diff --git a/go.mod b/go.mod
index f1c9e2d652..8aea5e7336 100644
--- a/go.mod
+++ b/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/config v1.32.25
 	github.com/aws/aws-sdk-go-v2/credentials v1.19.24
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29
-	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.75.2
+	github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.76.0
 	github.com/aws/smithy-go v1.27.2
 	github.com/cloudflare/cfssl v1.6.5
 	github.com/containerd/cgroups/v3 v3.1.3
diff --git a/go.sum b/go.sum
index b6d9cabeb3..7c7721bb2f 100644
--- a/go.sum
+++ b/go.sum
@@ -98,8 +98,8 @@ github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 h1:RdwIf/CuUsvJX3RgJa
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29/go.mod h1:71wt8W2EgswdZy9Mf9KNnzxZ3TiZlv4caKghPktDOkA=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30/go.mod h1:AS0HycUvJRFvTt613AYDOgO2jzw+00cVSMny8XB3yMY=
-github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.75.2 h1:qXso3xK+5GmfBq8n/ymjJB12kHkO3Yhy9+8cIHlw6J4=
-github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.75.2/go.mod h1:N336OxQ6TvRbb6V1esVE8PtQFU86YvYaS+lVjsJTmP0=
+github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.76.0 h1:wdP7t2nMLk/EzDTqVgBuBBvY7I461+kPn2+wUyQSelY=
+github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.76.0/go.mod h1:N336OxQ6TvRbb6V1esVE8PtQFU86YvYaS+lVjsJTmP0=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12/go.mod h1:Ms4zlcVBbXbiP7EVLhl+lgjvA/a7YphqQ3Ih3174EmI=
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU=
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/CHANGELOG.md b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/CHANGELOG.md
index 7132265497..d07e298e0d 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/CHANGELOG.md
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/CHANGELOG.md
@@ -1,3 +1,7 @@
+# v1.76.0 (2026-06-15)
+
+* **Feature**: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses.
+
 # v1.75.2 (2026-06-08)
 
 * **Dependency Update**: Updated to the latest SDK module versions
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_CreateScheduledQuery.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_CreateScheduledQuery.go
index e3a0e3fe45..66cc3b5134 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_CreateScheduledQuery.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_CreateScheduledQuery.go
@@ -40,8 +40,7 @@ type CreateScheduledQueryInput struct {
 	ExecutionRoleArn *string
 
 	// The name of the scheduled query. The name must be unique within your account
-	// and region. Valid characters are alphanumeric characters, hyphens, underscores,
-	// and periods. Length must be between 1 and 255 characters.
+	// and region. Length must be between 1 and 300 characters.
 	//
 	// This member is required.
 	Name *string
@@ -73,6 +72,11 @@ type CreateScheduledQueryInput struct {
 	// destinations for storing query output.
 	DestinationConfiguration *types.DestinationConfiguration
 
+	// The time offset in seconds that defines the end of the lookback period for the
+	// query. Together with startTimeOffset , this determines the time window relative
+	// to the execution time over which the query runs.
+	EndTimeOffset *int64
+
 	// An array of log group names or ARNs to query. You can specify between 1 and 50
 	// log groups. Log groups can be identified by name or full ARN.
 	LogGroupIdentifiers []string
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetQueryResults.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetQueryResults.go
index bf9ad506c5..569b4fcf1a 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetQueryResults.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetQueryResults.go
@@ -32,6 +32,8 @@ import (
 // You can retrieve up to 100,000 log event results from a query, if available, by
 // using pagination. Use the nextToken returned in the response to request
 // additional pages of results, with each page returning up to 10,000 log events.
+// This is only supported for Logs Insights QL and is currently not supported for
+// PPL and SQL query languages.
 //
 // If you are using CloudWatch cross-account observability, you can use this
 // operation in a monitoring account to start queries in linked source accounts.
@@ -86,7 +88,8 @@ type GetQueryResultsOutput struct {
 	// If there are more log events remaining in the results, the response includes a
 	// nextToken . You can use this token in a subsequent GetQueryResults request to
 	// get the next set of results. You can retrieve up to 100,000 log event results
-	// from a query by paginating with this token.
+	// from a query by paginating with this token. This is only supported for Logs
+	// Insights QL and is currently not supported for PPL and SQL query languages.
 	NextToken *string
 
