secret`)

Palo Alto Networks

**Updatable:** All Amazon Web Services Secrets Manager attributes, `hostname`, basic authentication credentials (`username`, `password`)

ServiceNow CMDB

**Updatable:** All Amazon Web Services Secrets Manager attributes, `instance_url`, `range`, OAuth2 credentials (`client_id`, `client_secret`)

Wiz CNAPP

**Updatable:** All Amazon Web Services Secrets Manager attributes, `region`, `range`, OAuth2 credentials (`client_id`, `client_secret`)

## Request body

- object
  - `PipelineIdentifier` string, required — The ARN of the telemetry pipeline to update.
  - `Configuration` object, required — <p>Defines the configuration for a pipeline, including how data flows from sources through processors to destinations. The configuration is specified in YAML format and must include a valid pipeline definition with required source and sink components. This pipeline enables end-to-end telemetry data collection, transformation, and delivery while supporting optional processing steps and extensions for enhanced functionality.</p> <p>The primary pipeline configuration section are:</p> <ul> <li> <p> <b>Source:</b> Defines where log data originates from (S3 buckets, CloudWatch Logs, third-party APIs). Each pipeline must have exactly one source.</p> </li> <li> <p> <b>Processors (optional):</b> Transform, parse, and enrich log data as it flows through the pipeline. Processors are applied sequentially in the order they are defined.</p> </li> <li> <p> <b>Sink:</b> Defines the destination where processed log data is sent. Each pipeline must have exactly one sink.</p> </li> <li> <p> <b>Extensions (optional):</b> Provide additional functionality such as Amazon Web Services Secrets Manager integration for credential management.</p> </li> </ul> <p>For more details on each configuration section see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-pipelines.html">CloudWatch pipelines User Guide</a>. Additional comprehensive configuration examples can be found in the <a href="https://docs.aws.amazon.com/cloudwatch/latest/observabilityadmin/API_CreateTelemetryPipeline.html#API_CreateTelemetryPipeline_Examples">CreateTelemetryPipeline API docs</a>.</p>
    - `Body` string — The pipeline configuration body that defines the data processing rules and transformations.

## Response `200`

Success

- UpdateTelemetryPipelineOutput

## Other responses

- `480` — ResourceNotFoundException
- `481` — AccessDeniedException
- `482` — InternalServerException
- `483` — ValidationException
- `484` — TooManyRequestsException

---

[API](https://skmtc.net/aws/apis/observabilityadmin.md) · [All operations](https://skmtc.net/aws/apis/observabilityadmin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/observabilityadmin/versions/542311537307/schema)