aws-sdk-cloudtrail 1.0.0.rc1 → 1.0.0.rc2

data/lib/aws-sdk-cloudtrail/errors.rb

@@ -1,23 +1,14 @@
 # WARNING ABOUT GENERATED CODE
 #
-# This file is generated. See the contributing for info on making contributions:
+# This file is generated. See the contributing guide for more information:
 # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
-module Aws
-  module CloudTrail
-    module Errors
+module Aws::CloudTrail
+  module Errors
 
-      extend Aws::Errors::DynamicErrors
+    extend Aws::Errors::DynamicErrors
 
-      # Raised when calling #load or #data on a resource class that can not be
-      # loaded.  This can happen when:
-      #
-      # * A resource class has identifiers, but no data attributes.
-      # * Resource data is only available when making an API call that
-      # enumerates all resources of that type.
-      class ResourceNotLoadable < RuntimeError; end
-    end
   end
 end

data/lib/aws-sdk-cloudtrail/resource.rb

@@ -1,25 +1,23 @@
 # WARNING ABOUT GENERATED CODE
 #
-# This file is generated. See the contributing for info on making contributions:
+# This file is generated. See the contributing guide for more information:
 # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
-module Aws
-  module CloudTrail
-    class Resource
+module Aws::CloudTrail
+  class Resource
 
-      # @param options ({})
-      # @option options [Client] :client
-      def initialize(options = {})
-        @client = options[:client] || Client.new(options)
-      end
-
-      # @return [Client]
-      def client
-        @client
-      end
+    # @param options ({})
+    # @option options [Client] :client
+    def initialize(options = {})
+      @client = options[:client] || Client.new(options)
+    end
 
+    # @return [Client]
+    def client
+      @client
     end
+
   end
 end

data/lib/aws-sdk-cloudtrail/types.rb

@@ -1,1431 +1,1512 @@
 # WARNING ABOUT GENERATED CODE
 #
-# This file is generated. See the contributing for info on making contributions:
+# This file is generated. See the contributing guide for more information:
 # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
-module Aws
-  module CloudTrail
-    module Types
+module Aws::CloudTrail
+  module Types
 
-      # Specifies the tags to add to a trail.
-      # @note When making an API call, pass AddTagsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         resource_id: "String", # required
-      #         tags_list: [
-      #           {
-      #             key: "String", # required
-      #             value: "String",
-      #           },
-      #         ],
-      #       }
-      # @!attribute [rw] resource_id
-      #   Specifies the ARN of the trail to which one or more tags will be
-      #   added. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] tags_list
-      #   Contains a list of CloudTrail tags, up to a limit of 50
-      #   @return [Array<Types::Tag>]
-      class AddTagsRequest < Struct.new(
-        :resource_id,
-        :tags_list)
-        include Aws::Structure
-      end
-
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      class AddTagsResponse < Aws::EmptyStructure; end
+    # Specifies the tags to add to a trail.
+    #
+    # @note When making an API call, you may pass AddTagsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_id: "String", # required
+    #         tags_list: [
+    #           {
+    #             key: "String", # required
+    #             value: "String",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] resource_id
+    #   Specifies the ARN of the trail to which one or more tags will be
+    #   added. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] tags_list
+    #   Contains a list of CloudTrail tags, up to a limit of 50
+    #   @return [Array<Types::Tag>]
+    #
+    class AddTagsRequest < Struct.new(
+      :resource_id,
+      :tags_list)
+      include Aws::Structure
+    end
 
-      # Specifies the settings for each trail.
-      # @note When making an API call, pass CreateTrailRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #         s3_bucket_name: "String", # required
-      #         s3_key_prefix: "String",
-      #         sns_topic_name: "String",
-      #         include_global_service_events: false,
-      #         is_multi_region_trail: false,
-      #         enable_log_file_validation: false,
-      #         cloud_watch_logs_log_group_arn: "String",
-      #         cloud_watch_logs_role_arn: "String",
-      #         kms_key_id: "String",
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name of the trail. The name must meet the following
-      #   requirements:
-      #
-      #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
-      #     underscores (\_), or dashes (-)
-      #
-      #   * Start with a letter or number, and end with a letter or number
-      #
-      #   * Be between 3 and 128 characters
-      #
-      #   * Have no adjacent periods, underscores or dashes. Names like
-      #     `my-_namespace` and `my--namespace` are invalid.
-      #
-      #   * Not be in IP address format (for example, 192.168.5.4)
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_bucket_name
-      #   Specifies the name of the Amazon S3 bucket designated for publishing
-      #   log files. See [Amazon S3 Bucket Naming Requirements][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_key_prefix
-      #   Specifies the Amazon S3 key prefix that comes after the name of the
-      #   bucket you have designated for log file delivery. For more
-      #   information, see [Finding Your CloudTrail Log Files][1]. The maximum
-      #   length is 200 characters.
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_name
-      #   Specifies the name of the Amazon SNS topic defined for notification
-      #   of log file delivery. The maximum length is 256 characters.
-      #   @return [String]
-      #
-      # @!attribute [rw] include_global_service_events
-      #   Specifies whether the trail is publishing events from global
-      #   services such as IAM to the log files.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] is_multi_region_trail
-      #   Specifies whether the trail is created in the current region or in
-      #   all regions. The default is false.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] enable_log_file_validation
-      #   Specifies whether log file integrity validation is enabled. The
-      #   default is false.
-      #
-      #   <note markdown="1"> When you disable log file integrity validation, the chain of digest
-      #   files is broken after one hour. CloudTrail will not create digest
-      #   files for log files that were delivered during a period in which log
-      #   file integrity validation was disabled. For example, if you enable
-      #   log file integrity validation at noon on January 1, disable it at
-      #   noon on January 2, and re-enable it at noon on January 10, digest
-      #   files will not be created for the log files delivered from noon on
-      #   January 2 to noon on January 10. The same applies whenever you stop
-      #   CloudTrail logging or delete a trail.
-      #
-      #    </note>
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] cloud_watch_logs_log_group_arn
-      #   Specifies a log group name using an Amazon Resource Name (ARN), a
-      #   unique identifier that represents the log group to which CloudTrail
-      #   logs will be delivered. Not required unless you specify
-      #   CloudWatchLogsRoleArn.
-      #   @return [String]
-      #
-      # @!attribute [rw] cloud_watch_logs_role_arn
-      #   Specifies the role for the CloudWatch Logs endpoint to assume to
-      #   write to a user's log group.
-      #   @return [String]
-      #
-      # @!attribute [rw] kms_key_id
-      #   Specifies the KMS key ID to use to encrypt the logs delivered by
-      #   CloudTrail. The value can be a an alias name prefixed by "alias/",
-      #   a fully specified ARN to an alias, a fully specified ARN to a key,
-      #   or a globally unique identifier.
-      #
-      #   Examples:
-      #
-      #   * alias/MyAliasName
-      #
-      #   * arn:aws:kms:us-east-1:123456789012:alias/MyAliasName
-      #
-      #   * arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
-      #
-      #   * 12345678-1234-1234-1234-123456789012
-      #   @return [String]
-      class CreateTrailRequest < Struct.new(
-        :name,
-        :s3_bucket_name,
-        :s3_key_prefix,
-        :sns_topic_name,
-        :include_global_service_events,
-        :is_multi_region_trail,
-        :enable_log_file_validation,
-        :cloud_watch_logs_log_group_arn,
-        :cloud_watch_logs_role_arn,
-        :kms_key_id)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    class AddTagsResponse < Aws::EmptyStructure; end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] name
-      #   Specifies the name of the trail.
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_bucket_name
-      #   Specifies the name of the Amazon S3 bucket designated for publishing
-      #   log files.
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_key_prefix
-      #   Specifies the Amazon S3 key prefix that comes after the name of the
-      #   bucket you have designated for log file delivery. For more
-      #   information, see [Finding Your CloudTrail Log Files][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_name
-      #   This field is deprecated. Use SnsTopicARN.
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_arn
-      #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
-      #   send notifications when log files are delivered. The format of a
-      #   topic ARN is:
-      #
-      #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
-      #   @return [String]
-      #
-      # @!attribute [rw] include_global_service_events
-      #   Specifies whether the trail is publishing events from global
-      #   services such as IAM to the log files.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] is_multi_region_trail
-      #   Specifies whether the trail exists in one region or in all regions.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] trail_arn
-      #   Specifies the ARN of the trail that was created. The format of a
-      #   trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] log_file_validation_enabled
-      #   Specifies whether log file integrity validation is enabled.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] cloud_watch_logs_log_group_arn
-      #   Specifies the Amazon Resource Name (ARN) of the log group to which
-      #   CloudTrail logs will be delivered.
-      #   @return [String]
-      #
-      # @!attribute [rw] cloud_watch_logs_role_arn
-      #   Specifies the role for the CloudWatch Logs endpoint to assume to
-      #   write to a user's log group.
-      #   @return [String]
-      #
-      # @!attribute [rw] kms_key_id
-      #   Specifies the KMS key ID that encrypts the logs delivered by
-      #   CloudTrail. The value is a fully specified ARN to a KMS key in the
-      #   format:
-      #
-      #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
-      #   @return [String]
-      class CreateTrailResponse < Struct.new(
-        :name,
-        :s3_bucket_name,
-        :s3_key_prefix,
-        :sns_topic_name,
-        :sns_topic_arn,
-        :include_global_service_events,
-        :is_multi_region_trail,
-        :trail_arn,
-        :log_file_validation_enabled,
-        :cloud_watch_logs_log_group_arn,
-        :cloud_watch_logs_role_arn,
-        :kms_key_id)
-        include Aws::Structure
-      end
+    # Specifies the settings for each trail.
+    #
+    # @note When making an API call, you may pass CreateTrailRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #         s3_bucket_name: "String", # required
+    #         s3_key_prefix: "String",
+    #         sns_topic_name: "String",
+    #         include_global_service_events: false,
+    #         is_multi_region_trail: false,
+    #         enable_log_file_validation: false,
+    #         cloud_watch_logs_log_group_arn: "String",
+    #         cloud_watch_logs_role_arn: "String",
+    #         kms_key_id: "String",
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name of the trail. The name must meet the following
+    #   requirements:
+    #
+    #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
+    #     underscores (\_), or dashes (-)
+    #
+    #   * Start with a letter or number, and end with a letter or number
+    #
+    #   * Be between 3 and 128 characters
+    #
+    #   * Have no adjacent periods, underscores or dashes. Names like
+    #     `my-_namespace` and `my--namespace` are invalid.
+    #
+    #   * Not be in IP address format (for example, 192.168.5.4)
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_name
+    #   Specifies the name of the Amazon S3 bucket designated for publishing
+    #   log files. See [Amazon S3 Bucket Naming Requirements][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_key_prefix
+    #   Specifies the Amazon S3 key prefix that comes after the name of the
+    #   bucket you have designated for log file delivery. For more
+    #   information, see [Finding Your CloudTrail Log Files][1]. The maximum
+    #   length is 200 characters.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_name
+    #   Specifies the name of the Amazon SNS topic defined for notification
+    #   of log file delivery. The maximum length is 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] include_global_service_events
+    #   Specifies whether the trail is publishing events from global
+    #   services such as IAM to the log files.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] is_multi_region_trail
+    #   Specifies whether the trail is created in the current region or in
+    #   all regions. The default is false.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] enable_log_file_validation
+    #   Specifies whether log file integrity validation is enabled. The
+    #   default is false.
+    #
+    #   <note markdown="1"> When you disable log file integrity validation, the chain of digest
+    #   files is broken after one hour. CloudTrail will not create digest
+    #   files for log files that were delivered during a period in which log
+    #   file integrity validation was disabled. For example, if you enable
+    #   log file integrity validation at noon on January 1, disable it at
+    #   noon on January 2, and re-enable it at noon on January 10, digest
+    #   files will not be created for the log files delivered from noon on
+    #   January 2 to noon on January 10. The same applies whenever you stop
+    #   CloudTrail logging or delete a trail.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] cloud_watch_logs_log_group_arn
+    #   Specifies a log group name using an Amazon Resource Name (ARN), a
+    #   unique identifier that represents the log group to which CloudTrail
+    #   logs will be delivered. Not required unless you specify
+    #   CloudWatchLogsRoleArn.
+    #   @return [String]
+    #
+    # @!attribute [rw] cloud_watch_logs_role_arn
+    #   Specifies the role for the CloudWatch Logs endpoint to assume to
+    #   write to a user's log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   Specifies the KMS key ID to use to encrypt the logs delivered by
+    #   CloudTrail. The value can be a an alias name prefixed by "alias/",
+    #   a fully specified ARN to an alias, a fully specified ARN to a key,
+    #   or a globally unique identifier.
+    #
+    #   Examples:
+    #
+    #   * alias/MyAliasName
+    #
+    #   * arn:aws:kms:us-east-1:123456789012:alias/MyAliasName
+    #
+    #   * arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
+    #
+    #   * 12345678-1234-1234-1234-123456789012
+    #   @return [String]
+    #
+    class CreateTrailRequest < Struct.new(
+      :name,
+      :s3_bucket_name,
+      :s3_key_prefix,
+      :sns_topic_name,
+      :include_global_service_events,
+      :is_multi_region_trail,
+      :enable_log_file_validation,
+      :cloud_watch_logs_log_group_arn,
+      :cloud_watch_logs_role_arn,
+      :kms_key_id)
+      include Aws::Structure
+    end
 