 	// The query language used for this query. For more information about the query
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetScheduledQuery.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetScheduledQuery.go
index 4e5d7371aa..faf14c0430 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetScheduledQuery.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_GetScheduledQuery.go
@@ -49,6 +49,10 @@ type GetScheduledQueryOutput struct {
 	// Configuration for where query results are delivered.
 	DestinationConfiguration *types.DestinationConfiguration
 
+	// The time offset in seconds that defines the end of the lookback period for the
+	// query.
+	EndTimeOffset *int64
+
 	// The ARN of the IAM role used to execute the query and deliver results.
 	ExecutionRoleArn *string
 
@@ -82,6 +86,10 @@ type GetScheduledQueryOutput struct {
 	// The start time for the scheduled query in Unix epoch format.
 	ScheduleStartTime *int64
 
+	// The schedule type of the scheduled query. Valid values are CUSTOMER_MANAGED and
+	// AWS_MANAGED .
+	ScheduleType types.ScheduleType
+
 	// The ARN of the scheduled query.
 	ScheduledQueryArn *string
 
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_ListScheduledQueries.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_ListScheduledQueries.go
index daf9b76233..7579dbada6 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_ListScheduledQueries.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_ListScheduledQueries.go
@@ -36,6 +36,11 @@ type ListScheduledQueriesInput struct {
 	// The token for the next set of items to return. The token expires after 24 hours.
 	NextToken *string
 
+	// Filter scheduled queries by schedule type. Valid values are CUSTOMER_MANAGED
+	// and AWS_MANAGED . If not specified, scheduled queries of all schedule types are
+	// returned.
+	ScheduleType types.ScheduleType
+
 	// Filter scheduled queries by state. Valid values are ENABLED and DISABLED . If
 	// not specified, all scheduled queries are returned.
 	State types.ScheduledQueryState
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_StartQuery.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_StartQuery.go
index d3d55c5681..ebe83e2f2c 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_StartQuery.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_StartQuery.go
@@ -100,11 +100,12 @@ type StartQueryInput struct {
 	// This member is required.
 	StartTime *int64
 
-	// The maximum number of log events to return in the query. If the query string
-	// uses the fields command, only the specified fields and their values are
-	// returned. The default is 10,000.
-	//
-	// The maximum value is 100,000.
+	// The maximum number of log events to return from the query. The maximum limit is
+	// 100,000. The maximum events returned in a single GetQueryResults API call is
+	// 10,000 log events per request. You can retrieve up to 100,000 log event results
+	// from a query by paginating with the nextToken . 100,000 limit is only supported
+	// for Logs Insights QL and is currently not supported for PPL and SQL query
+	// languages.
 	Limit *int32
 
 	// The list of log groups to query. You can include up to 50 log groups.
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_UpdateScheduledQuery.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_UpdateScheduledQuery.go
index ac77ea672e..21efb68175 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_UpdateScheduledQuery.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/api_op_UpdateScheduledQuery.go
@@ -63,6 +63,10 @@ type UpdateScheduledQueryInput struct {
 	// The updated configuration for where to deliver query results.
 	DestinationConfiguration *types.DestinationConfiguration
 
+	// The updated time offset in seconds that defines the end of the lookback period
+	// for the query.
+	EndTimeOffset *int64
+
 	// The updated array of log group names or ARNs to query.
 	LogGroupIdentifiers []string
 
@@ -96,6 +100,9 @@ type UpdateScheduledQueryOutput struct {
 	// The destination configuration of the updated scheduled query.
 	DestinationConfiguration *types.DestinationConfiguration
 
+	// The end time offset in seconds of the updated scheduled query.
+	EndTimeOffset *int64
+
 	// The execution role ARN of the updated scheduled query.
 	ExecutionRoleArn *string
 
