cloudtrail

package
v0.106.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: May 20, 2024 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	TrailEventSelectorReadWriteTypeAll       = TrailEventSelectorReadWriteType("All")
	TrailEventSelectorReadWriteTypeReadOnly  = TrailEventSelectorReadWriteType("ReadOnly")
	TrailEventSelectorReadWriteTypeWriteOnly = TrailEventSelectorReadWriteType("WriteOnly")
)
View Source 
const (
	ChannelDestinationTypeEventDataStore = ChannelDestinationType("EVENT_DATA_STORE")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Channel added in v0.50.0 

type Channel struct {
	pulumi.CustomResourceState

	// `Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .
	ChannelArn pulumi.StringOutput `pulumi:"channelArn"`
	// One or more resources to which events arriving through a channel are logged and stored.
	Destinations ChannelDestinationArrayOutput `pulumi:"destinations"`
	// The name of the channel.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// The ARN of an on-premises storage solution or application, or a partner event source.
	Source pulumi.StringPtrOutput `pulumi:"source"`
	// An array of key-value pairs to apply to this resource.
	Tags aws.TagArrayOutput `pulumi:"tags"`
}

A channel receives events from a specific source (such as an on-premises storage solution or application, or a partner event data source), and delivers the events to one or more event data stores. You use channels to ingest events into CloudTrail from sources outside AWS.

func GetChannel added in v0.50.0 

func GetChannel(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ChannelState, opts ...pulumi.ResourceOption) (*Channel, error)

GetChannel gets an existing Channel resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewChannel added in v0.50.0 

func NewChannel(ctx *pulumi.Context,
	name string, args *ChannelArgs, opts ...pulumi.ResourceOption) (*Channel, error)

NewChannel registers a new resource with the given unique name, arguments, and options.

func (*Channel) ElementType added in v0.50.0 

func (*Channel) ElementType() reflect.Type

func (*Channel) ToChannelOutput added in v0.50.0 

func (i *Channel) ToChannelOutput() ChannelOutput

func (*Channel) ToChannelOutputWithContext added in v0.50.0 

func (i *Channel) ToChannelOutputWithContext(ctx context.Context) ChannelOutput

type ChannelArgs added in v0.50.0 

type ChannelArgs struct {
	// One or more resources to which events arriving through a channel are logged and stored.
	Destinations ChannelDestinationArrayInput
	// The name of the channel.
	Name pulumi.StringPtrInput
	// The ARN of an on-premises storage solution or application, or a partner event source.
	Source pulumi.StringPtrInput
	// An array of key-value pairs to apply to this resource.
	Tags aws.TagArrayInput
}

The set of arguments for constructing a Channel resource.

func (ChannelArgs) ElementType added in v0.50.0 

func (ChannelArgs) ElementType() reflect.Type

type ChannelDestination added in v0.50.0 

type ChannelDestination struct {
	// The ARN of a resource that receives events from a channel.
	Location string `pulumi:"location"`
	// The type of destination for events arriving from a channel.
	Type ChannelDestinationType `pulumi:"type"`
}

The resource that receives events arriving from a channel.

type ChannelDestinationArgs added in v0.50.0 

type ChannelDestinationArgs struct {
	// The ARN of a resource that receives events from a channel.
	Location pulumi.StringInput `pulumi:"location"`
	// The type of destination for events arriving from a channel.
	Type ChannelDestinationTypeInput `pulumi:"type"`
}

The resource that receives events arriving from a channel.

func (ChannelDestinationArgs) ElementType added in v0.50.0 

func (ChannelDestinationArgs) ElementType() reflect.Type

func (ChannelDestinationArgs) ToChannelDestinationOutput added in v0.50.0 

func (i ChannelDestinationArgs) ToChannelDestinationOutput() ChannelDestinationOutput

func (ChannelDestinationArgs) ToChannelDestinationOutputWithContext added in v0.50.0 

func (i ChannelDestinationArgs) ToChannelDestinationOutputWithContext(ctx context.Context) ChannelDestinationOutput

type ChannelDestinationArray added in v0.50.0 

type ChannelDestinationArray []ChannelDestinationInput

func (ChannelDestinationArray) ElementType added in v0.50.0 

func (ChannelDestinationArray) ElementType() reflect.Type

func (ChannelDestinationArray) ToChannelDestinationArrayOutput added in v0.50.0 

func (i ChannelDestinationArray) ToChannelDestinationArrayOutput() ChannelDestinationArrayOutput

func (ChannelDestinationArray) ToChannelDestinationArrayOutputWithContext added in v0.50.0 

func (i ChannelDestinationArray) ToChannelDestinationArrayOutputWithContext(ctx context.Context) ChannelDestinationArrayOutput

type ChannelDestinationArrayInput added in v0.50.0 

type ChannelDestinationArrayInput interface {
	pulumi.Input

	ToChannelDestinationArrayOutput() ChannelDestinationArrayOutput
	ToChannelDestinationArrayOutputWithContext(context.Context) ChannelDestinationArrayOutput
}

ChannelDestinationArrayInput is an input type that accepts ChannelDestinationArray and ChannelDestinationArrayOutput values. You can construct a concrete instance of `ChannelDestinationArrayInput` via: 

ChannelDestinationArray{ ChannelDestinationArgs{...} }

type ChannelDestinationArrayOutput added in v0.50.0 

type ChannelDestinationArrayOutput struct{ *pulumi.OutputState }

func (ChannelDestinationArrayOutput) ElementType added in v0.50.0 

func (ChannelDestinationArrayOutput) ElementType() reflect.Type

func (ChannelDestinationArrayOutput) Index added in v0.50.0 

func (o ChannelDestinationArrayOutput) Index(i pulumi.IntInput) ChannelDestinationOutput

func (ChannelDestinationArrayOutput) ToChannelDestinationArrayOutput added in v0.50.0 

func (o ChannelDestinationArrayOutput) ToChannelDestinationArrayOutput() ChannelDestinationArrayOutput

func (ChannelDestinationArrayOutput) ToChannelDestinationArrayOutputWithContext added in v0.50.0 

func (o ChannelDestinationArrayOutput) ToChannelDestinationArrayOutputWithContext(ctx context.Context) ChannelDestinationArrayOutput

type ChannelDestinationInput added in v0.50.0 

type ChannelDestinationInput interface {
	pulumi.Input

	ToChannelDestinationOutput() ChannelDestinationOutput
	ToChannelDestinationOutputWithContext(context.Context) ChannelDestinationOutput
}

ChannelDestinationInput is an input type that accepts ChannelDestinationArgs and ChannelDestinationOutput values. You can construct a concrete instance of `ChannelDestinationInput` via: 

ChannelDestinationArgs{...}

type ChannelDestinationOutput added in v0.50.0 

type ChannelDestinationOutput struct{ *pulumi.OutputState }

The resource that receives events arriving from a channel.

func (ChannelDestinationOutput) ElementType added in v0.50.0 

func (ChannelDestinationOutput) ElementType() reflect.Type

func (ChannelDestinationOutput) Location added in v0.50.0 

func (o ChannelDestinationOutput) Location() pulumi.StringOutput

The ARN of a resource that receives events from a channel.

func (ChannelDestinationOutput) ToChannelDestinationOutput added in v0.50.0 

func (o ChannelDestinationOutput) ToChannelDestinationOutput() ChannelDestinationOutput

func (ChannelDestinationOutput) ToChannelDestinationOutputWithContext added in v0.50.0 

func (o ChannelDestinationOutput) ToChannelDestinationOutputWithContext(ctx context.Context) ChannelDestinationOutput

func (ChannelDestinationOutput) Type added in v0.50.0 

func (o ChannelDestinationOutput) Type() ChannelDestinationTypeOutput

The type of destination for events arriving from a channel.

type ChannelDestinationType added in v0.50.0 

type ChannelDestinationType string

The type of destination for events arriving from a channel.

func (ChannelDestinationType) ElementType added in v0.50.0 

func (ChannelDestinationType) ElementType() reflect.Type

func (ChannelDestinationType) ToChannelDestinationTypeOutput added in v0.50.0 

func (e ChannelDestinationType) ToChannelDestinationTypeOutput() ChannelDestinationTypeOutput

func (ChannelDestinationType) ToChannelDestinationTypeOutputWithContext added in v0.50.0 

func (e ChannelDestinationType) ToChannelDestinationTypeOutputWithContext(ctx context.Context) ChannelDestinationTypeOutput

func (ChannelDestinationType) ToChannelDestinationTypePtrOutput added in v0.50.0 

func (e ChannelDestinationType) ToChannelDestinationTypePtrOutput() ChannelDestinationTypePtrOutput

func (ChannelDestinationType) ToChannelDestinationTypePtrOutputWithContext added in v0.50.0 

func (e ChannelDestinationType) ToChannelDestinationTypePtrOutputWithContext(ctx context.Context) ChannelDestinationTypePtrOutput

func (ChannelDestinationType) ToStringOutput added in v0.50.0 

func (e ChannelDestinationType) ToStringOutput() pulumi.StringOutput

func (ChannelDestinationType) ToStringOutputWithContext added in v0.50.0 

func (e ChannelDestinationType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ChannelDestinationType) ToStringPtrOutput added in v0.50.0 

func (e ChannelDestinationType) ToStringPtrOutput() pulumi.StringPtrOutput

func (ChannelDestinationType) ToStringPtrOutputWithContext added in v0.50.0 

func (e ChannelDestinationType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ChannelDestinationTypeInput added in v0.50.0 

type ChannelDestinationTypeInput interface {
	pulumi.Input

	ToChannelDestinationTypeOutput() ChannelDestinationTypeOutput
	ToChannelDestinationTypeOutputWithContext(context.Context) ChannelDestinationTypeOutput
}

ChannelDestinationTypeInput is an input type that accepts values of the ChannelDestinationType enum A concrete instance of `ChannelDestinationTypeInput` can be one of the following: 

ChannelDestinationTypeEventDataStore

type ChannelDestinationTypeOutput added in v0.50.0 

type ChannelDestinationTypeOutput struct{ *pulumi.OutputState }

func (ChannelDestinationTypeOutput) ElementType added in v0.50.0 

func (ChannelDestinationTypeOutput) ElementType() reflect.Type

func (ChannelDestinationTypeOutput) ToChannelDestinationTypeOutput added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToChannelDestinationTypeOutput() ChannelDestinationTypeOutput

func (ChannelDestinationTypeOutput) ToChannelDestinationTypeOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToChannelDestinationTypeOutputWithContext(ctx context.Context) ChannelDestinationTypeOutput

func (ChannelDestinationTypeOutput) ToChannelDestinationTypePtrOutput added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToChannelDestinationTypePtrOutput() ChannelDestinationTypePtrOutput

func (ChannelDestinationTypeOutput) ToChannelDestinationTypePtrOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToChannelDestinationTypePtrOutputWithContext(ctx context.Context) ChannelDestinationTypePtrOutput

func (ChannelDestinationTypeOutput) ToStringOutput added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToStringOutput() pulumi.StringOutput

func (ChannelDestinationTypeOutput) ToStringOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (ChannelDestinationTypeOutput) ToStringPtrOutput added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ChannelDestinationTypeOutput) ToStringPtrOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ChannelDestinationTypePtrInput added in v0.50.0 

type ChannelDestinationTypePtrInput interface {
	pulumi.Input

	ToChannelDestinationTypePtrOutput() ChannelDestinationTypePtrOutput
	ToChannelDestinationTypePtrOutputWithContext(context.Context) ChannelDestinationTypePtrOutput
}

func ChannelDestinationTypePtr added in v0.50.0 

func ChannelDestinationTypePtr(v string) ChannelDestinationTypePtrInput

type ChannelDestinationTypePtrOutput added in v0.50.0 

type ChannelDestinationTypePtrOutput struct{ *pulumi.OutputState }

func (ChannelDestinationTypePtrOutput) Elem added in v0.50.0 

func (o ChannelDestinationTypePtrOutput) Elem() ChannelDestinationTypeOutput

func (ChannelDestinationTypePtrOutput) ElementType added in v0.50.0 

func (ChannelDestinationTypePtrOutput) ElementType() reflect.Type

func (ChannelDestinationTypePtrOutput) ToChannelDestinationTypePtrOutput added in v0.50.0 

func (o ChannelDestinationTypePtrOutput) ToChannelDestinationTypePtrOutput() ChannelDestinationTypePtrOutput

func (ChannelDestinationTypePtrOutput) ToChannelDestinationTypePtrOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypePtrOutput) ToChannelDestinationTypePtrOutputWithContext(ctx context.Context) ChannelDestinationTypePtrOutput

func (ChannelDestinationTypePtrOutput) ToStringPtrOutput added in v0.50.0 

func (o ChannelDestinationTypePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (ChannelDestinationTypePtrOutput) ToStringPtrOutputWithContext added in v0.50.0 

func (o ChannelDestinationTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type ChannelInput added in v0.50.0 

type ChannelInput interface {
	pulumi.Input

	ToChannelOutput() ChannelOutput
	ToChannelOutputWithContext(ctx context.Context) ChannelOutput
}

type ChannelOutput added in v0.50.0 

type ChannelOutput struct{ *pulumi.OutputState }

func (ChannelOutput) ChannelArn added in v0.50.0 

func (o ChannelOutput) ChannelArn() pulumi.StringOutput

`Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .

func (ChannelOutput) Destinations added in v0.50.0 

func (o ChannelOutput) Destinations() ChannelDestinationArrayOutput

One or more resources to which events arriving through a channel are logged and stored.

func (ChannelOutput) ElementType added in v0.50.0 

func (ChannelOutput) ElementType() reflect.Type

func (ChannelOutput) Name added in v0.50.0 

func (o ChannelOutput) Name() pulumi.StringPtrOutput

The name of the channel.

func (ChannelOutput) Source added in v0.50.0 

func (o ChannelOutput) Source() pulumi.StringPtrOutput

The ARN of an on-premises storage solution or application, or a partner event source.

func (ChannelOutput) Tags added in v0.50.0 

func (o ChannelOutput) Tags() aws.TagArrayOutput

An array of key-value pairs to apply to this resource.