-      # The Amazon S3 objects that you specify in your event selectors for
-      # your trail to log data events. Data events are object level API
-      # operations that access S3 objects, such as `GetObject`,
-      # `DeleteObject`, and `PutObject`. You can specify up to 50 S3 buckets
-      # and object prefixes for an event selector.
-      #
-      # Example
-      #
-      # 1.  You create an event selector for a trail and specify an S3 bucket
-      #     and an empty prefix, such as `arn:aws:s3:::bucket-1/`.
-      #
-      # 2.  You upload an image file to `bucket-1`.
-      #
-      # 3.  The `PutObject` API operation occurs on an object in the S3 bucket
-      #     that you specified in the event selector. The trail processes and
-      #     logs the event.
-      #
-      # 4.  You upload another image file to a different S3 bucket named
-      #     `arn:aws:s3:::bucket-2`.
-      #
-      # 5.  The event occurs on an object in an S3 bucket that you didn't
-      #     specify in the event selector. The trail doesn’t log the event.
-      # @note When making an API call, pass DataResource
-      #   data as a hash:
-      #
-      #       {
-      #         type: "String",
-      #         values: ["String"],
-      #       }
-      # @!attribute [rw] type
-      #   The resource type in which you want to log data events. You can
-      #   specify only the following value: `AWS::S3::Object`.
-      #   @return [String]
-      #
-      # @!attribute [rw] values
-      #   A list of ARN-like strings for the specified S3 objects.
-      #
-      #   To log data events for all objects in an S3 bucket, specify the
-      #   bucket and an empty object prefix such as `arn:aws:s3:::bucket-1/`.
-      #   The trail logs data events for all objects in this S3 bucket.
-      #
-      #   To log data events for specific objects, specify the S3 bucket and
-      #   object prefix such as `arn:aws:s3:::bucket-1/example-images`. The
-      #   trail logs data events for objects in this S3 bucket that match the
-      #   prefix.
-      #   @return [Array<String>]
-      class DataResource < Struct.new(
-        :type,
-        :values)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] name
+    #   Specifies the name of the trail.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_name
+    #   Specifies the name of the Amazon S3 bucket designated for publishing
+    #   log files.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_key_prefix
+    #   Specifies the Amazon S3 key prefix that comes after the name of the
+    #   bucket you have designated for log file delivery. For more
+    #   information, see [Finding Your CloudTrail Log Files][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_name
+    #   This field is deprecated. Use SnsTopicARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_arn
+    #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
+    #   send notifications when log files are delivered. The format of a
+    #   topic ARN is:
+    #
+    #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
+    #   @return [String]
+    #
+    # @!attribute [rw] include_global_service_events
+    #   Specifies whether the trail is publishing events from global
+    #   services such as IAM to the log files.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] is_multi_region_trail
+    #   Specifies whether the trail exists in one region or in all regions.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] trail_arn
+    #   Specifies the ARN of the trail that was created. The format of a
+    #   trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] log_file_validation_enabled
+    #   Specifies whether log file integrity validation is enabled.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] cloud_watch_logs_log_group_arn
+    #   Specifies the Amazon Resource Name (ARN) of the log group to which
+    #   CloudTrail logs will be delivered.
+    #   @return [String]
+    #
+    # @!attribute [rw] cloud_watch_logs_role_arn
+    #   Specifies the role for the CloudWatch Logs endpoint to assume to
+    #   write to a user's log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   Specifies the KMS key ID that encrypts the logs delivered by
+    #   CloudTrail. The value is a fully specified ARN to a KMS key in the
+    #   format:
+    #
+    #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
+    #   @return [String]
+    #
+    class CreateTrailResponse < Struct.new(
+      :name,
+      :s3_bucket_name,
+      :s3_key_prefix,
+      :sns_topic_name,
+      :sns_topic_arn,
+      :include_global_service_events,
+      :is_multi_region_trail,
+      :trail_arn,
+      :log_file_validation_enabled,
+      :cloud_watch_logs_log_group_arn,
+      :cloud_watch_logs_role_arn,
+      :kms_key_id)
+      include Aws::Structure
+    end
 