@@ -129,6 +136,9 @@ type UpdateScheduledQueryOutput struct {
 	// The start time of the updated scheduled query.
 	ScheduleStartTime *int64
 
+	// The schedule type of the updated scheduled query.
+	ScheduleType types.ScheduleType
+
 	// The ARN of the updated scheduled query.
 	ScheduledQueryArn *string
 
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/deserializers.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/deserializers.go
index 33949ffab8..c31cd9cb61 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/deserializers.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/deserializers.go
@@ -12832,6 +12832,9 @@ func awsAwsjson11_deserializeOpErrorUpdateScheduledQuery(response *smithyhttp.Re
 	case strings.EqualFold("AccessDeniedException", errorCode):
 		return awsAwsjson11_deserializeErrorAccessDeniedException(response, errorBody)
 
+	case strings.EqualFold("ConflictException", errorCode):
+		return awsAwsjson11_deserializeErrorConflictException(response, errorBody)
+
 	case strings.EqualFold("InternalServerException", errorCode):
 		return awsAwsjson11_deserializeErrorInternalServerException(response, errorBody)
 
@@ -23677,6 +23680,15 @@ func awsAwsjson11_deserializeDocumentScheduledQuerySummary(v **types.ScheduledQu
 				sv.ScheduleExpression = ptr.String(jtv)
 			}
 
+		case "scheduleType":
+			if value != nil {
+				jtv, ok := value.(string)
+				if !ok {
+					return fmt.Errorf("expected ScheduleType to be of type string, got %T instead", value)
+				}
+				sv.ScheduleType = types.ScheduleType(jtv)
+			}
+
 		case "state":
 			if value != nil {
 				jtv, ok := value.(string)
@@ -27351,6 +27363,19 @@ func awsAwsjson11_deserializeOpDocumentGetScheduledQueryOutput(v **GetScheduledQ
 				return err
 			}
 
+		case "endTimeOffset":
+			if value != nil {
+				jtv, ok := value.(json.Number)
+				if !ok {
+					return fmt.Errorf("expected EndTimeOffset to be json.Number, got %T instead", value)
+				}
+				i64, err := jtv.Int64()
+				if err != nil {
+					return err
+				}
+				sv.EndTimeOffset = ptr.Int64(i64)
+			}
+
 		case "executionRoleArn":
 			if value != nil {
 				jtv, ok := value.(string)
@@ -27471,6 +27496,15 @@ func awsAwsjson11_deserializeOpDocumentGetScheduledQueryOutput(v **GetScheduledQ
 				sv.ScheduleStartTime = ptr.Int64(i64)
 			}
 
+		case "scheduleType":
+			if value != nil {
+				jtv, ok := value.(string)
+				if !ok {
+					return fmt.Errorf("expected ScheduleType to be of type string, got %T instead", value)
+				}
+				sv.ScheduleType = types.ScheduleType(jtv)
+			}
+
 		case "startTimeOffset":
 			if value != nil {
 				jtv, ok := value.(json.Number)
@@ -28752,6 +28786,19 @@ func awsAwsjson11_deserializeOpDocumentUpdateScheduledQueryOutput(v **UpdateSche
 				return err
 			}
 
+		case "endTimeOffset":
+			if value != nil {
+				jtv, ok := value.(json.Number)
+				if !ok {
+					return fmt.Errorf("expected EndTimeOffset to be json.Number, got %T instead", value)
+				}
+				i64, err := jtv.Int64()
+				if err != nil {
+					return err
+				}
+				sv.EndTimeOffset = ptr.Int64(i64)
+			}
+
 		case "executionRoleArn":
 			if value != nil {
 				jtv, ok := value.(string)
@@ -28872,6 +28919,15 @@ func awsAwsjson11_deserializeOpDocumentUpdateScheduledQueryOutput(v **UpdateSche
 				sv.ScheduleStartTime = ptr.Int64(i64)
 			}
 
