Documentation
¶
Index ¶
- type GetServiceAccountArgs
- type GetServiceAccountResult
- type Trail
- func (r *Trail) Arn() *pulumi.StringOutput
- func (r *Trail) CloudWatchLogsGroupArn() *pulumi.StringOutput
- func (r *Trail) CloudWatchLogsRoleArn() *pulumi.StringOutput
- func (r *Trail) EnableLogFileValidation() *pulumi.BoolOutput
- func (r *Trail) EnableLogging() *pulumi.BoolOutput
- func (r *Trail) EventSelectors() *pulumi.ArrayOutput
- func (r *Trail) HomeRegion() *pulumi.StringOutput
- func (r *Trail) ID() *pulumi.IDOutput
- func (r *Trail) IncludeGlobalServiceEvents() *pulumi.BoolOutput
- func (r *Trail) IsMultiRegionTrail() *pulumi.BoolOutput
- func (r *Trail) IsOrganizationTrail() *pulumi.BoolOutput
- func (r *Trail) KmsKeyId() *pulumi.StringOutput
- func (r *Trail) Name() *pulumi.StringOutput
- func (r *Trail) S3BucketName() *pulumi.StringOutput
- func (r *Trail) S3KeyPrefix() *pulumi.StringOutput
- func (r *Trail) SnsTopicName() *pulumi.StringOutput
- func (r *Trail) Tags() *pulumi.MapOutput
- func (r *Trail) URN() *pulumi.URNOutput
- type TrailArgs
- type TrailState
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type GetServiceAccountArgs ¶
type GetServiceAccountArgs struct { // Name of the region whose AWS CloudTrail account ID is desired. // Defaults to the region from the AWS provider configuration. Region interface{} }
A collection of arguments for invoking getServiceAccount.
type GetServiceAccountResult ¶
type GetServiceAccountResult struct { // The ARN of the AWS CloudTrail service account in the selected region. Arn interface{} // id is the provider-assigned unique ID for this managed resource. Id interface{} }
A collection of values returned by getServiceAccount.
func LookupServiceAccount ¶
func LookupServiceAccount(ctx *pulumi.Context, args *GetServiceAccountArgs) (*GetServiceAccountResult, error)
Use this data source to get the Account ID of the [AWS CloudTrail Service Account](http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-supported-regions.html) in a given region for the purpose of allowing CloudTrail to store trail data in S3.
type Trail ¶
type Trail struct {
// contains filtered or unexported fields
}
Provides a CloudTrail resource.
> *NOTE:* For a multi-region trail, this resource must be in the home region of the trail.
> *NOTE:* For an organization trail, this resource must be in the master account of the organization.
func GetTrail ¶
func GetTrail(ctx *pulumi.Context, name string, id pulumi.ID, state *TrailState, opts ...pulumi.ResourceOpt) (*Trail, error)
GetTrail gets an existing Trail resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewTrail ¶
func NewTrail(ctx *pulumi.Context, name string, args *TrailArgs, opts ...pulumi.ResourceOpt) (*Trail, error)
NewTrail registers a new resource with the given unique name, arguments, and options.
func (*Trail) Arn ¶
func (r *Trail) Arn() *pulumi.StringOutput
The Amazon Resource Name of the trail.
func (*Trail) CloudWatchLogsGroupArn ¶
func (r *Trail) CloudWatchLogsGroupArn() *pulumi.StringOutput
Specifies a log group name using an Amazon Resource Name (ARN), that represents the log group to which CloudTrail logs will be delivered.
func (*Trail) CloudWatchLogsRoleArn ¶
func (r *Trail) CloudWatchLogsRoleArn() *pulumi.StringOutput
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user’s log group.
func (*Trail) EnableLogFileValidation ¶
func (r *Trail) EnableLogFileValidation() *pulumi.BoolOutput
Specifies whether log file integrity validation is enabled. Defaults to `false`.
func (*Trail) EnableLogging ¶
func (r *Trail) EnableLogging() *pulumi.BoolOutput
Enables logging for the trail. Defaults to `true`. Setting this to `false` will pause logging.
func (*Trail) EventSelectors ¶
func (r *Trail) EventSelectors() *pulumi.ArrayOutput
Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these.
func (*Trail) HomeRegion ¶
func (r *Trail) HomeRegion() *pulumi.StringOutput
The region in which the trail was created.