func (ChannelOutput) ToChannelOutput added in v0.50.0 

func (o ChannelOutput) ToChannelOutput() ChannelOutput

func (ChannelOutput) ToChannelOutputWithContext added in v0.50.0 

func (o ChannelOutput) ToChannelOutputWithContext(ctx context.Context) ChannelOutput

type ChannelState added in v0.50.0 

type ChannelState struct {
}

func (ChannelState) ElementType added in v0.50.0 

func (ChannelState) ElementType() reflect.Type

type ChannelTag added in v0.50.0 

type ChannelTag struct {
	// The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Key string `pulumi:"key"`
	// The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Value string `pulumi:"value"`
}

A key-value pair to associate with a resource.

type EventDataStore added in v0.21.0 

type EventDataStore struct {
	pulumi.CustomResourceState

	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors EventDataStoreAdvancedEventSelectorArrayOutput `pulumi:"advancedEventSelectors"`
	// The mode that the event data store will use to charge for event storage.
	BillingMode pulumi.StringPtrOutput `pulumi:"billingMode"`
	// The timestamp of the event data store's creation.
	CreatedTimestamp pulumi.StringOutput `pulumi:"createdTimestamp"`
	// The ARN of the event data store.
	EventDataStoreArn pulumi.StringOutput `pulumi:"eventDataStoreArn"`
	// Indicates whether federation is enabled on an event data store.
	FederationEnabled pulumi.BoolPtrOutput `pulumi:"federationEnabled"`
	// The ARN of the role used for event data store federation.
	FederationRoleArn pulumi.StringPtrOutput `pulumi:"federationRoleArn"`
	// Indicates whether the event data store is ingesting events.
	IngestionEnabled pulumi.BoolPtrOutput `pulumi:"ingestionEnabled"`
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
	InsightSelectors EventDataStoreInsightSelectorArrayOutput `pulumi:"insightSelectors"`
	// Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
	InsightsDestination pulumi.StringPtrOutput `pulumi:"insightsDestination"`
	// Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId pulumi.StringPtrOutput `pulumi:"kmsKeyId"`
	// Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
	MultiRegionEnabled pulumi.BoolPtrOutput `pulumi:"multiRegionEnabled"`
	// The name of the event data store.
	Name pulumi.StringPtrOutput `pulumi:"name"`
	// Indicates that an event data store is collecting logged events for an organization.
	OrganizationEnabled pulumi.BoolPtrOutput `pulumi:"organizationEnabled"`
	// The retention period, in days.
	RetentionPeriod pulumi.IntPtrOutput `pulumi:"retentionPeriod"`
	// The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
	Status pulumi.StringOutput `pulumi:"status"`
	// A list of tags.
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// Indicates whether the event data store is protected from termination.
	TerminationProtectionEnabled pulumi.BoolPtrOutput `pulumi:"terminationProtectionEnabled"`
	// The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
	UpdatedTimestamp pulumi.StringOutput `pulumi:"updatedTimestamp"`
}

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 7 to 2557 or 3653 days (about seven or ten years) depending on the selected BillingMode.

func GetEventDataStore added in v0.21.0 

func GetEventDataStore(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *EventDataStoreState, opts ...pulumi.ResourceOption) (*EventDataStore, error)

GetEventDataStore gets an existing EventDataStore resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewEventDataStore added in v0.21.0 

func NewEventDataStore(ctx *pulumi.Context,
	name string, args *EventDataStoreArgs, opts ...pulumi.ResourceOption) (*EventDataStore, error)

NewEventDataStore registers a new resource with the given unique name, arguments, and options.

func (*EventDataStore) ElementType added in v0.21.0 

func (*EventDataStore) ElementType() reflect.Type

func (*EventDataStore) ToEventDataStoreOutput added in v0.21.0 

func (i *EventDataStore) ToEventDataStoreOutput() EventDataStoreOutput

func (*EventDataStore) ToEventDataStoreOutputWithContext added in v0.21.0 

func (i *EventDataStore) ToEventDataStoreOutputWithContext(ctx context.Context) EventDataStoreOutput

type EventDataStoreAdvancedEventSelector added in v0.21.0 

type EventDataStoreAdvancedEventSelector struct {
	// Contains all selector statements in an advanced event selector.
	FieldSelectors []EventDataStoreAdvancedFieldSelector `pulumi:"fieldSelectors"`
	// An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
	Name *string `pulumi:"name"`
}

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

type EventDataStoreAdvancedEventSelectorArgs added in v0.21.0 

type EventDataStoreAdvancedEventSelectorArgs struct {
	// Contains all selector statements in an advanced event selector.
	FieldSelectors EventDataStoreAdvancedFieldSelectorArrayInput `pulumi:"fieldSelectors"`
	// An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
	Name pulumi.StringPtrInput `pulumi:"name"`
}

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

func (EventDataStoreAdvancedEventSelectorArgs) ElementType added in v0.21.0 

func (EventDataStoreAdvancedEventSelectorArgs) ElementType() reflect.Type

func (EventDataStoreAdvancedEventSelectorArgs) ToEventDataStoreAdvancedEventSelectorOutput added in v0.21.0 

func (i EventDataStoreAdvancedEventSelectorArgs) ToEventDataStoreAdvancedEventSelectorOutput() EventDataStoreAdvancedEventSelectorOutput

func (EventDataStoreAdvancedEventSelectorArgs) ToEventDataStoreAdvancedEventSelectorOutputWithContext added in v0.21.0 

func (i EventDataStoreAdvancedEventSelectorArgs) ToEventDataStoreAdvancedEventSelectorOutputWithContext(ctx context.Context) EventDataStoreAdvancedEventSelectorOutput

type EventDataStoreAdvancedEventSelectorArray added in v0.21.0 

type EventDataStoreAdvancedEventSelectorArray []EventDataStoreAdvancedEventSelectorInput

func (EventDataStoreAdvancedEventSelectorArray) ElementType added in v0.21.0 

func (EventDataStoreAdvancedEventSelectorArray) ElementType() reflect.Type

func (EventDataStoreAdvancedEventSelectorArray) ToEventDataStoreAdvancedEventSelectorArrayOutput added in v0.21.0 

func (i EventDataStoreAdvancedEventSelectorArray) ToEventDataStoreAdvancedEventSelectorArrayOutput() EventDataStoreAdvancedEventSelectorArrayOutput

func (EventDataStoreAdvancedEventSelectorArray) ToEventDataStoreAdvancedEventSelectorArrayOutputWithContext added in v0.21.0 

func (i EventDataStoreAdvancedEventSelectorArray) ToEventDataStoreAdvancedEventSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreAdvancedEventSelectorArrayOutput

type EventDataStoreAdvancedEventSelectorArrayInput added in v0.21.0 

type EventDataStoreAdvancedEventSelectorArrayInput interface {
	pulumi.Input

	ToEventDataStoreAdvancedEventSelectorArrayOutput() EventDataStoreAdvancedEventSelectorArrayOutput
	ToEventDataStoreAdvancedEventSelectorArrayOutputWithContext(context.Context) EventDataStoreAdvancedEventSelectorArrayOutput
}

EventDataStoreAdvancedEventSelectorArrayInput is an input type that accepts EventDataStoreAdvancedEventSelectorArray and EventDataStoreAdvancedEventSelectorArrayOutput values. You can construct a concrete instance of `EventDataStoreAdvancedEventSelectorArrayInput` via: 

EventDataStoreAdvancedEventSelectorArray{ EventDataStoreAdvancedEventSelectorArgs{...} }

type EventDataStoreAdvancedEventSelectorArrayOutput added in v0.21.0 

type EventDataStoreAdvancedEventSelectorArrayOutput struct{ *pulumi.OutputState }

func (EventDataStoreAdvancedEventSelectorArrayOutput) ElementType added in v0.21.0 

func (EventDataStoreAdvancedEventSelectorArrayOutput) ElementType() reflect.Type

func (EventDataStoreAdvancedEventSelectorArrayOutput) Index added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorArrayOutput) Index(i pulumi.IntInput) EventDataStoreAdvancedEventSelectorOutput

func (EventDataStoreAdvancedEventSelectorArrayOutput) ToEventDataStoreAdvancedEventSelectorArrayOutput added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorArrayOutput) ToEventDataStoreAdvancedEventSelectorArrayOutput() EventDataStoreAdvancedEventSelectorArrayOutput

func (EventDataStoreAdvancedEventSelectorArrayOutput) ToEventDataStoreAdvancedEventSelectorArrayOutputWithContext added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorArrayOutput) ToEventDataStoreAdvancedEventSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreAdvancedEventSelectorArrayOutput

type EventDataStoreAdvancedEventSelectorInput added in v0.21.0 

type EventDataStoreAdvancedEventSelectorInput interface {
	pulumi.Input

	ToEventDataStoreAdvancedEventSelectorOutput() EventDataStoreAdvancedEventSelectorOutput
	ToEventDataStoreAdvancedEventSelectorOutputWithContext(context.Context) EventDataStoreAdvancedEventSelectorOutput
}

EventDataStoreAdvancedEventSelectorInput is an input type that accepts EventDataStoreAdvancedEventSelectorArgs and EventDataStoreAdvancedEventSelectorOutput values. You can construct a concrete instance of `EventDataStoreAdvancedEventSelectorInput` via: 

EventDataStoreAdvancedEventSelectorArgs{...}

type EventDataStoreAdvancedEventSelectorOutput added in v0.21.0 

type EventDataStoreAdvancedEventSelectorOutput struct{ *pulumi.OutputState }

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

func (EventDataStoreAdvancedEventSelectorOutput) ElementType added in v0.21.0 

func (EventDataStoreAdvancedEventSelectorOutput) ElementType() reflect.Type

func (EventDataStoreAdvancedEventSelectorOutput) FieldSelectors added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorOutput) FieldSelectors() EventDataStoreAdvancedFieldSelectorArrayOutput

Contains all selector statements in an advanced event selector.

func (EventDataStoreAdvancedEventSelectorOutput) Name added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorOutput) Name() pulumi.StringPtrOutput

An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

func (EventDataStoreAdvancedEventSelectorOutput) ToEventDataStoreAdvancedEventSelectorOutput added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorOutput) ToEventDataStoreAdvancedEventSelectorOutput() EventDataStoreAdvancedEventSelectorOutput

func (EventDataStoreAdvancedEventSelectorOutput) ToEventDataStoreAdvancedEventSelectorOutputWithContext added in v0.21.0 

func (o EventDataStoreAdvancedEventSelectorOutput) ToEventDataStoreAdvancedEventSelectorOutputWithContext(ctx context.Context) EventDataStoreAdvancedEventSelectorOutput

type EventDataStoreAdvancedFieldSelector added in v0.21.0 

type EventDataStoreAdvancedFieldSelector struct {
	// An operator that includes events that match the last few characters of the event record field specified as the value of Field.
	EndsWith []string `pulumi:"endsWith"`
	// An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
	Equals []string `pulumi:"equals"`
	// A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
	Field string `pulumi:"field"`
	// An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
	NotEndsWith []string `pulumi:"notEndsWith"`
	// An operator that excludes events that match the exact value of the event record field specified as the value of Field.
	NotEquals []string `pulumi:"notEquals"`
	// An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
	NotStartsWith []string `pulumi:"notStartsWith"`
	// An operator that includes events that match the first few characters of the event record field specified as the value of Field.
	StartsWith []string `pulumi:"startsWith"`
}

A single selector statement in an advanced event selector.

type EventDataStoreAdvancedFieldSelectorArgs added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorArgs struct {
	// An operator that includes events that match the last few characters of the event record field specified as the value of Field.
	EndsWith pulumi.StringArrayInput `pulumi:"endsWith"`
	// An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
	Equals pulumi.StringArrayInput `pulumi:"equals"`
	// A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
	Field pulumi.StringInput `pulumi:"field"`
	// An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
	NotEndsWith pulumi.StringArrayInput `pulumi:"notEndsWith"`
	// An operator that excludes events that match the exact value of the event record field specified as the value of Field.
	NotEquals pulumi.StringArrayInput `pulumi:"notEquals"`
	// An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
	NotStartsWith pulumi.StringArrayInput `pulumi:"notStartsWith"`
	// An operator that includes events that match the first few characters of the event record field specified as the value of Field.
	StartsWith pulumi.StringArrayInput `pulumi:"startsWith"`
}

A single selector statement in an advanced event selector.

func (EventDataStoreAdvancedFieldSelectorArgs) ElementType added in v0.21.0 

func (EventDataStoreAdvancedFieldSelectorArgs) ElementType() reflect.Type

func (EventDataStoreAdvancedFieldSelectorArgs) ToEventDataStoreAdvancedFieldSelectorOutput added in v0.21.0 

func (i EventDataStoreAdvancedFieldSelectorArgs) ToEventDataStoreAdvancedFieldSelectorOutput() EventDataStoreAdvancedFieldSelectorOutput

func (EventDataStoreAdvancedFieldSelectorArgs) ToEventDataStoreAdvancedFieldSelectorOutputWithContext added in v0.21.0 

func (i EventDataStoreAdvancedFieldSelectorArgs) ToEventDataStoreAdvancedFieldSelectorOutputWithContext(ctx context.Context) EventDataStoreAdvancedFieldSelectorOutput

type EventDataStoreAdvancedFieldSelectorArray added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorArray []EventDataStoreAdvancedFieldSelectorInput

func (EventDataStoreAdvancedFieldSelectorArray) ElementType added in v0.21.0 

func (EventDataStoreAdvancedFieldSelectorArray) ElementType() reflect.Type

func (EventDataStoreAdvancedFieldSelectorArray) ToEventDataStoreAdvancedFieldSelectorArrayOutput added in v0.21.0 

func (i EventDataStoreAdvancedFieldSelectorArray) ToEventDataStoreAdvancedFieldSelectorArrayOutput() EventDataStoreAdvancedFieldSelectorArrayOutput

func (EventDataStoreAdvancedFieldSelectorArray) ToEventDataStoreAdvancedFieldSelectorArrayOutputWithContext added in v0.21.0 

func (i EventDataStoreAdvancedFieldSelectorArray) ToEventDataStoreAdvancedFieldSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreAdvancedFieldSelectorArrayOutput

type EventDataStoreAdvancedFieldSelectorArrayInput added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorArrayInput interface {
	pulumi.Input

