diff --git a/packages/aws-cdk-lib/aws-logs/README.md b/packages/aws-cdk-lib/aws-logs/README.md
index ba6397853e4db..ef56aa2ebaa30 100644
--- a/packages/aws-cdk-lib/aws-logs/README.md
+++ b/packages/aws-cdk-lib/aws-logs/README.md
@@ -61,7 +61,7 @@ const logGroup = new logs.LogGroup(this, 'LogGroup');
 logGroup.grantWrite(new iam.ServicePrincipal('es.amazonaws.com'));
 ```
 
-Similarily, read permissions can be granted to the log group as follows.
+Similarly, read permissions can be granted to the log group as follows.
 
 ```ts
 const logGroup = new logs.LogGroup(this, 'LogGroup');
diff --git a/packages/aws-cdk-lib/aws-logs/lib/data-protection-policy.ts b/packages/aws-cdk-lib/aws-logs/lib/data-protection-policy.ts
index d2810db6d4435..15948c6955ea1 100644
--- a/packages/aws-cdk-lib/aws-logs/lib/data-protection-policy.ts
+++ b/packages/aws-cdk-lib/aws-logs/lib/data-protection-policy.ts
@@ -321,7 +321,7 @@ export class CustomDataIdentifier extends DataIdentifier {
   /**
    * Create a custom data identifier.
    * @param name - the name of the custom data identifier. This cannot share the same name as a managed data identifier.
-   * @param regex - the regular expresssion to detect and mask log events for.
+   * @param regex - the regular expression to detect and mask log events for.
    */
   constructor(public readonly name: string, public readonly regex: string) {
     super(name);
diff --git a/packages/aws-cdk-lib/aws-logs/lib/log-group.ts b/packages/aws-cdk-lib/aws-logs/lib/log-group.ts
index 453ad09fe3989..fcb66ff83b220 100644
--- a/packages/aws-cdk-lib/aws-logs/lib/log-group.ts
+++ b/packages/aws-cdk-lib/aws-logs/lib/log-group.ts
@@ -389,7 +389,7 @@ export interface LogGroupProps {
   /**
    * The KMS customer managed key to encrypt the log group with.
    *
-   * @default Server-side encrpytion managed by the CloudWatch Logs service
+   * @default Server-side encryption managed by the CloudWatch Logs service
    */
   readonly encryptionKey?: kms.IKey;