-      # The request that specifies the name of a trail to delete.
-      # @note When making an API call, pass DeleteTrailRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name or the CloudTrail ARN of the trail to be deleted.
-      #   The format of a trail ARN is:
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      class DeleteTrailRequest < Struct.new(
-        :name)
-        include Aws::Structure
-      end
+    # The Amazon S3 objects that you specify in your event selectors for
+    # your trail to log data events. Data events are object level API
+    # operations that access S3 objects, such as `GetObject`,
+    # `DeleteObject`, and `PutObject`. You can specify up to 50 S3 buckets
+    # and object prefixes for an event selector.
+    #
+    # Example
+    #
+    # 1.  You create an event selector for a trail and specify an S3 bucket
+    #     and an empty prefix, such as `arn:aws:s3:::bucket-1/`.
+    #
+    # 2.  You upload an image file to `bucket-1`.
+    #
+    # 3.  The `PutObject` API operation occurs on an object in the S3 bucket
+    #     that you specified in the event selector. The trail processes and
+    #     logs the event.
+    #
+    # 4.  You upload another image file to a different S3 bucket named
+    #     `arn:aws:s3:::bucket-2`.
+    #
+    # 5.  The event occurs on an object in an S3 bucket that you didn't
+    #     specify in the event selector. The trail doesn’t log the event.
+    #
+    # @note When making an API call, you may pass DataResource
+    #   data as a hash:
+    #
+    #       {
+    #         type: "String",
+    #         values: ["String"],
+    #       }
+    #
+    # @!attribute [rw] type
+    #   The resource type in which you want to log data events. You can
+    #   specify only the following value: `AWS::S3::Object`.
+    #   @return [String]
+    #
+    # @!attribute [rw] values
+    #   A list of ARN-like strings for the specified S3 objects.
+    #
+    #   To log data events for all objects in an S3 bucket, specify the
+    #   bucket and an empty object prefix such as `arn:aws:s3:::bucket-1/`.
+    #   The trail logs data events for all objects in this S3 bucket.
+    #
+    #   To log data events for specific objects, specify the S3 bucket and
+    #   object prefix such as `arn:aws:s3:::bucket-1/example-images`. The
+    #   trail logs data events for objects in this S3 bucket that match the
+    #   prefix.
+    #   @return [Array<String>]
+    #
+    class DataResource < Struct.new(
+      :type,
+      :values)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      class DeleteTrailResponse < Aws::EmptyStructure; end
+    # The request that specifies the name of a trail to delete.
+    #
+    # @note When making an API call, you may pass DeleteTrailRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name or the CloudTrail ARN of the trail to be deleted.
+    #   The format of a trail ARN is:
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    class DeleteTrailRequest < Struct.new(
+      :name)
+      include Aws::Structure
+    end
 
-      # Returns information about the trail.
-      # @note When making an API call, pass DescribeTrailsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         trail_name_list: ["String"],
-      #         include_shadow_trails: false,
-      #       }
-      # @!attribute [rw] trail_name_list
-      #   Specifies a list of trail names, trail ARNs, or both, of the trails
-      #   to describe. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #
-      #   If an empty list is specified, information for the trail in the
-      #   current region is returned.
-      #
-      #   * If an empty list is specified and `IncludeShadowTrails` is false,
-      #     then information for all trails in the current region is returned.
-      #
-      #   * If an empty list is specified and IncludeShadowTrails is null or
-      #     true, then information for all trails in the current region and
-      #     any associated shadow trails in other regions is returned.
-      #
-      #   <note markdown="1"> If one or more trail names are specified, information is returned
-      #   only if the names match the names of trails belonging only to the
-      #   current region. To return information about a trail in another
-      #   region, you must specify its trail ARN.
-      #
-      #    </note>
-      #   @return [Array<String>]
-      #
-      # @!attribute [rw] include_shadow_trails
-      #   Specifies whether to include shadow trails in the response. A shadow
-      #   trail is the replication in a region of a trail that was created in
-      #   a different region. The default is true.
-      #   @return [Boolean]
-      class DescribeTrailsRequest < Struct.new(
-        :trail_name_list,
-        :include_shadow_trails)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    class DeleteTrailResponse < Aws::EmptyStructure; end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] trail_list
-      #   The list of trail objects.
-      #   @return [Array<Types::Trail>]
-      class DescribeTrailsResponse < Struct.new(
-        :trail_list)
-        include Aws::Structure
-      end
+    # Returns information about the trail.
+    #
+    # @note When making an API call, you may pass DescribeTrailsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         trail_name_list: ["String"],
+    #         include_shadow_trails: false,
+    #       }
+    #
+    # @!attribute [rw] trail_name_list
+    #   Specifies a list of trail names, trail ARNs, or both, of the trails
+    #   to describe. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #
+    #   If an empty list is specified, information for the trail in the
+    #   current region is returned.
+    #
+    #   * If an empty list is specified and `IncludeShadowTrails` is false,
+    #     then information for all trails in the current region is returned.
+    #
+    #   * If an empty list is specified and IncludeShadowTrails is null or
+    #     true, then information for all trails in the current region and
+    #     any associated shadow trails in other regions is returned.
+    #
+    #   <note markdown="1"> If one or more trail names are specified, information is returned
+    #   only if the names match the names of trails belonging only to the
+    #   current region. To return information about a trail in another
+    #   region, you must specify its trail ARN.
+    #
+    #    </note>
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] include_shadow_trails
+    #   Specifies whether to include shadow trails in the response. A shadow
+    #   trail is the replication in a region of a trail that was created in
+    #   a different region. The default is true.
+    #   @return [Boolean]
+    #
+    class DescribeTrailsRequest < Struct.new(
+      :trail_name_list,
+      :include_shadow_trails)
+      include Aws::Structure
+    end
 
-      # Contains information about an event that was returned by a lookup
-      # request. The result includes a representation of a CloudTrail event.
-      # @!attribute [rw] event_id
-      #   The CloudTrail ID of the event returned.
-      #   @return [String]
-      #
-      # @!attribute [rw] event_name
-      #   The name of the event returned.
-      #   @return [String]
-      #
-      # @!attribute [rw] event_time
-      #   The date and time of the event returned.
-      #   @return [Time]
-      #
-      # @!attribute [rw] event_source
-      #   The AWS service that the request was made to.
-      #   @return [String]
-      #
-      # @!attribute [rw] username
-      #   A user name or role name of the requester that called the API in the
-      #   event returned.
-      #   @return [String]
-      #
-      # @!attribute [rw] resources
-      #   A list of resources referenced by the event returned.
-      #   @return [Array<Types::Resource>]
-      #
-      # @!attribute [rw] cloud_trail_event
-      #   A JSON string that contains a representation of the event returned.
-      #   @return [String]
-      class Event < Struct.new(
-        :event_id,
-        :event_name,
-        :event_time,
-        :event_source,
-        :username,
-        :resources,
-        :cloud_trail_event)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] trail_list
+    #   The list of trail objects.
+    #   @return [Array<Types::Trail>]
+    #
+    class DescribeTrailsResponse < Struct.new(
+      :trail_list)
+      include Aws::Structure
+    end
 
-      # Use event selectors to specify the types of events that you want your
-      # trail to log. When an event occurs in your account, CloudTrail
-      # evaluates the event selector for all trails. For each trail, if the
-      # event matches any event selector, the trail processes and logs the
-      # event. If the event doesn't match any event selector, the trail
-      # doesn't log the event.
-      #
-      # You can configure up to five event selectors for a trail.
-      # @note When making an API call, pass EventSelector
-      #   data as a hash:
-      #
-      #       {
-      #         read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
-      #         include_management_events: false,
-      #         data_resources: [
-      #           {
-      #             type: "String",
-      #             values: ["String"],
-      #           },
-      #         ],
-      #       }
-      # @!attribute [rw] read_write_type
-      #   Specify if you want your trail to log read-only events, write-only
-      #   events, or all. For example, the EC2 `GetConsoleOutput` is a
-      #   read-only API operation and `RunInstances` is a write-only API
-      #   operation.
-      #
-      #   By default, the value is `All`.
-      #   @return [String]
-      #
-      # @!attribute [rw] include_management_events
-      #   Specify if you want your event selector to include management events
-      #   for your trail.
-      #
-      #   For more information, see [Management Events][1] in the *AWS
-      #   CloudTrail User Guide*.
-      #
-      #   By default, the value is `true`.
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create-event-selectors-for-a-trail.html#event-selector-for-management-events
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] data_resources
-      #   CloudTrail supports logging only data events for S3 objects. You can
-      #   specify up to 50 S3 buckets and object prefixes for an event
-      #   selector.
-      #
-      #   For more information, see [Data Events][1] in the *AWS CloudTrail
-      #   User Guide*.
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create-event-selectors-for-a-trail.html#data-events-resources
-      #   @return [Array<Types::DataResource>]
-      class EventSelector < Struct.new(
-        :read_write_type,
-        :include_management_events,
-        :data_resources)
-        include Aws::Structure
-      end
+    # Contains information about an event that was returned by a lookup
+    # request. The result includes a representation of a CloudTrail event.
+    #
+    # @!attribute [rw] event_id
+    #   The CloudTrail ID of the event returned.
+    #   @return [String]
+    #
+    # @!attribute [rw] event_name
+    #   The name of the event returned.
+    #   @return [String]
+    #
+    # @!attribute [rw] event_time
+    #   The date and time of the event returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] event_source
+    #   The AWS service that the request was made to.
+    #   @return [String]
+    #
+    # @!attribute [rw] username
+    #   A user name or role name of the requester that called the API in the
+    #   event returned.
+    #   @return [String]
+    #
+    # @!attribute [rw] resources
+    #   A list of resources referenced by the event returned.
+    #   @return [Array<Types::Resource>]
+    #
+    # @!attribute [rw] cloud_trail_event
+    #   A JSON string that contains a representation of the event returned.
+    #   @return [String]
+    #
+    class Event < Struct.new(
+      :event_id,
+      :event_name,
+      :event_time,
+      :event_source,
+      :username,
+      :resources,
+      :cloud_trail_event)
+      include Aws::Structure
+    end
 