	ToEventDataStoreAdvancedFieldSelectorArrayOutput() EventDataStoreAdvancedFieldSelectorArrayOutput
	ToEventDataStoreAdvancedFieldSelectorArrayOutputWithContext(context.Context) EventDataStoreAdvancedFieldSelectorArrayOutput
}

EventDataStoreAdvancedFieldSelectorArrayInput is an input type that accepts EventDataStoreAdvancedFieldSelectorArray and EventDataStoreAdvancedFieldSelectorArrayOutput values. You can construct a concrete instance of `EventDataStoreAdvancedFieldSelectorArrayInput` via: 

EventDataStoreAdvancedFieldSelectorArray{ EventDataStoreAdvancedFieldSelectorArgs{...} }

type EventDataStoreAdvancedFieldSelectorArrayOutput added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorArrayOutput struct{ *pulumi.OutputState }

func (EventDataStoreAdvancedFieldSelectorArrayOutput) ElementType added in v0.21.0 

func (EventDataStoreAdvancedFieldSelectorArrayOutput) ElementType() reflect.Type

func (EventDataStoreAdvancedFieldSelectorArrayOutput) Index added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorArrayOutput) Index(i pulumi.IntInput) EventDataStoreAdvancedFieldSelectorOutput

func (EventDataStoreAdvancedFieldSelectorArrayOutput) ToEventDataStoreAdvancedFieldSelectorArrayOutput added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorArrayOutput) ToEventDataStoreAdvancedFieldSelectorArrayOutput() EventDataStoreAdvancedFieldSelectorArrayOutput

func (EventDataStoreAdvancedFieldSelectorArrayOutput) ToEventDataStoreAdvancedFieldSelectorArrayOutputWithContext added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorArrayOutput) ToEventDataStoreAdvancedFieldSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreAdvancedFieldSelectorArrayOutput

type EventDataStoreAdvancedFieldSelectorInput added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorInput interface {
	pulumi.Input

	ToEventDataStoreAdvancedFieldSelectorOutput() EventDataStoreAdvancedFieldSelectorOutput
	ToEventDataStoreAdvancedFieldSelectorOutputWithContext(context.Context) EventDataStoreAdvancedFieldSelectorOutput
}

EventDataStoreAdvancedFieldSelectorInput is an input type that accepts EventDataStoreAdvancedFieldSelectorArgs and EventDataStoreAdvancedFieldSelectorOutput values. You can construct a concrete instance of `EventDataStoreAdvancedFieldSelectorInput` via: 

EventDataStoreAdvancedFieldSelectorArgs{...}

type EventDataStoreAdvancedFieldSelectorOutput added in v0.21.0 

type EventDataStoreAdvancedFieldSelectorOutput struct{ *pulumi.OutputState }

A single selector statement in an advanced event selector.

func (EventDataStoreAdvancedFieldSelectorOutput) ElementType added in v0.21.0 

func (EventDataStoreAdvancedFieldSelectorOutput) ElementType() reflect.Type

func (EventDataStoreAdvancedFieldSelectorOutput) EndsWith added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) EndsWith() pulumi.StringArrayOutput

An operator that includes events that match the last few characters of the event record field specified as the value of Field.

func (EventDataStoreAdvancedFieldSelectorOutput) Equals added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) Equals() pulumi.StringArrayOutput

An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.

func (EventDataStoreAdvancedFieldSelectorOutput) Field added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) Field() pulumi.StringOutput

A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.

func (EventDataStoreAdvancedFieldSelectorOutput) NotEndsWith added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) NotEndsWith() pulumi.StringArrayOutput

An operator that excludes events that match the last few characters of the event record field specified as the value of Field.

func (EventDataStoreAdvancedFieldSelectorOutput) NotEquals added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) NotEquals() pulumi.StringArrayOutput

An operator that excludes events that match the exact value of the event record field specified as the value of Field.

func (EventDataStoreAdvancedFieldSelectorOutput) NotStartsWith added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) NotStartsWith() pulumi.StringArrayOutput

An operator that excludes events that match the first few characters of the event record field specified as the value of Field.

func (EventDataStoreAdvancedFieldSelectorOutput) StartsWith added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) StartsWith() pulumi.StringArrayOutput

An operator that includes events that match the first few characters of the event record field specified as the value of Field.

func (EventDataStoreAdvancedFieldSelectorOutput) ToEventDataStoreAdvancedFieldSelectorOutput added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) ToEventDataStoreAdvancedFieldSelectorOutput() EventDataStoreAdvancedFieldSelectorOutput

func (EventDataStoreAdvancedFieldSelectorOutput) ToEventDataStoreAdvancedFieldSelectorOutputWithContext added in v0.21.0 

func (o EventDataStoreAdvancedFieldSelectorOutput) ToEventDataStoreAdvancedFieldSelectorOutputWithContext(ctx context.Context) EventDataStoreAdvancedFieldSelectorOutput

type EventDataStoreArgs added in v0.21.0 

type EventDataStoreArgs struct {
	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors EventDataStoreAdvancedEventSelectorArrayInput
	// The mode that the event data store will use to charge for event storage.
	BillingMode pulumi.StringPtrInput
	// Indicates whether federation is enabled on an event data store.
	FederationEnabled pulumi.BoolPtrInput
	// The ARN of the role used for event data store federation.
	FederationRoleArn pulumi.StringPtrInput
	// Indicates whether the event data store is ingesting events.
	IngestionEnabled pulumi.BoolPtrInput
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
	InsightSelectors EventDataStoreInsightSelectorArrayInput
	// Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
	InsightsDestination pulumi.StringPtrInput
	// Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId pulumi.StringPtrInput
	// Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
	MultiRegionEnabled pulumi.BoolPtrInput
	// The name of the event data store.
	Name pulumi.StringPtrInput
	// Indicates that an event data store is collecting logged events for an organization.
	OrganizationEnabled pulumi.BoolPtrInput
	// The retention period, in days.
	RetentionPeriod pulumi.IntPtrInput
	// A list of tags.
	Tags aws.TagArrayInput
	// Indicates whether the event data store is protected from termination.
	TerminationProtectionEnabled pulumi.BoolPtrInput
}

The set of arguments for constructing a EventDataStore resource.

func (EventDataStoreArgs) ElementType added in v0.21.0 

func (EventDataStoreArgs) ElementType() reflect.Type

type EventDataStoreInput added in v0.21.0 

type EventDataStoreInput interface {
	pulumi.Input

	ToEventDataStoreOutput() EventDataStoreOutput
	ToEventDataStoreOutputWithContext(ctx context.Context) EventDataStoreOutput
}

type EventDataStoreInsightSelector added in v0.85.0 

type EventDataStoreInsightSelector struct {
	// The type of Insights to log on an event data store.
	InsightType *string `pulumi:"insightType"`
}

A string that contains Insights types that are logged on an event data store.

type EventDataStoreInsightSelectorArgs added in v0.85.0 

type EventDataStoreInsightSelectorArgs struct {
	// The type of Insights to log on an event data store.
	InsightType pulumi.StringPtrInput `pulumi:"insightType"`
}

A string that contains Insights types that are logged on an event data store.

func (EventDataStoreInsightSelectorArgs) ElementType added in v0.85.0 

func (EventDataStoreInsightSelectorArgs) ElementType() reflect.Type

func (EventDataStoreInsightSelectorArgs) ToEventDataStoreInsightSelectorOutput added in v0.85.0 

func (i EventDataStoreInsightSelectorArgs) ToEventDataStoreInsightSelectorOutput() EventDataStoreInsightSelectorOutput

func (EventDataStoreInsightSelectorArgs) ToEventDataStoreInsightSelectorOutputWithContext added in v0.85.0 

func (i EventDataStoreInsightSelectorArgs) ToEventDataStoreInsightSelectorOutputWithContext(ctx context.Context) EventDataStoreInsightSelectorOutput

type EventDataStoreInsightSelectorArray added in v0.85.0 

type EventDataStoreInsightSelectorArray []EventDataStoreInsightSelectorInput

func (EventDataStoreInsightSelectorArray) ElementType added in v0.85.0 

func (EventDataStoreInsightSelectorArray) ElementType() reflect.Type

func (EventDataStoreInsightSelectorArray) ToEventDataStoreInsightSelectorArrayOutput added in v0.85.0 

func (i EventDataStoreInsightSelectorArray) ToEventDataStoreInsightSelectorArrayOutput() EventDataStoreInsightSelectorArrayOutput

func (EventDataStoreInsightSelectorArray) ToEventDataStoreInsightSelectorArrayOutputWithContext added in v0.85.0 

func (i EventDataStoreInsightSelectorArray) ToEventDataStoreInsightSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreInsightSelectorArrayOutput

type EventDataStoreInsightSelectorArrayInput added in v0.85.0 

type EventDataStoreInsightSelectorArrayInput interface {
	pulumi.Input

	ToEventDataStoreInsightSelectorArrayOutput() EventDataStoreInsightSelectorArrayOutput
	ToEventDataStoreInsightSelectorArrayOutputWithContext(context.Context) EventDataStoreInsightSelectorArrayOutput
}

EventDataStoreInsightSelectorArrayInput is an input type that accepts EventDataStoreInsightSelectorArray and EventDataStoreInsightSelectorArrayOutput values. You can construct a concrete instance of `EventDataStoreInsightSelectorArrayInput` via: 

EventDataStoreInsightSelectorArray{ EventDataStoreInsightSelectorArgs{...} }

type EventDataStoreInsightSelectorArrayOutput added in v0.85.0 

type EventDataStoreInsightSelectorArrayOutput struct{ *pulumi.OutputState }

func (EventDataStoreInsightSelectorArrayOutput) ElementType added in v0.85.0 

func (EventDataStoreInsightSelectorArrayOutput) ElementType() reflect.Type

func (EventDataStoreInsightSelectorArrayOutput) Index added in v0.85.0 

func (o EventDataStoreInsightSelectorArrayOutput) Index(i pulumi.IntInput) EventDataStoreInsightSelectorOutput

func (EventDataStoreInsightSelectorArrayOutput) ToEventDataStoreInsightSelectorArrayOutput added in v0.85.0 

func (o EventDataStoreInsightSelectorArrayOutput) ToEventDataStoreInsightSelectorArrayOutput() EventDataStoreInsightSelectorArrayOutput

func (EventDataStoreInsightSelectorArrayOutput) ToEventDataStoreInsightSelectorArrayOutputWithContext added in v0.85.0 

func (o EventDataStoreInsightSelectorArrayOutput) ToEventDataStoreInsightSelectorArrayOutputWithContext(ctx context.Context) EventDataStoreInsightSelectorArrayOutput

type EventDataStoreInsightSelectorInput added in v0.85.0 

type EventDataStoreInsightSelectorInput interface {
	pulumi.Input

	ToEventDataStoreInsightSelectorOutput() EventDataStoreInsightSelectorOutput
	ToEventDataStoreInsightSelectorOutputWithContext(context.Context) EventDataStoreInsightSelectorOutput
}

EventDataStoreInsightSelectorInput is an input type that accepts EventDataStoreInsightSelectorArgs and EventDataStoreInsightSelectorOutput values. You can construct a concrete instance of `EventDataStoreInsightSelectorInput` via: 

EventDataStoreInsightSelectorArgs{...}

type EventDataStoreInsightSelectorOutput added in v0.85.0 

type EventDataStoreInsightSelectorOutput struct{ *pulumi.OutputState }

A string that contains Insights types that are logged on an event data store.

func (EventDataStoreInsightSelectorOutput) ElementType added in v0.85.0 

func (EventDataStoreInsightSelectorOutput) ElementType() reflect.Type

func (EventDataStoreInsightSelectorOutput) InsightType added in v0.85.0 

func (o EventDataStoreInsightSelectorOutput) InsightType() pulumi.StringPtrOutput

The type of Insights to log on an event data store.

func (EventDataStoreInsightSelectorOutput) ToEventDataStoreInsightSelectorOutput added in v0.85.0 

func (o EventDataStoreInsightSelectorOutput) ToEventDataStoreInsightSelectorOutput() EventDataStoreInsightSelectorOutput

func (EventDataStoreInsightSelectorOutput) ToEventDataStoreInsightSelectorOutputWithContext added in v0.85.0 

func (o EventDataStoreInsightSelectorOutput) ToEventDataStoreInsightSelectorOutputWithContext(ctx context.Context) EventDataStoreInsightSelectorOutput

type EventDataStoreOutput added in v0.21.0 

type EventDataStoreOutput struct{ *pulumi.OutputState }

func (EventDataStoreOutput) AdvancedEventSelectors added in v0.21.0 

func (o EventDataStoreOutput) AdvancedEventSelectors() EventDataStoreAdvancedEventSelectorArrayOutput

The advanced event selectors that were used to select events for the data store.

func (EventDataStoreOutput) BillingMode added in v0.85.0 

func (o EventDataStoreOutput) BillingMode() pulumi.StringPtrOutput

The mode that the event data store will use to charge for event storage.

func (EventDataStoreOutput) CreatedTimestamp added in v0.21.0 

func (o EventDataStoreOutput) CreatedTimestamp() pulumi.StringOutput

The timestamp of the event data store's creation.

func (EventDataStoreOutput) ElementType added in v0.21.0 

func (EventDataStoreOutput) ElementType() reflect.Type

func (EventDataStoreOutput) EventDataStoreArn added in v0.21.0 

func (o EventDataStoreOutput) EventDataStoreArn() pulumi.StringOutput

The ARN of the event data store.

func (EventDataStoreOutput) FederationEnabled added in v0.91.0 

func (o EventDataStoreOutput) FederationEnabled() pulumi.BoolPtrOutput

Indicates whether federation is enabled on an event data store.

func (EventDataStoreOutput) FederationRoleArn added in v0.91.0 

func (o EventDataStoreOutput) FederationRoleArn() pulumi.StringPtrOutput

The ARN of the role used for event data store federation.

func (EventDataStoreOutput) IngestionEnabled added in v0.64.0 

func (o EventDataStoreOutput) IngestionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store is ingesting events.