+		case "scheduleType":
+			if value != nil {
+				jtv, ok := value.(string)
+				if !ok {
+					return fmt.Errorf("expected ScheduleType to be of type string, got %T instead", value)
+				}
+				sv.ScheduleType = types.ScheduleType(jtv)
+			}
+
 		case "startTimeOffset":
 			if value != nil {
 				jtv, ok := value.(json.Number)
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/go_module_metadata.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/go_module_metadata.go
index 9c422305dd..9530cd76f5 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/go_module_metadata.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/go_module_metadata.go
@@ -3,4 +3,4 @@
 package cloudwatchlogs
 
 // goModuleVersion is the tagged release for this module
-const goModuleVersion = "1.75.2"
+const goModuleVersion = "1.76.0"
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/serializers.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/serializers.go
index 513702ebeb..5c8da84761 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/serializers.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/serializers.go
@@ -8838,6 +8838,11 @@ func awsAwsjson11_serializeOpDocumentCreateScheduledQueryInput(v *CreateSchedule
 		}
 	}
 
+	if v.EndTimeOffset != nil {
+		ok := object.Key("endTimeOffset")
+		ok.Long(*v.EndTimeOffset)
+	}
+
 	if v.ExecutionRoleArn != nil {
 		ok := object.Key("executionRoleArn")
 		ok.String(*v.ExecutionRoleArn)
@@ -10333,6 +10338,11 @@ func awsAwsjson11_serializeOpDocumentListScheduledQueriesInput(v *ListScheduledQ
 		ok.String(*v.NextToken)
 	}
 
+	if len(v.ScheduleType) > 0 {
+		ok := object.Key("scheduleType")
+		ok.String(string(v.ScheduleType))
+	}
+
 	if len(v.State) > 0 {
 		ok := object.Key("state")
 		ok.String(string(v.State))
@@ -11253,6 +11263,11 @@ func awsAwsjson11_serializeOpDocumentUpdateScheduledQueryInput(v *UpdateSchedule
 		}
 	}
 
+	if v.EndTimeOffset != nil {
+		ok := object.Key("endTimeOffset")
+		ok.Long(*v.EndTimeOffset)
+	}
+
 	if v.ExecutionRoleArn != nil {
 		ok := object.Key("executionRoleArn")
 		ok.String(*v.ExecutionRoleArn)
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/enums.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/enums.go
index e75a66c86c..fddfe6a061 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/enums.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/enums.go
@@ -728,6 +728,25 @@ func (ScheduledQueryState) Values() []ScheduledQueryState {
 	}
 }
 
+type ScheduleType string
+
+// Enum values for ScheduleType
+const (
+	ScheduleTypeCustomerManaged ScheduleType = "CUSTOMER_MANAGED"
+	ScheduleTypeAwsManaged      ScheduleType = "AWS_MANAGED"
+)
+
+// Values returns all known values for ScheduleType. Note that this can be
+// expanded in the future, and so it is only as up to date as the client.
+//
+// The ordering of this slice is not guaranteed to be stable across updates.
+func (ScheduleType) Values() []ScheduleType {
+	return []ScheduleType{
+		"CUSTOMER_MANAGED",
+		"AWS_MANAGED",
+	}
+}
+
 type Scope string
 
 // Enum values for Scope
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/types.go b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/types.go
index 8892eb7a48..6afcbba51f 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/types.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types/types.go
@@ -2851,6 +2851,10 @@ type ScheduledQuerySummary struct {
 	// The cron expression that defines when the scheduled query runs.
 	ScheduleExpression *string
 
+	// The schedule type of the scheduled query. Valid values are CUSTOMER_MANAGED and
+	// AWS_MANAGED .
+	ScheduleType ScheduleType
+
 	// The ARN of the scheduled query.
 	ScheduledQueryArn *string
 
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 21b7a879e5..d18e7f46ed 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -246,7 +246,7 @@ github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
 github.com/aws/aws-sdk-go-v2/internal/v4a
 github.com/aws/aws-sdk-go-v2/internal/v4a/internal/crypto
 github.com/aws/aws-sdk-go-v2/internal/v4a/internal/v4
-# github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.75.2
+# github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.76.0
 ## explicit; go 1.24
 github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs
 github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/internal/endpoints