-      # @note When making an API call, pass GetEventSelectorsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         trail_name: "String",
-      #       }
-      # @!attribute [rw] trail_name
-      #   Specifies the name of the trail or trail ARN. If you specify a trail
-      #   name, the string must meet the following requirements:
-      #
-      #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
-      #     underscores (\_), or dashes (-)
-      #
-      #   * Start with a letter or number, and end with a letter or number
-      #
-      #   * Be between 3 and 128 characters
-      #
-      #   * Have no adjacent periods, underscores or dashes. Names like
-      #     `my-_namespace` and `my--namespace` are invalid.
-      #
-      #   * Not be in IP address format (for example, 192.168.5.4)
-      #
-      #   If you specify a trail ARN, it must be in the format:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      class GetEventSelectorsRequest < Struct.new(
-        :trail_name)
-        include Aws::Structure
-      end
+    # Use event selectors to specify the types of events that you want your
+    # trail to log. When an event occurs in your account, CloudTrail
+    # evaluates the event selector for all trails. For each trail, if the
+    # event matches any event selector, the trail processes and logs the
+    # event. If the event doesn't match any event selector, the trail
+    # doesn't log the event.
+    #
+    # You can configure up to five event selectors for a trail.
+    #
+    # @note When making an API call, you may pass EventSelector
+    #   data as a hash:
+    #
+    #       {
+    #         read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
+    #         include_management_events: false,
+    #         data_resources: [
+    #           {
+    #             type: "String",
+    #             values: ["String"],
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] read_write_type
+    #   Specify if you want your trail to log read-only events, write-only
+    #   events, or all. For example, the EC2 `GetConsoleOutput` is a
+    #   read-only API operation and `RunInstances` is a write-only API
+    #   operation.
+    #
+    #   By default, the value is `All`.
+    #   @return [String]
+    #
+    # @!attribute [rw] include_management_events
+    #   Specify if you want your event selector to include management events
+    #   for your trail.
+    #
+    #   For more information, see [Management Events][1] in the *AWS
+    #   CloudTrail User Guide*.
+    #
+    #   By default, the value is `true`.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create-event-selectors-for-a-trail.html#event-selector-for-management-events
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] data_resources
+    #   CloudTrail supports logging only data events for S3 objects. You can
+    #   specify up to 50 S3 buckets and object prefixes for an event
+    #   selector.
+    #
+    #   For more information, see [Data Events][1] in the *AWS CloudTrail
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create-event-selectors-for-a-trail.html#data-events-resources
+    #   @return [Array<Types::DataResource>]
+    #
+    class EventSelector < Struct.new(
+      :read_write_type,
+      :include_management_events,
+      :data_resources)
+      include Aws::Structure
+    end
 
-      # @!attribute [rw] trail_arn
-      #   The specified trail ARN that has the event selectors.
-      #   @return [String]
-      #
-      # @!attribute [rw] event_selectors
-      #   The event selectors that are configured for the trail.
-      #   @return [Array<Types::EventSelector>]
-      class GetEventSelectorsResponse < Struct.new(
-        :trail_arn,
-        :event_selectors)
-        include Aws::Structure
-      end
+    # @note When making an API call, you may pass GetEventSelectorsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         trail_name: "String",
+    #       }
+    #
+    # @!attribute [rw] trail_name
+    #   Specifies the name of the trail or trail ARN. If you specify a trail
+    #   name, the string must meet the following requirements:
+    #
+    #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
+    #     underscores (\_), or dashes (-)
+    #
+    #   * Start with a letter or number, and end with a letter or number
+    #
+    #   * Be between 3 and 128 characters
+    #
+    #   * Have no adjacent periods, underscores or dashes. Names like
+    #     `my-_namespace` and `my--namespace` are invalid.
+    #
+    #   * Not be in IP address format (for example, 192.168.5.4)
+    #
+    #   If you specify a trail ARN, it must be in the format:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    class GetEventSelectorsRequest < Struct.new(
+      :trail_name)
+      include Aws::Structure
+    end
 
-      # The name of a trail about which you want the current status.
-      # @note When making an API call, pass GetTrailStatusRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name or the CloudTrail ARN of the trail for which you
-      #   are requesting status. To get the status of a shadow trail (a
-      #   replication of the trail in another region), you must specify its
-      #   ARN. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      class GetTrailStatusRequest < Struct.new(
-        :name)
-        include Aws::Structure
-      end
+    # @!attribute [rw] trail_arn
+    #   The specified trail ARN that has the event selectors.
+    #   @return [String]
+    #
+    # @!attribute [rw] event_selectors
+    #   The event selectors that are configured for the trail.
+    #   @return [Array<Types::EventSelector>]
+    #
+    class GetEventSelectorsResponse < Struct.new(
+      :trail_arn,
+      :event_selectors)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] is_logging
-      #   Whether the CloudTrail is currently logging AWS API calls.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] latest_delivery_error
-      #   Displays any Amazon S3 error that CloudTrail encountered when
-      #   attempting to deliver log files to the designated bucket. For more
-      #   information see the topic [Error Responses][1] in the Amazon S3 API
-      #   Reference.
-      #
-      #   <note markdown="1"> This error occurs only when there is a problem with the destination
-      #   S3 bucket and will not occur for timeouts. To resolve the issue,
-      #   create a new bucket and call `UpdateTrail` to specify the new
-      #   bucket, or fix the existing objects so that CloudTrail can again
-      #   write to the bucket.
-      #
-      #    </note>
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_notification_error
-      #   Displays any Amazon SNS error that CloudTrail encountered when
-      #   attempting to send a notification. For more information about Amazon
-      #   SNS errors, see the [Amazon SNS Developer Guide][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/sns/latest/dg/welcome.html
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_delivery_time
-      #   Specifies the date and time that CloudTrail last delivered log files
-      #   to an account's Amazon S3 bucket.
-      #   @return [Time]
-      #
-      # @!attribute [rw] latest_notification_time
-      #   Specifies the date and time of the most recent Amazon SNS
-      #   notification that CloudTrail has written a new log file to an
-      #   account's Amazon S3 bucket.
-      #   @return [Time]
-      #
-      # @!attribute [rw] start_logging_time
-      #   Specifies the most recent date and time when CloudTrail started
-      #   recording API calls for an AWS account.
-      #   @return [Time]
-      #
-      # @!attribute [rw] stop_logging_time
-      #   Specifies the most recent date and time when CloudTrail stopped
-      #   recording API calls for an AWS account.
-      #   @return [Time]
-      #
-      # @!attribute [rw] latest_cloud_watch_logs_delivery_error
-      #   Displays any CloudWatch Logs error that CloudTrail encountered when
-      #   attempting to deliver logs to CloudWatch Logs.
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_cloud_watch_logs_delivery_time
-      #   Displays the most recent date and time when CloudTrail delivered
-      #   logs to CloudWatch Logs.
-      #   @return [Time]
-      #
-      # @!attribute [rw] latest_digest_delivery_time
-      #   Specifies the date and time that CloudTrail last delivered a digest
-      #   file to an account's Amazon S3 bucket.
-      #   @return [Time]
-      #
-      # @!attribute [rw] latest_digest_delivery_error
-      #   Displays any Amazon S3 error that CloudTrail encountered when
-      #   attempting to deliver a digest file to the designated bucket. For
-      #   more information see the topic [Error Responses][1] in the Amazon S3
-      #   API Reference.
-      #
-      #   <note markdown="1"> This error occurs only when there is a problem with the destination
-      #   S3 bucket and will not occur for timeouts. To resolve the issue,
-      #   create a new bucket and call `UpdateTrail` to specify the new
-      #   bucket, or fix the existing objects so that CloudTrail can again
-      #   write to the bucket.
-      #
-      #    </note>
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_delivery_attempt_time
-      #   This field is deprecated.
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_notification_attempt_time
-      #   This field is deprecated.
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_notification_attempt_succeeded
-      #   This field is deprecated.
-      #   @return [String]
-      #
-      # @!attribute [rw] latest_delivery_attempt_succeeded
-      #   This field is deprecated.
-      #   @return [String]
-      #
-      # @!attribute [rw] time_logging_started
-      #   This field is deprecated.
-      #   @return [String]
-      #
-      # @!attribute [rw] time_logging_stopped
-      #   This field is deprecated.
-      #   @return [String]
-      class GetTrailStatusResponse < Struct.new(
-        :is_logging,
-        :latest_delivery_error,
-        :latest_notification_error,
-        :latest_delivery_time,
-        :latest_notification_time,
-        :start_logging_time,
-        :stop_logging_time,
-        :latest_cloud_watch_logs_delivery_error,
-        :latest_cloud_watch_logs_delivery_time,
-        :latest_digest_delivery_time,
-        :latest_digest_delivery_error,
-        :latest_delivery_attempt_time,
-        :latest_notification_attempt_time,
-        :latest_notification_attempt_succeeded,
-        :latest_delivery_attempt_succeeded,
-        :time_logging_started,
-        :time_logging_stopped)
-        include Aws::Structure
-      end
+    # The name of a trail about which you want the current status.
+    #
+    # @note When making an API call, you may pass GetTrailStatusRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name or the CloudTrail ARN of the trail for which you
+    #   are requesting status. To get the status of a shadow trail (a
+    #   replication of the trail in another region), you must specify its
+    #   ARN. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    class GetTrailStatusRequest < Struct.new(
+      :name)
+      include Aws::Structure
+    end
 