func (EventDataStoreOutput) InsightSelectors added in v0.85.0 

func (o EventDataStoreOutput) InsightSelectors() EventDataStoreInsightSelectorArrayOutput

Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.

func (EventDataStoreOutput) InsightsDestination added in v0.85.0 

func (o EventDataStoreOutput) InsightsDestination() pulumi.StringPtrOutput

Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store

func (EventDataStoreOutput) KmsKeyId added in v0.41.0 

func (o EventDataStoreOutput) KmsKeyId() pulumi.StringPtrOutput

Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.

func (EventDataStoreOutput) MultiRegionEnabled added in v0.21.0 

func (o EventDataStoreOutput) MultiRegionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store includes events from all regions, or only from the region in which it was created.

func (EventDataStoreOutput) Name added in v0.21.0 

func (o EventDataStoreOutput) Name() pulumi.StringPtrOutput

The name of the event data store.

func (EventDataStoreOutput) OrganizationEnabled added in v0.21.0 

func (o EventDataStoreOutput) OrganizationEnabled() pulumi.BoolPtrOutput

Indicates that an event data store is collecting logged events for an organization.

func (EventDataStoreOutput) RetentionPeriod added in v0.21.0 

func (o EventDataStoreOutput) RetentionPeriod() pulumi.IntPtrOutput

The retention period, in days.

func (EventDataStoreOutput) Status added in v0.21.0 

func (o EventDataStoreOutput) Status() pulumi.StringOutput

The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.

func (EventDataStoreOutput) Tags added in v0.21.0 

func (o EventDataStoreOutput) Tags() aws.TagArrayOutput

A list of tags.

func (EventDataStoreOutput) TerminationProtectionEnabled added in v0.21.0 

func (o EventDataStoreOutput) TerminationProtectionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store is protected from termination.

func (EventDataStoreOutput) ToEventDataStoreOutput added in v0.21.0 

func (o EventDataStoreOutput) ToEventDataStoreOutput() EventDataStoreOutput

func (EventDataStoreOutput) ToEventDataStoreOutputWithContext added in v0.21.0 

func (o EventDataStoreOutput) ToEventDataStoreOutputWithContext(ctx context.Context) EventDataStoreOutput

func (EventDataStoreOutput) UpdatedTimestamp added in v0.21.0 

func (o EventDataStoreOutput) UpdatedTimestamp() pulumi.StringOutput

The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

type EventDataStoreState added in v0.21.0 

type EventDataStoreState struct {
}

func (EventDataStoreState) ElementType added in v0.21.0 

func (EventDataStoreState) ElementType() reflect.Type

type EventDataStoreTag added in v0.21.0 

type EventDataStoreTag struct {
	// The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Key string `pulumi:"key"`
	// The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Value string `pulumi:"value"`
}

An arbitrary set of tags (key-value pairs) for this event data store.

type LookupChannelArgs added in v0.50.0 

type LookupChannelArgs struct {
	// `Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .
	ChannelArn string `pulumi:"channelArn"`
}

type LookupChannelOutputArgs added in v0.50.0 

type LookupChannelOutputArgs struct {
	// `Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .
	ChannelArn pulumi.StringInput `pulumi:"channelArn"`
}

func (LookupChannelOutputArgs) ElementType added in v0.50.0 

func (LookupChannelOutputArgs) ElementType() reflect.Type

type LookupChannelResult added in v0.50.0 

type LookupChannelResult struct {
	// `Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .
	ChannelArn *string `pulumi:"channelArn"`
	// One or more resources to which events arriving through a channel are logged and stored.
	Destinations []ChannelDestination `pulumi:"destinations"`
	// The name of the channel.
	Name *string `pulumi:"name"`
}

func LookupChannel added in v0.50.0 

func LookupChannel(ctx *pulumi.Context, args *LookupChannelArgs, opts ...pulumi.InvokeOption) (*LookupChannelResult, error)

A channel receives events from a specific source (such as an on-premises storage solution or application, or a partner event data source), and delivers the events to one or more event data stores. You use channels to ingest events into CloudTrail from sources outside AWS.

type LookupChannelResultOutput added in v0.50.0 

type LookupChannelResultOutput struct{ *pulumi.OutputState }

func LookupChannelOutput added in v0.50.0 

func LookupChannelOutput(ctx *pulumi.Context, args LookupChannelOutputArgs, opts ...pulumi.InvokeOption) LookupChannelResultOutput

func (LookupChannelResultOutput) ChannelArn added in v0.50.0 

func (o LookupChannelResultOutput) ChannelArn() pulumi.StringPtrOutput

`Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .

func (LookupChannelResultOutput) Destinations added in v0.50.0 

func (o LookupChannelResultOutput) Destinations() ChannelDestinationArrayOutput

One or more resources to which events arriving through a channel are logged and stored.

func (LookupChannelResultOutput) ElementType added in v0.50.0 

func (LookupChannelResultOutput) ElementType() reflect.Type

func (LookupChannelResultOutput) Name added in v0.50.0 

func (o LookupChannelResultOutput) Name() pulumi.StringPtrOutput

The name of the channel.

func (LookupChannelResultOutput) ToLookupChannelResultOutput added in v0.50.0 

func (o LookupChannelResultOutput) ToLookupChannelResultOutput() LookupChannelResultOutput

func (LookupChannelResultOutput) ToLookupChannelResultOutputWithContext added in v0.50.0 

func (o LookupChannelResultOutput) ToLookupChannelResultOutputWithContext(ctx context.Context) LookupChannelResultOutput

type LookupEventDataStoreArgs added in v0.21.0 

type LookupEventDataStoreArgs struct {
	// The ARN of the event data store.
	EventDataStoreArn string `pulumi:"eventDataStoreArn"`
}

type LookupEventDataStoreOutputArgs added in v0.21.0 

type LookupEventDataStoreOutputArgs struct {
	// The ARN of the event data store.
	EventDataStoreArn pulumi.StringInput `pulumi:"eventDataStoreArn"`
}

func (LookupEventDataStoreOutputArgs) ElementType added in v0.21.0 

func (LookupEventDataStoreOutputArgs) ElementType() reflect.Type

type LookupEventDataStoreResult added in v0.21.0 

type LookupEventDataStoreResult struct {
	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors []EventDataStoreAdvancedEventSelector `pulumi:"advancedEventSelectors"`
	// The mode that the event data store will use to charge for event storage.
	BillingMode *string `pulumi:"billingMode"`
	// The timestamp of the event data store's creation.
	CreatedTimestamp *string `pulumi:"createdTimestamp"`
	// The ARN of the event data store.
	EventDataStoreArn *string `pulumi:"eventDataStoreArn"`
	// Indicates whether federation is enabled on an event data store.
	FederationEnabled *bool `pulumi:"federationEnabled"`
	// The ARN of the role used for event data store federation.
	FederationRoleArn *string `pulumi:"federationRoleArn"`
	// Indicates whether the event data store is ingesting events.
	IngestionEnabled *bool `pulumi:"ingestionEnabled"`
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
	InsightSelectors []EventDataStoreInsightSelector `pulumi:"insightSelectors"`
	// Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
	InsightsDestination *string `pulumi:"insightsDestination"`
	// Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId *string `pulumi:"kmsKeyId"`
	// Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
	MultiRegionEnabled *bool `pulumi:"multiRegionEnabled"`
	// The name of the event data store.
	Name *string `pulumi:"name"`
	// Indicates that an event data store is collecting logged events for an organization.
	OrganizationEnabled *bool `pulumi:"organizationEnabled"`
	// The retention period, in days.
	RetentionPeriod *int `pulumi:"retentionPeriod"`
	// The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
	Status *string `pulumi:"status"`
	// A list of tags.
	Tags []aws.Tag `pulumi:"tags"`
	// Indicates whether the event data store is protected from termination.
	TerminationProtectionEnabled *bool `pulumi:"terminationProtectionEnabled"`
	// The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
	UpdatedTimestamp *string `pulumi:"updatedTimestamp"`
}

func LookupEventDataStore added in v0.21.0 

func LookupEventDataStore(ctx *pulumi.Context, args *LookupEventDataStoreArgs, opts ...pulumi.InvokeOption) (*LookupEventDataStoreResult, error)

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 7 to 2557 or 3653 days (about seven or ten years) depending on the selected BillingMode.

type LookupEventDataStoreResultOutput added in v0.21.0 

type LookupEventDataStoreResultOutput struct{ *pulumi.OutputState }

func LookupEventDataStoreOutput added in v0.21.0 

func LookupEventDataStoreOutput(ctx *pulumi.Context, args LookupEventDataStoreOutputArgs, opts ...pulumi.InvokeOption) LookupEventDataStoreResultOutput

func (LookupEventDataStoreResultOutput) AdvancedEventSelectors added in v0.21.0 

func (o LookupEventDataStoreResultOutput) AdvancedEventSelectors() EventDataStoreAdvancedEventSelectorArrayOutput

The advanced event selectors that were used to select events for the data store.

func (LookupEventDataStoreResultOutput) BillingMode added in v0.85.0 

func (o LookupEventDataStoreResultOutput) BillingMode() pulumi.StringPtrOutput

The mode that the event data store will use to charge for event storage.

func (LookupEventDataStoreResultOutput) CreatedTimestamp added in v0.21.0 

func (o LookupEventDataStoreResultOutput) CreatedTimestamp() pulumi.StringPtrOutput

The timestamp of the event data store's creation.

func (LookupEventDataStoreResultOutput) ElementType added in v0.21.0 

func (LookupEventDataStoreResultOutput) ElementType() reflect.Type

func (LookupEventDataStoreResultOutput) EventDataStoreArn added in v0.21.0 

func (o LookupEventDataStoreResultOutput) EventDataStoreArn() pulumi.StringPtrOutput

The ARN of the event data store.

func (LookupEventDataStoreResultOutput) FederationEnabled added in v0.91.0 

func (o LookupEventDataStoreResultOutput) FederationEnabled() pulumi.BoolPtrOutput

Indicates whether federation is enabled on an event data store.

func (LookupEventDataStoreResultOutput) FederationRoleArn added in v0.91.0 

func (o LookupEventDataStoreResultOutput) FederationRoleArn() pulumi.StringPtrOutput

The ARN of the role used for event data store federation.

func (LookupEventDataStoreResultOutput) IngestionEnabled added in v0.64.0 

func (o LookupEventDataStoreResultOutput) IngestionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store is ingesting events.

func (LookupEventDataStoreResultOutput) InsightSelectors added in v0.85.0 

func (o LookupEventDataStoreResultOutput) InsightSelectors() EventDataStoreInsightSelectorArrayOutput

Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.

func (LookupEventDataStoreResultOutput) InsightsDestination added in v0.85.0 

func (o LookupEventDataStoreResultOutput) InsightsDestination() pulumi.StringPtrOutput

Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store

func (LookupEventDataStoreResultOutput) KmsKeyId added in v0.41.0 

func (o LookupEventDataStoreResultOutput) KmsKeyId() pulumi.StringPtrOutput

Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.

func (LookupEventDataStoreResultOutput) MultiRegionEnabled added in v0.21.0 

func (o LookupEventDataStoreResultOutput) MultiRegionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store includes events from all regions, or only from the region in which it was created.

func (LookupEventDataStoreResultOutput) Name added in v0.21.0 

func (o LookupEventDataStoreResultOutput) Name() pulumi.StringPtrOutput

The name of the event data store.

func (LookupEventDataStoreResultOutput) OrganizationEnabled added in v0.21.0 

func (o LookupEventDataStoreResultOutput) OrganizationEnabled() pulumi.BoolPtrOutput

Indicates that an event data store is collecting logged events for an organization.

func (LookupEventDataStoreResultOutput) RetentionPeriod added in v0.21.0 

func (o LookupEventDataStoreResultOutput) RetentionPeriod() pulumi.IntPtrOutput

The retention period, in days.

func (LookupEventDataStoreResultOutput) Status added in v0.21.0 

func (o LookupEventDataStoreResultOutput) Status() pulumi.StringPtrOutput

The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.

func (LookupEventDataStoreResultOutput) Tags added in v0.21.0 

func (o LookupEventDataStoreResultOutput) Tags() aws.TagArrayOutput

A list of tags.

func (LookupEventDataStoreResultOutput) TerminationProtectionEnabled added in v0.21.0 

func (o LookupEventDataStoreResultOutput) TerminationProtectionEnabled() pulumi.BoolPtrOutput

Indicates whether the event data store is protected from termination.

func (LookupEventDataStoreResultOutput) ToLookupEventDataStoreResultOutput added in v0.21.0 

func (o LookupEventDataStoreResultOutput) ToLookupEventDataStoreResultOutput() LookupEventDataStoreResultOutput

func (LookupEventDataStoreResultOutput) ToLookupEventDataStoreResultOutputWithContext added in v0.21.0 

func (o LookupEventDataStoreResultOutput) ToLookupEventDataStoreResultOutputWithContext(ctx context.Context) LookupEventDataStoreResultOutput

func (LookupEventDataStoreResultOutput) UpdatedTimestamp added in v0.21.0 

func (o LookupEventDataStoreResultOutput) UpdatedTimestamp() pulumi.StringPtrOutput

The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

type LookupResourcePolicyArgs added in v0.50.0 

type LookupResourcePolicyArgs struct {
	// The ARN of the AWS CloudTrail resource to which the policy applies.
	ResourceArn string `pulumi:"resourceArn"`
}

type LookupResourcePolicyOutputArgs added in v0.50.0 

type LookupResourcePolicyOutputArgs struct {
	// The ARN of the AWS CloudTrail resource to which the policy applies.
	ResourceArn pulumi.StringInput `pulumi:"resourceArn"`
}

func (LookupResourcePolicyOutputArgs) ElementType added in v0.50.0 

func (LookupResourcePolicyOutputArgs) ElementType() reflect.Type

type LookupResourcePolicyResult added in v0.50.0 

type LookupResourcePolicyResult struct {
	// A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.
	ResourcePolicy interface{} `pulumi:"resourcePolicy"`
}

func LookupResourcePolicy added in v0.50.0 

func LookupResourcePolicy(ctx *pulumi.Context, args *LookupResourcePolicyArgs, opts ...pulumi.InvokeOption) (*LookupResourcePolicyResult, error)