func (*Trail) IncludeGlobalServiceEvents ¶
func (r *Trail) IncludeGlobalServiceEvents() *pulumi.BoolOutput
Specifies whether the trail is publishing events from global services such as IAM to the log files. Defaults to `true`.
func (*Trail) IsMultiRegionTrail ¶
func (r *Trail) IsMultiRegionTrail() *pulumi.BoolOutput
Specifies whether the trail is created in the current region or in all regions. Defaults to `false`.
func (*Trail) IsOrganizationTrail ¶ added in v0.16.4
func (r *Trail) IsOrganizationTrail() *pulumi.BoolOutput
Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.
func (*Trail) KmsKeyId ¶
func (r *Trail) KmsKeyId() *pulumi.StringOutput
Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail.
func (*Trail) S3BucketName ¶
func (r *Trail) S3BucketName() *pulumi.StringOutput
Specifies the name of the S3 bucket designated for publishing log files.
func (*Trail) S3KeyPrefix ¶
func (r *Trail) S3KeyPrefix() *pulumi.StringOutput
Specifies the S3 key prefix that precedes the name of the bucket you have designated for log file delivery.
func (*Trail) SnsTopicName ¶
func (r *Trail) SnsTopicName() *pulumi.StringOutput
Specifies the name of the Amazon SNS topic defined for notification of log file delivery.
type TrailArgs ¶
type TrailArgs struct { // Specifies a log group name using an Amazon Resource Name (ARN), // that represents the log group to which CloudTrail logs will be delivered. CloudWatchLogsGroupArn interface{} // Specifies the role for the CloudWatch Logs // endpoint to assume to write to a user’s log group. CloudWatchLogsRoleArn interface{} // Specifies whether log file integrity validation is enabled. // Defaults to `false`. EnableLogFileValidation interface{} // Enables logging for the trail. Defaults to `true`. // Setting this to `false` will pause logging. EnableLogging interface{} // Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these. EventSelectors interface{} // Specifies whether the trail is publishing events // from global services such as IAM to the log files. Defaults to `true`. IncludeGlobalServiceEvents interface{} // Specifies whether the trail is created in the current // region or in all regions. Defaults to `false`. IsMultiRegionTrail interface{} // Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`. IsOrganizationTrail interface{} // Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail. KmsKeyId interface{} // Specifies the name of the trail. Name interface{} // Specifies the name of the S3 bucket designated for publishing log files. S3BucketName interface{} // Specifies the S3 key prefix that precedes // the name of the bucket you have designated for log file delivery. S3KeyPrefix interface{} // Specifies the name of the Amazon SNS topic // defined for notification of log file delivery. SnsTopicName interface{} // A mapping of tags to assign to the trail Tags interface{} }
The set of arguments for constructing a Trail resource.
type TrailState ¶
type TrailState struct { // The Amazon Resource Name of the trail. Arn interface{} // Specifies a log group name using an Amazon Resource Name (ARN), // that represents the log group to which CloudTrail logs will be delivered. CloudWatchLogsGroupArn interface{} // Specifies the role for the CloudWatch Logs // endpoint to assume to write to a user’s log group. CloudWatchLogsRoleArn interface{} // Specifies whether log file integrity validation is enabled. // Defaults to `false`. EnableLogFileValidation interface{} // Enables logging for the trail. Defaults to `true`. // Setting this to `false` will pause logging. EnableLogging interface{} // Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these. EventSelectors interface{} // The region in which the trail was created. HomeRegion interface{} // Specifies whether the trail is publishing events // from global services such as IAM to the log files. Defaults to `true`. IncludeGlobalServiceEvents interface{} // Specifies whether the trail is created in the current // region or in all regions. Defaults to `false`. IsMultiRegionTrail interface{} // Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`. IsOrganizationTrail interface{} // Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail. KmsKeyId interface{} // Specifies the name of the trail. Name interface{} // Specifies the name of the S3 bucket designated for publishing log files. S3BucketName interface{} // Specifies the S3 key prefix that precedes // the name of the bucket you have designated for log file delivery. S3KeyPrefix interface{} // Specifies the name of the Amazon SNS topic // defined for notification of log file delivery. SnsTopicName interface{} // A mapping of tags to assign to the trail Tags interface{} }
Input properties used for looking up and filtering Trail resources.