-      # Requests the public keys for a specified time range.
-      # @note When making an API call, pass ListPublicKeysRequest
-      #   data as a hash:
-      #
-      #       {
-      #         start_time: Time.now,
-      #         end_time: Time.now,
-      #         next_token: "String",
-      #       }
-      # @!attribute [rw] start_time
-      #   Optionally specifies, in UTC, the start of the time range to look up
-      #   public keys for CloudTrail digest files. If not specified, the
-      #   current time is used, and the current public key is returned.
-      #   @return [Time]
-      #
-      # @!attribute [rw] end_time
-      #   Optionally specifies, in UTC, the end of the time range to look up
-      #   public keys for CloudTrail digest files. If not specified, the
-      #   current time is used.
-      #   @return [Time]
-      #
-      # @!attribute [rw] next_token
-      #   Reserved for future use.
-      #   @return [String]
-      class ListPublicKeysRequest < Struct.new(
-        :start_time,
-        :end_time,
-        :next_token)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] is_logging
+    #   Whether the CloudTrail is currently logging AWS API calls.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] latest_delivery_error
+    #   Displays any Amazon S3 error that CloudTrail encountered when
+    #   attempting to deliver log files to the designated bucket. For more
+    #   information see the topic [Error Responses][1] in the Amazon S3 API
+    #   Reference.
+    #
+    #   <note markdown="1"> This error occurs only when there is a problem with the destination
+    #   S3 bucket and will not occur for timeouts. To resolve the issue,
+    #   create a new bucket and call `UpdateTrail` to specify the new
+    #   bucket, or fix the existing objects so that CloudTrail can again
+    #   write to the bucket.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_notification_error
+    #   Displays any Amazon SNS error that CloudTrail encountered when
+    #   attempting to send a notification. For more information about Amazon
+    #   SNS errors, see the [Amazon SNS Developer Guide][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/sns/latest/dg/welcome.html
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_delivery_time
+    #   Specifies the date and time that CloudTrail last delivered log files
+    #   to an account's Amazon S3 bucket.
+    #   @return [Time]
+    #
+    # @!attribute [rw] latest_notification_time
+    #   Specifies the date and time of the most recent Amazon SNS
+    #   notification that CloudTrail has written a new log file to an
+    #   account's Amazon S3 bucket.
+    #   @return [Time]
+    #
+    # @!attribute [rw] start_logging_time
+    #   Specifies the most recent date and time when CloudTrail started
+    #   recording API calls for an AWS account.
+    #   @return [Time]
+    #
+    # @!attribute [rw] stop_logging_time
+    #   Specifies the most recent date and time when CloudTrail stopped
+    #   recording API calls for an AWS account.
+    #   @return [Time]
+    #
+    # @!attribute [rw] latest_cloud_watch_logs_delivery_error
+    #   Displays any CloudWatch Logs error that CloudTrail encountered when
+    #   attempting to deliver logs to CloudWatch Logs.
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_cloud_watch_logs_delivery_time
+    #   Displays the most recent date and time when CloudTrail delivered
+    #   logs to CloudWatch Logs.
+    #   @return [Time]
+    #
+    # @!attribute [rw] latest_digest_delivery_time
+    #   Specifies the date and time that CloudTrail last delivered a digest
+    #   file to an account's Amazon S3 bucket.
+    #   @return [Time]
+    #
+    # @!attribute [rw] latest_digest_delivery_error
+    #   Displays any Amazon S3 error that CloudTrail encountered when
+    #   attempting to deliver a digest file to the designated bucket. For
+    #   more information see the topic [Error Responses][1] in the Amazon S3
+    #   API Reference.
+    #
+    #   <note markdown="1"> This error occurs only when there is a problem with the destination
+    #   S3 bucket and will not occur for timeouts. To resolve the issue,
+    #   create a new bucket and call `UpdateTrail` to specify the new
+    #   bucket, or fix the existing objects so that CloudTrail can again
+    #   write to the bucket.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_delivery_attempt_time
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_notification_attempt_time
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_notification_attempt_succeeded
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    # @!attribute [rw] latest_delivery_attempt_succeeded
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    # @!attribute [rw] time_logging_started
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    # @!attribute [rw] time_logging_stopped
+    #   This field is deprecated.
+    #   @return [String]
+    #
+    class GetTrailStatusResponse < Struct.new(
+      :is_logging,
+      :latest_delivery_error,
+      :latest_notification_error,
+      :latest_delivery_time,
+      :latest_notification_time,
+      :start_logging_time,
+      :stop_logging_time,
+      :latest_cloud_watch_logs_delivery_error,
+      :latest_cloud_watch_logs_delivery_time,
+      :latest_digest_delivery_time,
+      :latest_digest_delivery_error,
+      :latest_delivery_attempt_time,
+      :latest_notification_attempt_time,
+      :latest_notification_attempt_succeeded,
+      :latest_delivery_attempt_succeeded,
+      :time_logging_started,
+      :time_logging_stopped)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] public_key_list
-      #   Contains an array of PublicKey objects.
-      #
-      #   <note markdown="1"> The returned public keys may have validity time ranges that overlap.
-      #
-      #    </note>
-      #   @return [Array<Types::PublicKey>]
-      #
-      # @!attribute [rw] next_token
-      #   Reserved for future use.
-      #   @return [String]
-      class ListPublicKeysResponse < Struct.new(
-        :public_key_list,
-        :next_token)
-        include Aws::Structure
-      end
+    # Requests the public keys for a specified time range.
+    #
+    # @note When making an API call, you may pass ListPublicKeysRequest
+    #   data as a hash:
+    #
+    #       {
+    #         start_time: Time.now,
+    #         end_time: Time.now,
+    #         next_token: "String",
+    #       }
+    #
+    # @!attribute [rw] start_time
+    #   Optionally specifies, in UTC, the start of the time range to look up
+    #   public keys for CloudTrail digest files. If not specified, the
+    #   current time is used, and the current public key is returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_time
+    #   Optionally specifies, in UTC, the end of the time range to look up
+    #   public keys for CloudTrail digest files. If not specified, the
+    #   current time is used.
+    #   @return [Time]
+    #
+    # @!attribute [rw] next_token
+    #   Reserved for future use.
+    #   @return [String]
+    #
+    class ListPublicKeysRequest < Struct.new(
+      :start_time,
+      :end_time,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # Specifies a list of trail tags to return.
-      # @note When making an API call, pass ListTagsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         resource_id_list: ["String"], # required
-      #         next_token: "String",
-      #       }
-      # @!attribute [rw] resource_id_list
-      #   Specifies a list of trail ARNs whose tags will be listed. The list
-      #   has a limit of 20 ARNs. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [Array<String>]
-      #
-      # @!attribute [rw] next_token
-      #   Reserved for future use.
-      #   @return [String]
-      class ListTagsRequest < Struct.new(
-        :resource_id_list,
-        :next_token)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] public_key_list
+    #   Contains an array of PublicKey objects.
+    #
+    #   <note markdown="1"> The returned public keys may have validity time ranges that overlap.
+    #
+    #    </note>
+    #   @return [Array<Types::PublicKey>]
+    #
+    # @!attribute [rw] next_token
+    #   Reserved for future use.
+    #   @return [String]
+    #
+    class ListPublicKeysResponse < Struct.new(
+      :public_key_list,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] resource_tag_list
-      #   A list of resource tags.
-      #   @return [Array<Types::ResourceTag>]
-      #
-      # @!attribute [rw] next_token
-      #   Reserved for future use.
-      #   @return [String]
-      class ListTagsResponse < Struct.new(
-        :resource_tag_list,
-        :next_token)
-        include Aws::Structure
-      end
+    # Specifies a list of trail tags to return.
+    #
+    # @note When making an API call, you may pass ListTagsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_id_list: ["String"], # required
+    #         next_token: "String",
+    #       }
+    #
+    # @!attribute [rw] resource_id_list
+    #   Specifies a list of trail ARNs whose tags will be listed. The list
+    #   has a limit of 20 ARNs. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_token
+    #   Reserved for future use.
+    #   @return [String]
+    #
+    class ListTagsRequest < Struct.new(
+      :resource_id_list,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # Specifies an attribute and value that filter the events returned.
-      # @note When making an API call, pass LookupAttribute
-      #   data as a hash:
-      #
-      #       {
-      #         attribute_key: "EventId", # required, accepts EventId, EventName, Username, ResourceType, ResourceName, EventSource
-      #         attribute_value: "String", # required
-      #       }
-      # @!attribute [rw] attribute_key
-      #   Specifies an attribute on which to filter the events returned.
-      #   @return [String]
-      #
-      # @!attribute [rw] attribute_value
-      #   Specifies a value for the specified AttributeKey.
-      #   @return [String]
-      class LookupAttribute < Struct.new(
-        :attribute_key,
-        :attribute_value)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] resource_tag_list
+    #   A list of resource tags.
+    #   @return [Array<Types::ResourceTag>]
+    #
+    # @!attribute [rw] next_token
+    #   Reserved for future use.
+    #   @return [String]
+    #
+    class ListTagsResponse < Struct.new(
+      :resource_tag_list,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # Contains a request for LookupEvents.
-      # @note When making an API call, pass LookupEventsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         lookup_attributes: [
-      #           {
-      #             attribute_key: "EventId", # required, accepts EventId, EventName, Username, ResourceType, ResourceName, EventSource
-      #             attribute_value: "String", # required
-      #           },
-      #         ],
-      #         start_time: Time.now,
-      #         end_time: Time.now,
-      #         max_results: 1,
-      #         next_token: "NextToken",
-      #       }
-      # @!attribute [rw] lookup_attributes
-      #   Contains a list of lookup attributes. Currently the list can contain
-      #   only one item.
-      #   @return [Array<Types::LookupAttribute>]
-      #
-      # @!attribute [rw] start_time
-      #   Specifies that only events that occur after or at the specified time
-      #   are returned. If the specified start time is after the specified end
-      #   time, an error is returned.
-      #   @return [Time]
-      #
-      # @!attribute [rw] end_time
-      #   Specifies that only events that occur before or at the specified
-      #   time are returned. If the specified end time is before the specified
-      #   start time, an error is returned.
-      #   @return [Time]
-      #
-      # @!attribute [rw] max_results
-      #   The number of events to return. Possible values are 1 through 50.
-      #   The default is 10.
-      #   @return [Integer]
-      #
-      # @!attribute [rw] next_token
-      #   The token to use to get the next page of results after a previous
-      #   API call. This token must be passed in with the same parameters that
-      #   were specified in the the original call. For example, if the
-      #   original call specified an AttributeKey of 'Username' with a value
-      #   of 'root', the call with NextToken should include those same
-      #   parameters.
-      #   @return [String]
-      class LookupEventsRequest < Struct.new(
-        :lookup_attributes,
-        :start_time,
-        :end_time,
-        :max_results,
-        :next_token)
-        include Aws::Structure
-      end
+    # Specifies an attribute and value that filter the events returned.
+    #
+    # @note When making an API call, you may pass LookupAttribute
+    #   data as a hash:
+    #
+    #       {
+    #         attribute_key: "EventId", # required, accepts EventId, EventName, Username, ResourceType, ResourceName, EventSource
+    #         attribute_value: "String", # required
+    #       }
+    #
+    # @!attribute [rw] attribute_key
+    #   Specifies an attribute on which to filter the events returned.
+    #   @return [String]
+    #
+    # @!attribute [rw] attribute_value
+    #   Specifies a value for the specified AttributeKey.
+    #   @return [String]
+    #
+    class LookupAttribute < Struct.new(
+      :attribute_key,
+      :attribute_value)
+      include Aws::Structure
+    end
 