Resource Type definition for AWS::CloudTrail::ResourcePolicy

type LookupResourcePolicyResultOutput added in v0.50.0 

type LookupResourcePolicyResultOutput struct{ *pulumi.OutputState }

func LookupResourcePolicyOutput added in v0.50.0 

func LookupResourcePolicyOutput(ctx *pulumi.Context, args LookupResourcePolicyOutputArgs, opts ...pulumi.InvokeOption) LookupResourcePolicyResultOutput

func (LookupResourcePolicyResultOutput) ElementType added in v0.50.0 

func (LookupResourcePolicyResultOutput) ElementType() reflect.Type

func (LookupResourcePolicyResultOutput) ResourcePolicy added in v0.50.0 

func (o LookupResourcePolicyResultOutput) ResourcePolicy() pulumi.AnyOutput

A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.

func (LookupResourcePolicyResultOutput) ToLookupResourcePolicyResultOutput added in v0.50.0 

func (o LookupResourcePolicyResultOutput) ToLookupResourcePolicyResultOutput() LookupResourcePolicyResultOutput

func (LookupResourcePolicyResultOutput) ToLookupResourcePolicyResultOutputWithContext added in v0.50.0 

func (o LookupResourcePolicyResultOutput) ToLookupResourcePolicyResultOutputWithContext(ctx context.Context) LookupResourcePolicyResultOutput

type LookupTrailArgs added in v0.12.0 

type LookupTrailArgs struct {
	// Specifies the name of the trail. The name must meet the following requirements:
	//
	// - Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
	// - Start with a letter or number, and end with a letter or number
	// - Be between 3 and 128 characters
	// - Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.
	// - Not be in IP address format (for example, 192.168.5.4)
	TrailName string `pulumi:"trailName"`
}

type LookupTrailOutputArgs added in v0.12.0 

type LookupTrailOutputArgs struct {
	// Specifies the name of the trail. The name must meet the following requirements:
	//
	// - Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
	// - Start with a letter or number, and end with a letter or number
	// - Be between 3 and 128 characters
	// - Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.
	// - Not be in IP address format (for example, 192.168.5.4)
	TrailName pulumi.StringInput `pulumi:"trailName"`
}

func (LookupTrailOutputArgs) ElementType added in v0.12.0 

func (LookupTrailOutputArgs) ElementType() reflect.Type

type LookupTrailResult added in v0.12.0 

type LookupTrailResult struct {
	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors []TrailAdvancedEventSelector `pulumi:"advancedEventSelectors"`
	// `Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` .
	Arn *string `pulumi:"arn"`
	// Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
	CloudWatchLogsLogGroupArn *string `pulumi:"cloudWatchLogsLogGroupArn"`
	// Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
	CloudWatchLogsRoleArn *string `pulumi:"cloudWatchLogsRoleArn"`
	// Specifies whether log file validation is enabled. The default is false.
	EnableLogFileValidation *bool `pulumi:"enableLogFileValidation"`
	// Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
	EventSelectors []TrailEventSelector `pulumi:"eventSelectors"`
	// Specifies whether the trail is publishing events from global services such as IAM to the log files.
	IncludeGlobalServiceEvents *bool `pulumi:"includeGlobalServiceEvents"`
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
	InsightSelectors []TrailInsightSelector `pulumi:"insightSelectors"`
	// Whether the CloudTrail is currently logging AWS API calls.
	IsLogging *bool `pulumi:"isLogging"`
	// Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
	IsMultiRegionTrail *bool `pulumi:"isMultiRegionTrail"`
	// Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
	IsOrganizationTrail *bool `pulumi:"isOrganizationTrail"`
	// Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId *string `pulumi:"kmsKeyId"`
	// Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
	S3BucketName *string `pulumi:"s3BucketName"`
	// Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
	S3KeyPrefix *string `pulumi:"s3KeyPrefix"`
	// `Ref` returns the ARN of the Amazon SNS topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` .
	SnsTopicArn *string `pulumi:"snsTopicArn"`
	// Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
	SnsTopicName *string `pulumi:"snsTopicName"`
	// A custom set of tags (key-value pairs) for this trail.
	Tags []aws.Tag `pulumi:"tags"`
}

func LookupTrail added in v0.12.0 

func LookupTrail(ctx *pulumi.Context, args *LookupTrailArgs, opts ...pulumi.InvokeOption) (*LookupTrailResult, error)

Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. A maximum of five trails can exist in a region, irrespective of the region in which they were created.

type LookupTrailResultOutput added in v0.12.0 

type LookupTrailResultOutput struct{ *pulumi.OutputState }

func LookupTrailOutput added in v0.12.0 

func LookupTrailOutput(ctx *pulumi.Context, args LookupTrailOutputArgs, opts ...pulumi.InvokeOption) LookupTrailResultOutput

func (LookupTrailResultOutput) AdvancedEventSelectors added in v0.64.0 

func (o LookupTrailResultOutput) AdvancedEventSelectors() TrailAdvancedEventSelectorArrayOutput

The advanced event selectors that were used to select events for the data store.

func (LookupTrailResultOutput) Arn added in v0.12.0 

func (o LookupTrailResultOutput) Arn() pulumi.StringPtrOutput

`Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` .

func (LookupTrailResultOutput) CloudWatchLogsLogGroupArn added in v0.12.0 

func (o LookupTrailResultOutput) CloudWatchLogsLogGroupArn() pulumi.StringPtrOutput

Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.

func (LookupTrailResultOutput) CloudWatchLogsRoleArn added in v0.12.0 

func (o LookupTrailResultOutput) CloudWatchLogsRoleArn() pulumi.StringPtrOutput

Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.

func (LookupTrailResultOutput) ElementType added in v0.12.0 

func (LookupTrailResultOutput) ElementType() reflect.Type

func (LookupTrailResultOutput) EnableLogFileValidation added in v0.12.0 

func (o LookupTrailResultOutput) EnableLogFileValidation() pulumi.BoolPtrOutput

Specifies whether log file validation is enabled. The default is false.

func (LookupTrailResultOutput) EventSelectors added in v0.12.0 

func (o LookupTrailResultOutput) EventSelectors() TrailEventSelectorArrayOutput

Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.

func (LookupTrailResultOutput) IncludeGlobalServiceEvents added in v0.12.0 

func (o LookupTrailResultOutput) IncludeGlobalServiceEvents() pulumi.BoolPtrOutput

Specifies whether the trail is publishing events from global services such as IAM to the log files.

func (LookupTrailResultOutput) InsightSelectors added in v0.12.0 

func (o LookupTrailResultOutput) InsightSelectors() TrailInsightSelectorArrayOutput

Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.

func (LookupTrailResultOutput) IsLogging added in v0.12.0 

func (o LookupTrailResultOutput) IsLogging() pulumi.BoolPtrOutput

Whether the CloudTrail is currently logging AWS API calls.

func (LookupTrailResultOutput) IsMultiRegionTrail added in v0.12.0 

func (o LookupTrailResultOutput) IsMultiRegionTrail() pulumi.BoolPtrOutput

Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.

func (LookupTrailResultOutput) IsOrganizationTrail added in v0.12.0 

func (o LookupTrailResultOutput) IsOrganizationTrail() pulumi.BoolPtrOutput

Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.

func (LookupTrailResultOutput) KmsKeyId added in v0.72.0 

func (o LookupTrailResultOutput) KmsKeyId() pulumi.StringPtrOutput

Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.

func (LookupTrailResultOutput) S3BucketName added in v0.12.0 

func (o LookupTrailResultOutput) S3BucketName() pulumi.StringPtrOutput

Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.

func (LookupTrailResultOutput) S3KeyPrefix added in v0.12.0 

func (o LookupTrailResultOutput) S3KeyPrefix() pulumi.StringPtrOutput

Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.

func (LookupTrailResultOutput) SnsTopicArn added in v0.12.0 

func (o LookupTrailResultOutput) SnsTopicArn() pulumi.StringPtrOutput

`Ref` returns the ARN of the Amazon SNS topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` .

func (LookupTrailResultOutput) SnsTopicName added in v0.12.0 

func (o LookupTrailResultOutput) SnsTopicName() pulumi.StringPtrOutput

Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.

func (LookupTrailResultOutput) Tags added in v0.12.0 

func (o LookupTrailResultOutput) Tags() aws.TagArrayOutput

A custom set of tags (key-value pairs) for this trail.

func (LookupTrailResultOutput) ToLookupTrailResultOutput added in v0.12.0 

func (o LookupTrailResultOutput) ToLookupTrailResultOutput() LookupTrailResultOutput

func (LookupTrailResultOutput) ToLookupTrailResultOutputWithContext added in v0.12.0 

func (o LookupTrailResultOutput) ToLookupTrailResultOutputWithContext(ctx context.Context) LookupTrailResultOutput

type ResourcePolicy added in v0.50.0 

type ResourcePolicy struct {
	pulumi.CustomResourceState

	// The ARN of the AWS CloudTrail resource to which the policy applies.
	ResourceArn pulumi.StringOutput `pulumi:"resourceArn"`
	// A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.
	ResourcePolicy pulumi.AnyOutput `pulumi:"resourcePolicy"`
}

Resource Type definition for AWS::CloudTrail::ResourcePolicy

func GetResourcePolicy added in v0.50.0 

func GetResourcePolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ResourcePolicyState, opts ...pulumi.ResourceOption) (*ResourcePolicy, error)

GetResourcePolicy gets an existing ResourcePolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewResourcePolicy added in v0.50.0 

func NewResourcePolicy(ctx *pulumi.Context,
	name string, args *ResourcePolicyArgs, opts ...pulumi.ResourceOption) (*ResourcePolicy, error)

NewResourcePolicy registers a new resource with the given unique name, arguments, and options.

func (*ResourcePolicy) ElementType added in v0.50.0 

func (*ResourcePolicy) ElementType() reflect.Type

func (*ResourcePolicy) ToResourcePolicyOutput added in v0.50.0 

func (i *ResourcePolicy) ToResourcePolicyOutput() ResourcePolicyOutput

func (*ResourcePolicy) ToResourcePolicyOutputWithContext added in v0.50.0 

func (i *ResourcePolicy) ToResourcePolicyOutputWithContext(ctx context.Context) ResourcePolicyOutput

type ResourcePolicyArgs added in v0.50.0 

type ResourcePolicyArgs struct {
	// The ARN of the AWS CloudTrail resource to which the policy applies.
	ResourceArn pulumi.StringInput
	// A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.
	ResourcePolicy pulumi.Input
}

The set of arguments for constructing a ResourcePolicy resource.

func (ResourcePolicyArgs) ElementType added in v0.50.0 

func (ResourcePolicyArgs) ElementType() reflect.Type

type ResourcePolicyInput added in v0.50.0 

type ResourcePolicyInput interface {
	pulumi.Input

	ToResourcePolicyOutput() ResourcePolicyOutput
	ToResourcePolicyOutputWithContext(ctx context.Context) ResourcePolicyOutput
}

type ResourcePolicyOutput added in v0.50.0 

type ResourcePolicyOutput struct{ *pulumi.OutputState }

func (ResourcePolicyOutput) ElementType added in v0.50.0 

func (ResourcePolicyOutput) ElementType() reflect.Type

func (ResourcePolicyOutput) ResourceArn added in v0.50.0 

func (o ResourcePolicyOutput) ResourceArn() pulumi.StringOutput

The ARN of the AWS CloudTrail resource to which the policy applies.

func (ResourcePolicyOutput) ResourcePolicy added in v0.50.0 

func (o ResourcePolicyOutput) ResourcePolicy() pulumi.AnyOutput

A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.

func (ResourcePolicyOutput) ToResourcePolicyOutput added in v0.50.0 

func (o ResourcePolicyOutput) ToResourcePolicyOutput() ResourcePolicyOutput

func (ResourcePolicyOutput) ToResourcePolicyOutputWithContext added in v0.50.0 

func (o ResourcePolicyOutput) ToResourcePolicyOutputWithContext(ctx context.Context) ResourcePolicyOutput

type ResourcePolicyState added in v0.50.0 

type ResourcePolicyState struct {
}

func (ResourcePolicyState) ElementType added in v0.50.0 

func (ResourcePolicyState) ElementType() reflect.Type

type Trail 

type Trail struct {
	pulumi.CustomResourceState

	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors TrailAdvancedEventSelectorArrayOutput `pulumi:"advancedEventSelectors"`
	// `Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` .
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
	CloudWatchLogsLogGroupArn pulumi.StringPtrOutput `pulumi:"cloudWatchLogsLogGroupArn"`
	// Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
	CloudWatchLogsRoleArn pulumi.StringPtrOutput `pulumi:"cloudWatchLogsRoleArn"`
	// Specifies whether log file validation is enabled. The default is false.
	EnableLogFileValidation pulumi.BoolPtrOutput `pulumi:"enableLogFileValidation"`
	// Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
	EventSelectors TrailEventSelectorArrayOutput `pulumi:"eventSelectors"`
	// Specifies whether the trail is publishing events from global services such as IAM to the log files.
	IncludeGlobalServiceEvents pulumi.BoolPtrOutput `pulumi:"includeGlobalServiceEvents"`
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
	InsightSelectors TrailInsightSelectorArrayOutput `pulumi:"insightSelectors"`
	// Whether the CloudTrail is currently logging AWS API calls.
	IsLogging pulumi.BoolOutput `pulumi:"isLogging"`
	// Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
	IsMultiRegionTrail pulumi.BoolPtrOutput `pulumi:"isMultiRegionTrail"`
	// Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
	IsOrganizationTrail pulumi.BoolPtrOutput `pulumi:"isOrganizationTrail"`
	// Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId pulumi.StringPtrOutput `pulumi:"kmsKeyId"`
	// Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
	S3BucketName pulumi.StringOutput `pulumi:"s3BucketName"`
	// Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
	S3KeyPrefix pulumi.StringPtrOutput `pulumi:"s3KeyPrefix"`
	// `Ref` returns the ARN of the Amazon SNS topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` .
	SnsTopicArn pulumi.StringOutput `pulumi:"snsTopicArn"`
	// Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
	SnsTopicName pulumi.StringPtrOutput `pulumi:"snsTopicName"`
	// A custom set of tags (key-value pairs) for this trail.
	Tags aws.TagArrayOutput `pulumi:"tags"`
	// Specifies the name of the trail. The name must meet the following requirements:
	//
	// - Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
	// - Start with a letter or number, and end with a letter or number
	// - Be between 3 and 128 characters
	// - Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.
	// - Not be in IP address format (for example, 192.168.5.4)
	TrailName pulumi.StringPtrOutput `pulumi:"trailName"`
}

Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. A maximum of five trails can exist in a region, irrespective of the region in which they were created.

func GetTrail 

func GetTrail(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *TrailState, opts ...pulumi.ResourceOption) (*Trail, error)

GetTrail gets an existing Trail resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewTrail 

func NewTrail(ctx *pulumi.Context,
	name string, args *TrailArgs, opts ...pulumi.ResourceOption) (*Trail, error)

NewTrail registers a new resource with the given unique name, arguments, and options.

func (*Trail) ElementType 

func (*Trail) ElementType() reflect.Type

func (*Trail) ToTrailOutput 

func (i *Trail) ToTrailOutput() TrailOutput

func (*Trail) ToTrailOutputWithContext 

func (i *Trail) ToTrailOutputWithContext(ctx context.Context) TrailOutput

type TrailAdvancedEventSelector added in v0.64.0 

type TrailAdvancedEventSelector struct {
	// Contains all selector statements in an advanced event selector.
	FieldSelectors []TrailAdvancedFieldSelector `pulumi:"fieldSelectors"`
	// An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
	Name *string `pulumi:"name"`
}

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

type TrailAdvancedEventSelectorArgs added in v0.64.0 

type TrailAdvancedEventSelectorArgs struct {
	// Contains all selector statements in an advanced event selector.
	FieldSelectors TrailAdvancedFieldSelectorArrayInput `pulumi:"fieldSelectors"`
	// An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
	Name pulumi.StringPtrInput `pulumi:"name"`
}

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

func (TrailAdvancedEventSelectorArgs) ElementType added in v0.64.0 

func (TrailAdvancedEventSelectorArgs) ElementType() reflect.Type

func (TrailAdvancedEventSelectorArgs) ToTrailAdvancedEventSelectorOutput added in v0.64.0 

func (i TrailAdvancedEventSelectorArgs) ToTrailAdvancedEventSelectorOutput() TrailAdvancedEventSelectorOutput

func (TrailAdvancedEventSelectorArgs) ToTrailAdvancedEventSelectorOutputWithContext added in v0.64.0 

func (i TrailAdvancedEventSelectorArgs) ToTrailAdvancedEventSelectorOutputWithContext(ctx context.Context) TrailAdvancedEventSelectorOutput

type TrailAdvancedEventSelectorArray added in v0.64.0 

type TrailAdvancedEventSelectorArray []TrailAdvancedEventSelectorInput

func (TrailAdvancedEventSelectorArray) ElementType added in v0.64.0 

func (TrailAdvancedEventSelectorArray) ElementType() reflect.Type

func (TrailAdvancedEventSelectorArray) ToTrailAdvancedEventSelectorArrayOutput added in v0.64.0 

func (i TrailAdvancedEventSelectorArray) ToTrailAdvancedEventSelectorArrayOutput() TrailAdvancedEventSelectorArrayOutput

func (TrailAdvancedEventSelectorArray) ToTrailAdvancedEventSelectorArrayOutputWithContext added in v0.64.0 

func (i TrailAdvancedEventSelectorArray) ToTrailAdvancedEventSelectorArrayOutputWithContext(ctx context.Context) TrailAdvancedEventSelectorArrayOutput

type TrailAdvancedEventSelectorArrayInput added in v0.64.0 

type TrailAdvancedEventSelectorArrayInput interface {
	pulumi.Input

	ToTrailAdvancedEventSelectorArrayOutput() TrailAdvancedEventSelectorArrayOutput
	ToTrailAdvancedEventSelectorArrayOutputWithContext(context.Context) TrailAdvancedEventSelectorArrayOutput
}

TrailAdvancedEventSelectorArrayInput is an input type that accepts TrailAdvancedEventSelectorArray and TrailAdvancedEventSelectorArrayOutput values. You can construct a concrete instance of `TrailAdvancedEventSelectorArrayInput` via: 

TrailAdvancedEventSelectorArray{ TrailAdvancedEventSelectorArgs{...} }

type TrailAdvancedEventSelectorArrayOutput added in v0.64.0 

type TrailAdvancedEventSelectorArrayOutput struct{ *pulumi.OutputState }

func (TrailAdvancedEventSelectorArrayOutput) ElementType added in v0.64.0 

func (TrailAdvancedEventSelectorArrayOutput) ElementType() reflect.Type

func (TrailAdvancedEventSelectorArrayOutput) Index added in v0.64.0 

func (o TrailAdvancedEventSelectorArrayOutput) Index(i pulumi.IntInput) TrailAdvancedEventSelectorOutput

func (TrailAdvancedEventSelectorArrayOutput) ToTrailAdvancedEventSelectorArrayOutput added in v0.64.0 

func (o TrailAdvancedEventSelectorArrayOutput) ToTrailAdvancedEventSelectorArrayOutput() TrailAdvancedEventSelectorArrayOutput

func (TrailAdvancedEventSelectorArrayOutput) ToTrailAdvancedEventSelectorArrayOutputWithContext added in v0.64.0 

func (o TrailAdvancedEventSelectorArrayOutput) ToTrailAdvancedEventSelectorArrayOutputWithContext(ctx context.Context) TrailAdvancedEventSelectorArrayOutput

type TrailAdvancedEventSelectorInput added in v0.64.0 

type TrailAdvancedEventSelectorInput interface {
	pulumi.Input

	ToTrailAdvancedEventSelectorOutput() TrailAdvancedEventSelectorOutput
	ToTrailAdvancedEventSelectorOutputWithContext(context.Context) TrailAdvancedEventSelectorOutput
}

TrailAdvancedEventSelectorInput is an input type that accepts TrailAdvancedEventSelectorArgs and TrailAdvancedEventSelectorOutput values. You can construct a concrete instance of `TrailAdvancedEventSelectorInput` via: 

TrailAdvancedEventSelectorArgs{...}

type TrailAdvancedEventSelectorOutput added in v0.64.0 

type TrailAdvancedEventSelectorOutput struct{ *pulumi.OutputState }

Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.

func (TrailAdvancedEventSelectorOutput) ElementType added in v0.64.0 

func (TrailAdvancedEventSelectorOutput) ElementType() reflect.Type

func (TrailAdvancedEventSelectorOutput) FieldSelectors added in v0.64.0 

func (o TrailAdvancedEventSelectorOutput) FieldSelectors() TrailAdvancedFieldSelectorArrayOutput

Contains all selector statements in an advanced event selector.

func (TrailAdvancedEventSelectorOutput) Name added in v0.64.0 

func (o TrailAdvancedEventSelectorOutput) Name() pulumi.StringPtrOutput

An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

func (TrailAdvancedEventSelectorOutput) ToTrailAdvancedEventSelectorOutput added in v0.64.0 

func (o TrailAdvancedEventSelectorOutput) ToTrailAdvancedEventSelectorOutput() TrailAdvancedEventSelectorOutput

func (TrailAdvancedEventSelectorOutput) ToTrailAdvancedEventSelectorOutputWithContext added in v0.64.0 

func (o TrailAdvancedEventSelectorOutput) ToTrailAdvancedEventSelectorOutputWithContext(ctx context.Context) TrailAdvancedEventSelectorOutput

type TrailAdvancedFieldSelector added in v0.64.0 

type TrailAdvancedFieldSelector struct {
	// An operator that includes events that match the last few characters of the event record field specified as the value of Field.
	EndsWith []string `pulumi:"endsWith"`
	// An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
	Equals []string `pulumi:"equals"`
	// A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
	Field string `pulumi:"field"`
	// An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
	NotEndsWith []string `pulumi:"notEndsWith"`
	// An operator that excludes events that match the exact value of the event record field specified as the value of Field.
	NotEquals []string `pulumi:"notEquals"`
	// An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
	NotStartsWith []string `pulumi:"notStartsWith"`
	// An operator that includes events that match the first few characters of the event record field specified as the value of Field.
	StartsWith []string `pulumi:"startsWith"`
}

A single selector statement in an advanced event selector.

type TrailAdvancedFieldSelectorArgs added in v0.64.0 

type TrailAdvancedFieldSelectorArgs struct {
	// An operator that includes events that match the last few characters of the event record field specified as the value of Field.
	EndsWith pulumi.StringArrayInput `pulumi:"endsWith"`
	// An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
	Equals pulumi.StringArrayInput `pulumi:"equals"`
	// A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
	Field pulumi.StringInput `pulumi:"field"`
	// An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
	NotEndsWith pulumi.StringArrayInput `pulumi:"notEndsWith"`
	// An operator that excludes events that match the exact value of the event record field specified as the value of Field.
	NotEquals pulumi.StringArrayInput `pulumi:"notEquals"`
	// An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
	NotStartsWith pulumi.StringArrayInput `pulumi:"notStartsWith"`
	// An operator that includes events that match the first few characters of the event record field specified as the value of Field.
	StartsWith pulumi.StringArrayInput `pulumi:"startsWith"`
}

A single selector statement in an advanced event selector.

func (TrailAdvancedFieldSelectorArgs) ElementType added in v0.64.0 

func (TrailAdvancedFieldSelectorArgs) ElementType() reflect.Type

func (TrailAdvancedFieldSelectorArgs) ToTrailAdvancedFieldSelectorOutput added in v0.64.0 

func (i TrailAdvancedFieldSelectorArgs) ToTrailAdvancedFieldSelectorOutput() TrailAdvancedFieldSelectorOutput

func (TrailAdvancedFieldSelectorArgs) ToTrailAdvancedFieldSelectorOutputWithContext added in v0.64.0 

func (i TrailAdvancedFieldSelectorArgs) ToTrailAdvancedFieldSelectorOutputWithContext(ctx context.Context) TrailAdvancedFieldSelectorOutput

type TrailAdvancedFieldSelectorArray added in v0.64.0 

type TrailAdvancedFieldSelectorArray []TrailAdvancedFieldSelectorInput

func (TrailAdvancedFieldSelectorArray) ElementType added in v0.64.0 

func (TrailAdvancedFieldSelectorArray) ElementType() reflect.Type

func (TrailAdvancedFieldSelectorArray) ToTrailAdvancedFieldSelectorArrayOutput added in v0.64.0 

func (i TrailAdvancedFieldSelectorArray) ToTrailAdvancedFieldSelectorArrayOutput() TrailAdvancedFieldSelectorArrayOutput

func (TrailAdvancedFieldSelectorArray) ToTrailAdvancedFieldSelectorArrayOutputWithContext added in v0.64.0 

func (i TrailAdvancedFieldSelectorArray) ToTrailAdvancedFieldSelectorArrayOutputWithContext(ctx context.Context) TrailAdvancedFieldSelectorArrayOutput

type TrailAdvancedFieldSelectorArrayInput added in v0.64.0 

type TrailAdvancedFieldSelectorArrayInput interface {
	pulumi.Input

	ToTrailAdvancedFieldSelectorArrayOutput() TrailAdvancedFieldSelectorArrayOutput
	ToTrailAdvancedFieldSelectorArrayOutputWithContext(context.Context) TrailAdvancedFieldSelectorArrayOutput
}

TrailAdvancedFieldSelectorArrayInput is an input type that accepts TrailAdvancedFieldSelectorArray and TrailAdvancedFieldSelectorArrayOutput values. You can construct a concrete instance of `TrailAdvancedFieldSelectorArrayInput` via: 

TrailAdvancedFieldSelectorArray{ TrailAdvancedFieldSelectorArgs{...} }

type TrailAdvancedFieldSelectorArrayOutput added in v0.64.0 

type TrailAdvancedFieldSelectorArrayOutput struct{ *pulumi.OutputState }

func (TrailAdvancedFieldSelectorArrayOutput) ElementType added in v0.64.0 

func (TrailAdvancedFieldSelectorArrayOutput) ElementType() reflect.Type

func (TrailAdvancedFieldSelectorArrayOutput) Index added in v0.64.0 

func (o TrailAdvancedFieldSelectorArrayOutput) Index(i pulumi.IntInput) TrailAdvancedFieldSelectorOutput

func (TrailAdvancedFieldSelectorArrayOutput) ToTrailAdvancedFieldSelectorArrayOutput added in v0.64.0 

func (o TrailAdvancedFieldSelectorArrayOutput) ToTrailAdvancedFieldSelectorArrayOutput() TrailAdvancedFieldSelectorArrayOutput

func (TrailAdvancedFieldSelectorArrayOutput) ToTrailAdvancedFieldSelectorArrayOutputWithContext added in v0.64.0 

func (o TrailAdvancedFieldSelectorArrayOutput) ToTrailAdvancedFieldSelectorArrayOutputWithContext(ctx context.Context) TrailAdvancedFieldSelectorArrayOutput

type TrailAdvancedFieldSelectorInput added in v0.64.0 

type TrailAdvancedFieldSelectorInput interface {
	pulumi.Input

	ToTrailAdvancedFieldSelectorOutput() TrailAdvancedFieldSelectorOutput
	ToTrailAdvancedFieldSelectorOutputWithContext(context.Context) TrailAdvancedFieldSelectorOutput
}

TrailAdvancedFieldSelectorInput is an input type that accepts TrailAdvancedFieldSelectorArgs and TrailAdvancedFieldSelectorOutput values. You can construct a concrete instance of `TrailAdvancedFieldSelectorInput` via: 

TrailAdvancedFieldSelectorArgs{...}

type TrailAdvancedFieldSelectorOutput added in v0.64.0 

type TrailAdvancedFieldSelectorOutput struct{ *pulumi.OutputState }

A single selector statement in an advanced event selector.

func (TrailAdvancedFieldSelectorOutput) ElementType added in v0.64.0 

func (TrailAdvancedFieldSelectorOutput) ElementType() reflect.Type

func (TrailAdvancedFieldSelectorOutput) EndsWith added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) EndsWith() pulumi.StringArrayOutput

An operator that includes events that match the last few characters of the event record field specified as the value of Field.