-      # Contains a response to a LookupEvents action.
-      # @!attribute [rw] events
-      #   A list of events returned based on the lookup attributes specified
-      #   and the CloudTrail event. The events list is sorted by time. The
-      #   most recent event is listed first.
-      #   @return [Array<Types::Event>]
-      #
-      # @!attribute [rw] next_token
-      #   The token to use to get the next page of results after a previous
-      #   API call. If the token does not appear, there are no more results to
-      #   return. The token must be passed in with the same parameters as the
-      #   previous call. For example, if the original call specified an
-      #   AttributeKey of 'Username' with a value of 'root', the call with
-      #   NextToken should include those same parameters.
-      #   @return [String]
-      class LookupEventsResponse < Struct.new(
-        :events,
-        :next_token)
-        include Aws::Structure
-      end
+    # Contains a request for LookupEvents.
+    #
+    # @note When making an API call, you may pass LookupEventsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         lookup_attributes: [
+    #           {
+    #             attribute_key: "EventId", # required, accepts EventId, EventName, Username, ResourceType, ResourceName, EventSource
+    #             attribute_value: "String", # required
+    #           },
+    #         ],
+    #         start_time: Time.now,
+    #         end_time: Time.now,
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #       }
+    #
+    # @!attribute [rw] lookup_attributes
+    #   Contains a list of lookup attributes. Currently the list can contain
+    #   only one item.
+    #   @return [Array<Types::LookupAttribute>]
+    #
+    # @!attribute [rw] start_time
+    #   Specifies that only events that occur after or at the specified time
+    #   are returned. If the specified start time is after the specified end
+    #   time, an error is returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_time
+    #   Specifies that only events that occur before or at the specified
+    #   time are returned. If the specified end time is before the specified
+    #   start time, an error is returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] max_results
+    #   The number of events to return. Possible values are 1 through 50.
+    #   The default is 10.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to get the next page of results after a previous
+    #   API call. This token must be passed in with the same parameters that
+    #   were specified in the the original call. For example, if the
+    #   original call specified an AttributeKey of 'Username' with a value
+    #   of 'root', the call with NextToken should include those same
+    #   parameters.
+    #   @return [String]
+    #
+    class LookupEventsRequest < Struct.new(
+      :lookup_attributes,
+      :start_time,
+      :end_time,
+      :max_results,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # Contains information about a returned public key.
-      # @!attribute [rw] value
-      #   The DER encoded public key value in PKCS#1 format.
-      #   @return [String]
-      #
-      # @!attribute [rw] validity_start_time
-      #   The starting time of validity of the public key.
-      #   @return [Time]
-      #
-      # @!attribute [rw] validity_end_time
-      #   The ending time of validity of the public key.
-      #   @return [Time]
-      #
-      # @!attribute [rw] fingerprint
-      #   The fingerprint of the public key.
-      #   @return [String]
-      class PublicKey < Struct.new(
-        :value,
-        :validity_start_time,
-        :validity_end_time,
-        :fingerprint)
-        include Aws::Structure
-      end
+    # Contains a response to a LookupEvents action.
+    #
+    # @!attribute [rw] events
+    #   A list of events returned based on the lookup attributes specified
+    #   and the CloudTrail event. The events list is sorted by time. The
+    #   most recent event is listed first.
+    #   @return [Array<Types::Event>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to get the next page of results after a previous
+    #   API call. If the token does not appear, there are no more results to
+    #   return. The token must be passed in with the same parameters as the
+    #   previous call. For example, if the original call specified an
+    #   AttributeKey of 'Username' with a value of 'root', the call with
+    #   NextToken should include those same parameters.
+    #   @return [String]
+    #
+    class LookupEventsResponse < Struct.new(
+      :events,
+      :next_token)
+      include Aws::Structure
+    end
 
-      # @note When making an API call, pass PutEventSelectorsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         trail_name: "String",
-      #         event_selectors: [
-      #           {
-      #             read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
-      #             include_management_events: false,
-      #             data_resources: [
-      #               {
-      #                 type: "String",
-      #                 values: ["String"],
-      #               },
-      #             ],
-      #           },
-      #         ],
-      #       }
-      # @!attribute [rw] trail_name
-      #   Specifies the name of the trail or trail ARN. If you specify a trail
-      #   name, the string must meet the following requirements:
-      #
-      #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
-      #     underscores (\_), or dashes (-)
-      #
-      #   * Start with a letter or number, and end with a letter or number
-      #
-      #   * Be between 3 and 128 characters
-      #
-      #   * Have no adjacent periods, underscores or dashes. Names like
-      #     `my-_namespace` and `my--namespace` are invalid.
-      #
-      #   * Not be in IP address format (for example, 192.168.5.4)
-      #
-      #   If you specify a trail ARN, it must be in the format:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] event_selectors
-      #   Specifies the settings for your event selectors. You can configure
-      #   up to five event selectors for a trail.
-      #   @return [Array<Types::EventSelector>]
-      class PutEventSelectorsRequest < Struct.new(
-        :trail_name,
-        :event_selectors)
-        include Aws::Structure
-      end
+    # Contains information about a returned public key.
+    #
+    # @!attribute [rw] value
+    #   The DER encoded public key value in PKCS#1 format.
+    #   @return [String]
+    #
+    # @!attribute [rw] validity_start_time
+    #   The starting time of validity of the public key.
+    #   @return [Time]
+    #
+    # @!attribute [rw] validity_end_time
+    #   The ending time of validity of the public key.
+    #   @return [Time]
+    #
+    # @!attribute [rw] fingerprint
+    #   The fingerprint of the public key.
+    #   @return [String]
+    #
+    class PublicKey < Struct.new(
+      :value,
+      :validity_start_time,
+      :validity_end_time,
+      :fingerprint)
+      include Aws::Structure
+    end
 
-      # @!attribute [rw] trail_arn
-      #   Specifies the ARN of the trail that was updated with event
-      #   selectors. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] event_selectors
-      #   Specifies the event selectors configured for your trail.
-      #   @return [Array<Types::EventSelector>]
-      class PutEventSelectorsResponse < Struct.new(
-        :trail_arn,
-        :event_selectors)
-        include Aws::Structure
-      end
+    # @note When making an API call, you may pass PutEventSelectorsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         trail_name: "String",
+    #         event_selectors: [
+    #           {
+    #             read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
+    #             include_management_events: false,
+    #             data_resources: [
+    #               {
+    #                 type: "String",
+    #                 values: ["String"],
+    #               },
+    #             ],
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] trail_name
+    #   Specifies the name of the trail or trail ARN. If you specify a trail
+    #   name, the string must meet the following requirements:
+    #
+    #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
+    #     underscores (\_), or dashes (-)
+    #
+    #   * Start with a letter or number, and end with a letter or number
+    #
+    #   * Be between 3 and 128 characters
+    #
+    #   * Have no adjacent periods, underscores or dashes. Names like
+    #     `my-_namespace` and `my--namespace` are invalid.
+    #
+    #   * Not be in IP address format (for example, 192.168.5.4)
+    #
+    #   If you specify a trail ARN, it must be in the format:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] event_selectors
+    #   Specifies the settings for your event selectors. You can configure
+    #   up to five event selectors for a trail.
+    #   @return [Array<Types::EventSelector>]
+    #
+    class PutEventSelectorsRequest < Struct.new(
+      :trail_name,
+      :event_selectors)
+      include Aws::Structure
+    end
 
-      # Specifies the tags to remove from a trail.
-      # @note When making an API call, pass RemoveTagsRequest
-      #   data as a hash:
-      #
-      #       {
-      #         resource_id: "String", # required
-      #         tags_list: [
-      #           {
-      #             key: "String", # required
-      #             value: "String",
-      #           },
-      #         ],
-      #       }
-      # @!attribute [rw] resource_id
-      #   Specifies the ARN of the trail from which tags should be removed.
-      #   The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] tags_list
-      #   Specifies a list of tags to be removed.
-      #   @return [Array<Types::Tag>]
-      class RemoveTagsRequest < Struct.new(
-        :resource_id,
-        :tags_list)
-        include Aws::Structure
-      end
+    # @!attribute [rw] trail_arn
+    #   Specifies the ARN of the trail that was updated with event
+    #   selectors. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] event_selectors
+    #   Specifies the event selectors configured for your trail.
+    #   @return [Array<Types::EventSelector>]
+    #
+    class PutEventSelectorsResponse < Struct.new(
+      :trail_arn,
+      :event_selectors)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      class RemoveTagsResponse < Aws::EmptyStructure; end
+    # Specifies the tags to remove from a trail.
+    #
+    # @note When making an API call, you may pass RemoveTagsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_id: "String", # required
+    #         tags_list: [
+    #           {
+    #             key: "String", # required
+    #             value: "String",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] resource_id
+    #   Specifies the ARN of the trail from which tags should be removed.
+    #   The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] tags_list
+    #   Specifies a list of tags to be removed.
+    #   @return [Array<Types::Tag>]
+    #
+    class RemoveTagsRequest < Struct.new(
+      :resource_id,
+      :tags_list)
+      include Aws::Structure
+    end
 
-      # Specifies the type and name of a resource referenced by an event.
-      # @!attribute [rw] resource_type
-      #   The type of a resource referenced by the event returned. When the
-      #   resource type cannot be determined, null is returned. Some examples
-      #   of resource types are: **Instance** for EC2, **Trail** for
-      #   CloudTrail, **DBInstance** for RDS, and **AccessKey** for IAM. For a
-      #   list of resource types supported for event lookup, see [Resource
-      #   Types Supported for Event Lookup][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/lookup_supported_resourcetypes.html
-      #   @return [String]
-      #
-      # @!attribute [rw] resource_name
-      #   The name of the resource referenced by the event returned. These are
-      #   user-created names whose values will depend on the environment. For
-      #   example, the resource name might be "auto-scaling-test-group" for
-      #   an Auto Scaling Group or "i-1234567" for an EC2 Instance.
-      #   @return [String]
-      class Resource < Struct.new(
-        :resource_type,
-        :resource_name)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    class RemoveTagsResponse < Aws::EmptyStructure; end
 
-      # A resource tag.
-      # @!attribute [rw] resource_id
-      #   Specifies the ARN of the resource.
-      #   @return [String]
-      #
-      # @!attribute [rw] tags_list
-      #   A list of tags.
-      #   @return [Array<Types::Tag>]
-      class ResourceTag < Struct.new(
-        :resource_id,
-        :tags_list)
-        include Aws::Structure
-      end
+    # Specifies the type and name of a resource referenced by an event.
+    #
+    # @!attribute [rw] resource_type
+    #   The type of a resource referenced by the event returned. When the
+    #   resource type cannot be determined, null is returned. Some examples
+    #   of resource types are: **Instance** for EC2, **Trail** for
+    #   CloudTrail, **DBInstance** for RDS, and **AccessKey** for IAM. For a
+    #   list of resource types supported for event lookup, see [Resource
+    #   Types Supported for Event Lookup][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/lookup_supported_resourcetypes.html
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_name
+    #   The name of the resource referenced by the event returned. These are
+    #   user-created names whose values will depend on the environment. For
+    #   example, the resource name might be "auto-scaling-test-group" for
+    #   an Auto Scaling Group or "i-1234567" for an EC2 Instance.
+    #   @return [String]
+    #
+    class Resource < Struct.new(
+      :resource_type,
+      :resource_name)
+      include Aws::Structure
+    end
 
-      # The request to CloudTrail to start logging AWS API calls for an
-      # account.
-      # @note When making an API call, pass StartLoggingRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name or the CloudTrail ARN of the trail for which
-      #   CloudTrail logs AWS API calls. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      class StartLoggingRequest < Struct.new(
-        :name)
-        include Aws::Structure
-      end
+    # A resource tag.
+    #
+    # @!attribute [rw] resource_id
+    #   Specifies the ARN of the resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags_list
+    #   A list of tags.
+    #   @return [Array<Types::Tag>]
+    #
+    class ResourceTag < Struct.new(
+      :resource_id,
+      :tags_list)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      class StartLoggingResponse < Aws::EmptyStructure; end
+    # The request to CloudTrail to start logging AWS API calls for an
+    # account.
+    #
+    # @note When making an API call, you may pass StartLoggingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name or the CloudTrail ARN of the trail for which
+    #   CloudTrail logs AWS API calls. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    class StartLoggingRequest < Struct.new(
+      :name)
+      include Aws::Structure
+    end
 
-      # Passes the request to CloudTrail to stop logging AWS API calls for the
-      # specified account.
-      # @note When making an API call, pass StopLoggingRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name or the CloudTrail ARN of the trail for which
-      #   CloudTrail will stop logging AWS API calls. The format of a trail
-      #   ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      class StopLoggingRequest < Struct.new(
-        :name)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    class StartLoggingResponse < Aws::EmptyStructure; end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      class StopLoggingResponse < Aws::EmptyStructure; end
+    # Passes the request to CloudTrail to stop logging AWS API calls for the
+    # specified account.
+    #
+    # @note When making an API call, you may pass StopLoggingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name or the CloudTrail ARN of the trail for which
+    #   CloudTrail will stop logging AWS API calls. The format of a trail
+    #   ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    class StopLoggingRequest < Struct.new(
+      :name)
+      include Aws::Structure
+    end
 