func (TrailAdvancedFieldSelectorOutput) Equals added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) Equals() pulumi.StringArrayOutput

An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.

func (TrailAdvancedFieldSelectorOutput) Field added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) Field() pulumi.StringOutput

A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.

func (TrailAdvancedFieldSelectorOutput) NotEndsWith added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) NotEndsWith() pulumi.StringArrayOutput

An operator that excludes events that match the last few characters of the event record field specified as the value of Field.

func (TrailAdvancedFieldSelectorOutput) NotEquals added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) NotEquals() pulumi.StringArrayOutput

An operator that excludes events that match the exact value of the event record field specified as the value of Field.

func (TrailAdvancedFieldSelectorOutput) NotStartsWith added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) NotStartsWith() pulumi.StringArrayOutput

An operator that excludes events that match the first few characters of the event record field specified as the value of Field.

func (TrailAdvancedFieldSelectorOutput) StartsWith added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) StartsWith() pulumi.StringArrayOutput

An operator that includes events that match the first few characters of the event record field specified as the value of Field.

func (TrailAdvancedFieldSelectorOutput) ToTrailAdvancedFieldSelectorOutput added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) ToTrailAdvancedFieldSelectorOutput() TrailAdvancedFieldSelectorOutput

func (TrailAdvancedFieldSelectorOutput) ToTrailAdvancedFieldSelectorOutputWithContext added in v0.64.0 

func (o TrailAdvancedFieldSelectorOutput) ToTrailAdvancedFieldSelectorOutputWithContext(ctx context.Context) TrailAdvancedFieldSelectorOutput

type TrailArgs 

type TrailArgs struct {
	// The advanced event selectors that were used to select events for the data store.
	AdvancedEventSelectors TrailAdvancedEventSelectorArrayInput
	// Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
	CloudWatchLogsLogGroupArn pulumi.StringPtrInput
	// Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
	CloudWatchLogsRoleArn pulumi.StringPtrInput
	// Specifies whether log file validation is enabled. The default is false.
	EnableLogFileValidation pulumi.BoolPtrInput
	// Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
	EventSelectors TrailEventSelectorArrayInput
	// Specifies whether the trail is publishing events from global services such as IAM to the log files.
	IncludeGlobalServiceEvents pulumi.BoolPtrInput
	// Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
	InsightSelectors TrailInsightSelectorArrayInput
	// Whether the CloudTrail is currently logging AWS API calls.
	IsLogging pulumi.BoolInput
	// Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
	IsMultiRegionTrail pulumi.BoolPtrInput
	// Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
	IsOrganizationTrail pulumi.BoolPtrInput
	// Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
	KmsKeyId pulumi.StringPtrInput
	// Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
	S3BucketName pulumi.StringInput
	// Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
	S3KeyPrefix pulumi.StringPtrInput
	// Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
	SnsTopicName pulumi.StringPtrInput
	// A custom set of tags (key-value pairs) for this trail.
	Tags aws.TagArrayInput
	// Specifies the name of the trail. The name must meet the following requirements:
	//
	// - Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
	// - Start with a letter or number, and end with a letter or number
	// - Be between 3 and 128 characters
	// - Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.
	// - Not be in IP address format (for example, 192.168.5.4)
	TrailName pulumi.StringPtrInput
}

The set of arguments for constructing a Trail resource.

func (TrailArgs) ElementType 

func (TrailArgs) ElementType() reflect.Type

type TrailDataResource 

type TrailDataResource struct {
	// The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
	Type string `pulumi:"type"`
	// An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
	Values []string `pulumi:"values"`
}

CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

type TrailDataResourceArgs 

type TrailDataResourceArgs struct {
	// The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
	Type pulumi.StringInput `pulumi:"type"`
	// An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

func (TrailDataResourceArgs) ElementType 

func (TrailDataResourceArgs) ElementType() reflect.Type

func (TrailDataResourceArgs) ToTrailDataResourceOutput 

func (i TrailDataResourceArgs) ToTrailDataResourceOutput() TrailDataResourceOutput

func (TrailDataResourceArgs) ToTrailDataResourceOutputWithContext 

func (i TrailDataResourceArgs) ToTrailDataResourceOutputWithContext(ctx context.Context) TrailDataResourceOutput

type TrailDataResourceArray 

type TrailDataResourceArray []TrailDataResourceInput

func (TrailDataResourceArray) ElementType 

func (TrailDataResourceArray) ElementType() reflect.Type

func (TrailDataResourceArray) ToTrailDataResourceArrayOutput 

func (i TrailDataResourceArray) ToTrailDataResourceArrayOutput() TrailDataResourceArrayOutput

func (TrailDataResourceArray) ToTrailDataResourceArrayOutputWithContext 

func (i TrailDataResourceArray) ToTrailDataResourceArrayOutputWithContext(ctx context.Context) TrailDataResourceArrayOutput

type TrailDataResourceArrayInput 

type TrailDataResourceArrayInput interface {
	pulumi.Input

	ToTrailDataResourceArrayOutput() TrailDataResourceArrayOutput
	ToTrailDataResourceArrayOutputWithContext(context.Context) TrailDataResourceArrayOutput
}

TrailDataResourceArrayInput is an input type that accepts TrailDataResourceArray and TrailDataResourceArrayOutput values. You can construct a concrete instance of `TrailDataResourceArrayInput` via: 

TrailDataResourceArray{ TrailDataResourceArgs{...} }

type TrailDataResourceArrayOutput 

type TrailDataResourceArrayOutput struct{ *pulumi.OutputState }

func (TrailDataResourceArrayOutput) ElementType 

func (TrailDataResourceArrayOutput) ElementType() reflect.Type

func (TrailDataResourceArrayOutput) Index 

func (o TrailDataResourceArrayOutput) Index(i pulumi.IntInput) TrailDataResourceOutput

func (TrailDataResourceArrayOutput) ToTrailDataResourceArrayOutput 

func (o TrailDataResourceArrayOutput) ToTrailDataResourceArrayOutput() TrailDataResourceArrayOutput

func (TrailDataResourceArrayOutput) ToTrailDataResourceArrayOutputWithContext 

func (o TrailDataResourceArrayOutput) ToTrailDataResourceArrayOutputWithContext(ctx context.Context) TrailDataResourceArrayOutput

type TrailDataResourceInput 

type TrailDataResourceInput interface {
	pulumi.Input

	ToTrailDataResourceOutput() TrailDataResourceOutput
	ToTrailDataResourceOutputWithContext(context.Context) TrailDataResourceOutput
}

TrailDataResourceInput is an input type that accepts TrailDataResourceArgs and TrailDataResourceOutput values. You can construct a concrete instance of `TrailDataResourceInput` via: 

TrailDataResourceArgs{...}

type TrailDataResourceOutput 

type TrailDataResourceOutput struct{ *pulumi.OutputState }

CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

func (TrailDataResourceOutput) ElementType 

func (TrailDataResourceOutput) ElementType() reflect.Type

func (TrailDataResourceOutput) ToTrailDataResourceOutput 

func (o TrailDataResourceOutput) ToTrailDataResourceOutput() TrailDataResourceOutput

func (TrailDataResourceOutput) ToTrailDataResourceOutputWithContext 

func (o TrailDataResourceOutput) ToTrailDataResourceOutputWithContext(ctx context.Context) TrailDataResourceOutput

func (TrailDataResourceOutput) Type 

func (o TrailDataResourceOutput) Type() pulumi.StringOutput

The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.

func (TrailDataResourceOutput) Values 

func (o TrailDataResourceOutput) Values() pulumi.StringArrayOutput

An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.

type TrailEventSelector 

type TrailEventSelector struct {
	// CloudTrail supports data event logging for Amazon S3 objects, AWS Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.
	//
	// For more information, see [Data Events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html) and [Limits in AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in the *AWS CloudTrail User Guide* .
	DataResources []TrailDataResource `pulumi:"dataResources"`
	// An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing "kms.amazonaws.com". By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
	ExcludeManagementEventSources []string `pulumi:"excludeManagementEventSources"`
	// Specify if you want your event selector to include management events for your trail.
	IncludeManagementEvents *bool `pulumi:"includeManagementEvents"`
	// Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
	ReadWriteType *TrailEventSelectorReadWriteType `pulumi:"readWriteType"`
}

The type of email sending events to publish to the event destination.

type TrailEventSelectorArgs 

type TrailEventSelectorArgs struct {
	// CloudTrail supports data event logging for Amazon S3 objects, AWS Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.
	//
	// For more information, see [Data Events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html) and [Limits in AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in the *AWS CloudTrail User Guide* .
	DataResources TrailDataResourceArrayInput `pulumi:"dataResources"`
	// An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing "kms.amazonaws.com". By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
	ExcludeManagementEventSources pulumi.StringArrayInput `pulumi:"excludeManagementEventSources"`
	// Specify if you want your event selector to include management events for your trail.
	IncludeManagementEvents pulumi.BoolPtrInput `pulumi:"includeManagementEvents"`
	// Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
	ReadWriteType TrailEventSelectorReadWriteTypePtrInput `pulumi:"readWriteType"`
}

The type of email sending events to publish to the event destination.

func (TrailEventSelectorArgs) ElementType 

func (TrailEventSelectorArgs) ElementType() reflect.Type

func (TrailEventSelectorArgs) ToTrailEventSelectorOutput 

func (i TrailEventSelectorArgs) ToTrailEventSelectorOutput() TrailEventSelectorOutput

func (TrailEventSelectorArgs) ToTrailEventSelectorOutputWithContext 

func (i TrailEventSelectorArgs) ToTrailEventSelectorOutputWithContext(ctx context.Context) TrailEventSelectorOutput

type TrailEventSelectorArray 

type TrailEventSelectorArray []TrailEventSelectorInput

func (TrailEventSelectorArray) ElementType 

func (TrailEventSelectorArray) ElementType() reflect.Type

func (TrailEventSelectorArray) ToTrailEventSelectorArrayOutput 

func (i TrailEventSelectorArray) ToTrailEventSelectorArrayOutput() TrailEventSelectorArrayOutput

func (TrailEventSelectorArray) ToTrailEventSelectorArrayOutputWithContext 

func (i TrailEventSelectorArray) ToTrailEventSelectorArrayOutputWithContext(ctx context.Context) TrailEventSelectorArrayOutput

type TrailEventSelectorArrayInput 

type TrailEventSelectorArrayInput interface {
	pulumi.Input

	ToTrailEventSelectorArrayOutput() TrailEventSelectorArrayOutput
	ToTrailEventSelectorArrayOutputWithContext(context.Context) TrailEventSelectorArrayOutput
}

TrailEventSelectorArrayInput is an input type that accepts TrailEventSelectorArray and TrailEventSelectorArrayOutput values. You can construct a concrete instance of `TrailEventSelectorArrayInput` via: 

TrailEventSelectorArray{ TrailEventSelectorArgs{...} }

type TrailEventSelectorArrayOutput 

type TrailEventSelectorArrayOutput struct{ *pulumi.OutputState }

func (TrailEventSelectorArrayOutput) ElementType 

func (TrailEventSelectorArrayOutput) ElementType() reflect.Type

func (TrailEventSelectorArrayOutput) Index 

func (o TrailEventSelectorArrayOutput) Index(i pulumi.IntInput) TrailEventSelectorOutput

func (TrailEventSelectorArrayOutput) ToTrailEventSelectorArrayOutput 

func (o TrailEventSelectorArrayOutput) ToTrailEventSelectorArrayOutput() TrailEventSelectorArrayOutput

func (TrailEventSelectorArrayOutput) ToTrailEventSelectorArrayOutputWithContext 

func (o TrailEventSelectorArrayOutput) ToTrailEventSelectorArrayOutputWithContext(ctx context.Context) TrailEventSelectorArrayOutput

type TrailEventSelectorInput 

type TrailEventSelectorInput interface {
	pulumi.Input

	ToTrailEventSelectorOutput() TrailEventSelectorOutput
	ToTrailEventSelectorOutputWithContext(context.Context) TrailEventSelectorOutput
}

TrailEventSelectorInput is an input type that accepts TrailEventSelectorArgs and TrailEventSelectorOutput values. You can construct a concrete instance of `TrailEventSelectorInput` via: 

TrailEventSelectorArgs{...}

type TrailEventSelectorOutput 

type TrailEventSelectorOutput struct{ *pulumi.OutputState }

The type of email sending events to publish to the event destination.

func (TrailEventSelectorOutput) DataResources 

func (o TrailEventSelectorOutput) DataResources() TrailDataResourceArrayOutput

CloudTrail supports data event logging for Amazon S3 objects, AWS Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

For more information, see [Data Events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html) and [Limits in AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in the *AWS CloudTrail User Guide* .

func (TrailEventSelectorOutput) ElementType 

func (TrailEventSelectorOutput) ElementType() reflect.Type

func (TrailEventSelectorOutput) ExcludeManagementEventSources 

func (o TrailEventSelectorOutput) ExcludeManagementEventSources() pulumi.StringArrayOutput

An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing "kms.amazonaws.com". By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.

func (TrailEventSelectorOutput) IncludeManagementEvents 

func (o TrailEventSelectorOutput) IncludeManagementEvents() pulumi.BoolPtrOutput

Specify if you want your event selector to include management events for your trail.

func (TrailEventSelectorOutput) ReadWriteType 

func (o TrailEventSelectorOutput) ReadWriteType() TrailEventSelectorReadWriteTypePtrOutput

Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

func (TrailEventSelectorOutput) ToTrailEventSelectorOutput 

func (o TrailEventSelectorOutput) ToTrailEventSelectorOutput() TrailEventSelectorOutput

func (TrailEventSelectorOutput) ToTrailEventSelectorOutputWithContext 

func (o TrailEventSelectorOutput) ToTrailEventSelectorOutputWithContext(ctx context.Context) TrailEventSelectorOutput

type TrailEventSelectorReadWriteType 

type TrailEventSelectorReadWriteType string

Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

func (TrailEventSelectorReadWriteType) ElementType 

func (TrailEventSelectorReadWriteType) ElementType() reflect.Type

func (TrailEventSelectorReadWriteType) ToStringOutput 

func (e TrailEventSelectorReadWriteType) ToStringOutput() pulumi.StringOutput

func (TrailEventSelectorReadWriteType) ToStringOutputWithContext 

func (e TrailEventSelectorReadWriteType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (TrailEventSelectorReadWriteType) ToStringPtrOutput 

func (e TrailEventSelectorReadWriteType) ToStringPtrOutput() pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteType) ToStringPtrOutputWithContext 

func (e TrailEventSelectorReadWriteType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypeOutput 

func (e TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypeOutput() TrailEventSelectorReadWriteTypeOutput

func (TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypeOutputWithContext 

func (e TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypeOutputWithContext(ctx context.Context) TrailEventSelectorReadWriteTypeOutput

func (TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypePtrOutput 

func (e TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypePtrOutput() TrailEventSelectorReadWriteTypePtrOutput

func (TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypePtrOutputWithContext 

func (e TrailEventSelectorReadWriteType) ToTrailEventSelectorReadWriteTypePtrOutputWithContext(ctx context.Context) TrailEventSelectorReadWriteTypePtrOutput

type TrailEventSelectorReadWriteTypeInput 

type TrailEventSelectorReadWriteTypeInput interface {
	pulumi.Input

	ToTrailEventSelectorReadWriteTypeOutput() TrailEventSelectorReadWriteTypeOutput
	ToTrailEventSelectorReadWriteTypeOutputWithContext(context.Context) TrailEventSelectorReadWriteTypeOutput
}

TrailEventSelectorReadWriteTypeInput is an input type that accepts values of the TrailEventSelectorReadWriteType enum A concrete instance of `TrailEventSelectorReadWriteTypeInput` can be one of the following: 

TrailEventSelectorReadWriteTypeAll
TrailEventSelectorReadWriteTypeReadOnly
TrailEventSelectorReadWriteTypeWriteOnly

type TrailEventSelectorReadWriteTypeOutput 

type TrailEventSelectorReadWriteTypeOutput struct{ *pulumi.OutputState }

func (TrailEventSelectorReadWriteTypeOutput) ElementType 

func (TrailEventSelectorReadWriteTypeOutput) ElementType() reflect.Type

func (TrailEventSelectorReadWriteTypeOutput) ToStringOutput 

func (o TrailEventSelectorReadWriteTypeOutput) ToStringOutput() pulumi.StringOutput

func (TrailEventSelectorReadWriteTypeOutput) ToStringOutputWithContext 

func (o TrailEventSelectorReadWriteTypeOutput) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (TrailEventSelectorReadWriteTypeOutput) ToStringPtrOutput 

func (o TrailEventSelectorReadWriteTypeOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteTypeOutput) ToStringPtrOutputWithContext 

func (o TrailEventSelectorReadWriteTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypeOutput 

func (o TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypeOutput() TrailEventSelectorReadWriteTypeOutput

func (TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypeOutputWithContext 

func (o TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypeOutputWithContext(ctx context.Context) TrailEventSelectorReadWriteTypeOutput

func (TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypePtrOutput 

func (o TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypePtrOutput() TrailEventSelectorReadWriteTypePtrOutput

func (TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypePtrOutputWithContext 

func (o TrailEventSelectorReadWriteTypeOutput) ToTrailEventSelectorReadWriteTypePtrOutputWithContext(ctx context.Context) TrailEventSelectorReadWriteTypePtrOutput

type TrailEventSelectorReadWriteTypePtrInput 

type TrailEventSelectorReadWriteTypePtrInput interface {
	pulumi.Input

	ToTrailEventSelectorReadWriteTypePtrOutput() TrailEventSelectorReadWriteTypePtrOutput
	ToTrailEventSelectorReadWriteTypePtrOutputWithContext(context.Context) TrailEventSelectorReadWriteTypePtrOutput
}

func TrailEventSelectorReadWriteTypePtr 

func TrailEventSelectorReadWriteTypePtr(v string) TrailEventSelectorReadWriteTypePtrInput

type TrailEventSelectorReadWriteTypePtrOutput 

type TrailEventSelectorReadWriteTypePtrOutput struct{ *pulumi.OutputState }

func (TrailEventSelectorReadWriteTypePtrOutput) Elem 

func (o TrailEventSelectorReadWriteTypePtrOutput) Elem() TrailEventSelectorReadWriteTypeOutput

func (TrailEventSelectorReadWriteTypePtrOutput) ElementType 

func (TrailEventSelectorReadWriteTypePtrOutput) ElementType() reflect.Type

func (TrailEventSelectorReadWriteTypePtrOutput) ToStringPtrOutput 

func (o TrailEventSelectorReadWriteTypePtrOutput) ToStringPtrOutput() pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteTypePtrOutput) ToStringPtrOutputWithContext 

func (o TrailEventSelectorReadWriteTypePtrOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

func (TrailEventSelectorReadWriteTypePtrOutput) ToTrailEventSelectorReadWriteTypePtrOutput 

func (o TrailEventSelectorReadWriteTypePtrOutput) ToTrailEventSelectorReadWriteTypePtrOutput() TrailEventSelectorReadWriteTypePtrOutput

func (TrailEventSelectorReadWriteTypePtrOutput) ToTrailEventSelectorReadWriteTypePtrOutputWithContext 

func (o TrailEventSelectorReadWriteTypePtrOutput) ToTrailEventSelectorReadWriteTypePtrOutputWithContext(ctx context.Context) TrailEventSelectorReadWriteTypePtrOutput

type TrailInput 

type TrailInput interface {
	pulumi.Input

	ToTrailOutput() TrailOutput
	ToTrailOutputWithContext(ctx context.Context) TrailOutput
}

type TrailInsightSelector 

type TrailInsightSelector struct {
	// The type of insight to log on a trail.
	InsightType *string `pulumi:"insightType"`
}

A string that contains insight types that are logged on a trail.

type TrailInsightSelectorArgs 

type TrailInsightSelectorArgs struct {
	// The type of insight to log on a trail.
	InsightType pulumi.StringPtrInput `pulumi:"insightType"`
}

A string that contains insight types that are logged on a trail.

func (TrailInsightSelectorArgs) ElementType 

func (TrailInsightSelectorArgs) ElementType() reflect.Type

func (TrailInsightSelectorArgs) ToTrailInsightSelectorOutput 

func (i TrailInsightSelectorArgs) ToTrailInsightSelectorOutput() TrailInsightSelectorOutput

func (TrailInsightSelectorArgs) ToTrailInsightSelectorOutputWithContext 

func (i TrailInsightSelectorArgs) ToTrailInsightSelectorOutputWithContext(ctx context.Context) TrailInsightSelectorOutput

type TrailInsightSelectorArray 

type TrailInsightSelectorArray []TrailInsightSelectorInput

func (TrailInsightSelectorArray) ElementType 

func (TrailInsightSelectorArray) ElementType() reflect.Type

func (TrailInsightSelectorArray) ToTrailInsightSelectorArrayOutput 

func (i TrailInsightSelectorArray) ToTrailInsightSelectorArrayOutput() TrailInsightSelectorArrayOutput

func (TrailInsightSelectorArray) ToTrailInsightSelectorArrayOutputWithContext 

func (i TrailInsightSelectorArray) ToTrailInsightSelectorArrayOutputWithContext(ctx context.Context) TrailInsightSelectorArrayOutput

type TrailInsightSelectorArrayInput 

type TrailInsightSelectorArrayInput interface {
	pulumi.Input

	ToTrailInsightSelectorArrayOutput() TrailInsightSelectorArrayOutput
	ToTrailInsightSelectorArrayOutputWithContext(context.Context) TrailInsightSelectorArrayOutput
}

TrailInsightSelectorArrayInput is an input type that accepts TrailInsightSelectorArray and TrailInsightSelectorArrayOutput values. You can construct a concrete instance of `TrailInsightSelectorArrayInput` via: 

TrailInsightSelectorArray{ TrailInsightSelectorArgs{...} }

type TrailInsightSelectorArrayOutput 

type TrailInsightSelectorArrayOutput struct{ *pulumi.OutputState }

func (TrailInsightSelectorArrayOutput) ElementType 

func (TrailInsightSelectorArrayOutput) ElementType() reflect.Type

func (TrailInsightSelectorArrayOutput) Index 

func (o TrailInsightSelectorArrayOutput) Index(i pulumi.IntInput) TrailInsightSelectorOutput

func (TrailInsightSelectorArrayOutput) ToTrailInsightSelectorArrayOutput 

func (o TrailInsightSelectorArrayOutput) ToTrailInsightSelectorArrayOutput() TrailInsightSelectorArrayOutput

func (TrailInsightSelectorArrayOutput) ToTrailInsightSelectorArrayOutputWithContext 

func (o TrailInsightSelectorArrayOutput) ToTrailInsightSelectorArrayOutputWithContext(ctx context.Context) TrailInsightSelectorArrayOutput

type TrailInsightSelectorInput 

type TrailInsightSelectorInput interface {
	pulumi.Input

	ToTrailInsightSelectorOutput() TrailInsightSelectorOutput
	ToTrailInsightSelectorOutputWithContext(context.Context) TrailInsightSelectorOutput
}

TrailInsightSelectorInput is an input type that accepts TrailInsightSelectorArgs and TrailInsightSelectorOutput values. You can construct a concrete instance of `TrailInsightSelectorInput` via: 

TrailInsightSelectorArgs{...}

type TrailInsightSelectorOutput 

type TrailInsightSelectorOutput struct{ *pulumi.OutputState }

A string that contains insight types that are logged on a trail.

func (TrailInsightSelectorOutput) ElementType 

func (TrailInsightSelectorOutput) ElementType() reflect.Type

func (TrailInsightSelectorOutput) InsightType 

func (o TrailInsightSelectorOutput) InsightType() pulumi.StringPtrOutput

The type of insight to log on a trail.

func (TrailInsightSelectorOutput) ToTrailInsightSelectorOutput 

func (o TrailInsightSelectorOutput) ToTrailInsightSelectorOutput() TrailInsightSelectorOutput

func (TrailInsightSelectorOutput) ToTrailInsightSelectorOutputWithContext 

func (o TrailInsightSelectorOutput) ToTrailInsightSelectorOutputWithContext(ctx context.Context) TrailInsightSelectorOutput

type TrailOutput 

type TrailOutput struct{ *pulumi.OutputState }

func (TrailOutput) AdvancedEventSelectors added in v0.64.0 

func (o TrailOutput) AdvancedEventSelectors() TrailAdvancedEventSelectorArrayOutput

The advanced event selectors that were used to select events for the data store.

func (TrailOutput) Arn added in v0.17.0 

func (o TrailOutput) Arn() pulumi.StringOutput

`Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` .

func (TrailOutput) CloudWatchLogsLogGroupArn added in v0.17.0 

func (o TrailOutput) CloudWatchLogsLogGroupArn() pulumi.StringPtrOutput

Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.

func (TrailOutput) CloudWatchLogsRoleArn added in v0.17.0 

func (o TrailOutput) CloudWatchLogsRoleArn() pulumi.StringPtrOutput

Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.

func (TrailOutput) ElementType 

func (TrailOutput) ElementType() reflect.Type

func (TrailOutput) EnableLogFileValidation added in v0.17.0 

func (o TrailOutput) EnableLogFileValidation() pulumi.BoolPtrOutput

Specifies whether log file validation is enabled. The default is false.

func (TrailOutput) EventSelectors added in v0.17.0 

func (o TrailOutput) EventSelectors() TrailEventSelectorArrayOutput

Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.

func (TrailOutput) IncludeGlobalServiceEvents added in v0.17.0 

func (o TrailOutput) IncludeGlobalServiceEvents() pulumi.BoolPtrOutput

Specifies whether the trail is publishing events from global services such as IAM to the log files.

func (TrailOutput) InsightSelectors added in v0.17.0 

func (o TrailOutput) InsightSelectors() TrailInsightSelectorArrayOutput

Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.

func (TrailOutput) IsLogging added in v0.17.0 

func (o TrailOutput) IsLogging() pulumi.BoolOutput

Whether the CloudTrail is currently logging AWS API calls.

func (TrailOutput) IsMultiRegionTrail added in v0.17.0 

func (o TrailOutput) IsMultiRegionTrail() pulumi.BoolPtrOutput

Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.

func (TrailOutput) IsOrganizationTrail added in v0.17.0 

func (o TrailOutput) IsOrganizationTrail() pulumi.BoolPtrOutput

Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.

func (TrailOutput) KmsKeyId added in v0.72.0 

func (o TrailOutput) KmsKeyId() pulumi.StringPtrOutput

Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.

func (TrailOutput) S3BucketName added in v0.17.0 

func (o TrailOutput) S3BucketName() pulumi.StringOutput

Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.

func (TrailOutput) S3KeyPrefix added in v0.17.0 

func (o TrailOutput) S3KeyPrefix() pulumi.StringPtrOutput

Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.

func (TrailOutput) SnsTopicArn added in v0.17.0 

func (o TrailOutput) SnsTopicArn() pulumi.StringOutput

`Ref` returns the ARN of the Amazon SNS topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` .

func (TrailOutput) SnsTopicName added in v0.17.0 

func (o TrailOutput) SnsTopicName() pulumi.StringPtrOutput

Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.

func (TrailOutput) Tags added in v0.17.0 

func (o TrailOutput) Tags() aws.TagArrayOutput

A custom set of tags (key-value pairs) for this trail.

func (TrailOutput) ToTrailOutput 

func (o TrailOutput) ToTrailOutput() TrailOutput

func (TrailOutput) ToTrailOutputWithContext 

func (o TrailOutput) ToTrailOutputWithContext(ctx context.Context) TrailOutput

func (TrailOutput) TrailName added in v0.17.0 

func (o TrailOutput) TrailName() pulumi.StringPtrOutput

Specifies the name of the trail. The name must meet the following requirements:

- Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-) - Start with a letter or number, and end with a letter or number - Be between 3 and 128 characters - Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid. - Not be in IP address format (for example, 192.168.5.4)

type TrailState 

type TrailState struct {
}

func (TrailState) ElementType 

func (TrailState) ElementType() reflect.Type

type TrailTag 

type TrailTag struct {
	// The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Key string `pulumi:"key"`
	// The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Value string `pulumi:"value"`
}

An arbitrary set of tags (key-value pairs) for this trail.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.