-      # A custom key-value pair associated with a resource such as a
-      # CloudTrail trail.
-      # @note When making an API call, pass Tag
-      #   data as a hash:
-      #
-      #       {
-      #         key: "String", # required
-      #         value: "String",
-      #       }
-      # @!attribute [rw] key
-      #   The key in a key-value pair. The key must be must be no longer than
-      #   128 Unicode characters. The key must be unique for the resource to
-      #   which it applies.
-      #   @return [String]
-      #
-      # @!attribute [rw] value
-      #   The value in a key-value pair of a tag. The value must be no longer
-      #   than 256 Unicode characters.
-      #   @return [String]
-      class Tag < Struct.new(
-        :key,
-        :value)
-        include Aws::Structure
-      end
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    class StopLoggingResponse < Aws::EmptyStructure; end
 
-      # The settings for a trail.
-      # @!attribute [rw] name
-      #   Name of the trail set by calling CreateTrail. The maximum length is
-      #   128 characters.
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_bucket_name
-      #   Name of the Amazon S3 bucket into which CloudTrail delivers your
-      #   trail files. See [Amazon S3 Bucket Naming Requirements][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_key_prefix
-      #   Specifies the Amazon S3 key prefix that comes after the name of the
-      #   bucket you have designated for log file delivery. For more
-      #   information, see [Finding Your CloudTrail Log Files][1].The maximum
-      #   length is 200 characters.
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_name
-      #   This field is deprecated. Use SnsTopicARN.
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_arn
-      #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
-      #   send notifications when log files are delivered. The format of a
-      #   topic ARN is:
-      #
-      #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
-      #   @return [String]
-      #
-      # @!attribute [rw] include_global_service_events
-      #   Set to **True** to include AWS API calls from AWS global services
-      #   such as IAM. Otherwise, **False**.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] is_multi_region_trail
-      #   Specifies whether the trail belongs only to one region or exists in
-      #   all regions.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] home_region
-      #   The region in which the trail was created.
-      #   @return [String]
-      #
-      # @!attribute [rw] trail_arn
-      #   Specifies the ARN of the trail. The format of a trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] log_file_validation_enabled
-      #   Specifies whether log file validation is enabled.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] cloud_watch_logs_log_group_arn
-      #   Specifies an Amazon Resource Name (ARN), a unique identifier that
-      #   represents the log group to which CloudTrail logs will be delivered.
-      #   @return [String]
-      #
-      # @!attribute [rw] cloud_watch_logs_role_arn
-      #   Specifies the role for the CloudWatch Logs endpoint to assume to
-      #   write to a user's log group.
-      #   @return [String]
-      #
-      # @!attribute [rw] kms_key_id
-      #   Specifies the KMS key ID that encrypts the logs delivered by
-      #   CloudTrail. The value is a fully specified ARN to a KMS key in the
-      #   format:
-      #
-      #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
-      #   @return [String]
-      #
-      # @!attribute [rw] has_custom_event_selectors
-      #   Specifies if the trail has custom event selectors.
-      #   @return [Boolean]
-      class Trail < Struct.new(
-        :name,
-        :s3_bucket_name,
-        :s3_key_prefix,
-        :sns_topic_name,
-        :sns_topic_arn,
-        :include_global_service_events,
-        :is_multi_region_trail,
-        :home_region,
-        :trail_arn,
-        :log_file_validation_enabled,
-        :cloud_watch_logs_log_group_arn,
-        :cloud_watch_logs_role_arn,
-        :kms_key_id,
-        :has_custom_event_selectors)
-        include Aws::Structure
-      end
+    # A custom key-value pair associated with a resource such as a
+    # CloudTrail trail.
+    #
+    # @note When making an API call, you may pass Tag
+    #   data as a hash:
+    #
+    #       {
+    #         key: "String", # required
+    #         value: "String",
+    #       }
+    #
+    # @!attribute [rw] key
+    #   The key in a key-value pair. The key must be must be no longer than
+    #   128 Unicode characters. The key must be unique for the resource to
+    #   which it applies.
+    #   @return [String]
+    #
+    # @!attribute [rw] value
+    #   The value in a key-value pair of a tag. The value must be no longer
+    #   than 256 Unicode characters.
+    #   @return [String]
+    #
+    class Tag < Struct.new(
+      :key,
+      :value)
+      include Aws::Structure
+    end
 
-      # Specifies settings to update for the trail.
-      # @note When making an API call, pass UpdateTrailRequest
-      #   data as a hash:
-      #
-      #       {
-      #         name: "String", # required
-      #         s3_bucket_name: "String",
-      #         s3_key_prefix: "String",
-      #         sns_topic_name: "String",
-      #         include_global_service_events: false,
-      #         is_multi_region_trail: false,
-      #         enable_log_file_validation: false,
-      #         cloud_watch_logs_log_group_arn: "String",
-      #         cloud_watch_logs_role_arn: "String",
-      #         kms_key_id: "String",
-      #       }
-      # @!attribute [rw] name
-      #   Specifies the name of the trail or trail ARN. If `Name` is a trail
-      #   name, the string must meet the following requirements:
-      #
-      #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
-      #     underscores (\_), or dashes (-)
-      #
-      #   * Start with a letter or number, and end with a letter or number
-      #
-      #   * Be between 3 and 128 characters
-      #
-      #   * Have no adjacent periods, underscores or dashes. Names like
-      #     `my-_namespace` and `my--namespace` are invalid.
-      #
-      #   * Not be in IP address format (for example, 192.168.5.4)
-      #
-      #   If `Name` is a trail ARN, it must be in the format:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_bucket_name
-      #   Specifies the name of the Amazon S3 bucket designated for publishing
-      #   log files. See [Amazon S3 Bucket Naming Requirements][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_key_prefix
-      #   Specifies the Amazon S3 key prefix that comes after the name of the
-      #   bucket you have designated for log file delivery. For more
-      #   information, see [Finding Your CloudTrail Log Files][1]. The maximum
-      #   length is 200 characters.
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_name
-      #   Specifies the name of the Amazon SNS topic defined for notification
-      #   of log file delivery. The maximum length is 256 characters.
-      #   @return [String]
-      #
-      # @!attribute [rw] include_global_service_events
-      #   Specifies whether the trail is publishing events from global
-      #   services such as IAM to the log files.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] is_multi_region_trail
-      #   Specifies whether the trail applies only to the current region or to
-      #   all regions. The default is false. If the trail exists only in the
-      #   current region and this value is set to true, shadow trails
-      #   (replications of the trail) will be created in the other regions. If
-      #   the trail exists in all regions and this value is set to false, the
-      #   trail will remain in the region where it was created, and its shadow
-      #   trails in other regions will be deleted.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] enable_log_file_validation
-      #   Specifies whether log file validation is enabled. The default is
-      #   false.
-      #
-      #   <note markdown="1"> When you disable log file integrity validation, the chain of digest
-      #   files is broken after one hour. CloudTrail will not create digest
-      #   files for log files that were delivered during a period in which log
-      #   file integrity validation was disabled. For example, if you enable
-      #   log file integrity validation at noon on January 1, disable it at
-      #   noon on January 2, and re-enable it at noon on January 10, digest
-      #   files will not be created for the log files delivered from noon on
-      #   January 2 to noon on January 10. The same applies whenever you stop
-      #   CloudTrail logging or delete a trail.
-      #
-      #    </note>
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] cloud_watch_logs_log_group_arn
-      #   Specifies a log group name using an Amazon Resource Name (ARN), a
-      #   unique identifier that represents the log group to which CloudTrail
-      #   logs will be delivered. Not required unless you specify
-      #   CloudWatchLogsRoleArn.
-      #   @return [String]
-      #
-      # @!attribute [rw] cloud_watch_logs_role_arn
-      #   Specifies the role for the CloudWatch Logs endpoint to assume to
-      #   write to a user's log group.
-      #   @return [String]
-      #
-      # @!attribute [rw] kms_key_id
-      #   Specifies the KMS key ID to use to encrypt the logs delivered by
-      #   CloudTrail. The value can be a an alias name prefixed by "alias/",
-      #   a fully specified ARN to an alias, a fully specified ARN to a key,
-      #   or a globally unique identifier.
-      #
-      #   Examples:
-      #
-      #   * alias/MyAliasName
-      #
-      #   * arn:aws:kms:us-east-1:123456789012:alias/MyAliasName
-      #
-      #   * arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
-      #
-      #   * 12345678-1234-1234-1234-123456789012
-      #   @return [String]
-      class UpdateTrailRequest < Struct.new(
-        :name,
-        :s3_bucket_name,
-        :s3_key_prefix,
-        :sns_topic_name,
-        :include_global_service_events,
-        :is_multi_region_trail,
-        :enable_log_file_validation,
-        :cloud_watch_logs_log_group_arn,
-        :cloud_watch_logs_role_arn,
-        :kms_key_id)
-        include Aws::Structure
-      end
+    # The settings for a trail.
+    #
+    # @!attribute [rw] name
+    #   Name of the trail set by calling CreateTrail. The maximum length is
+    #   128 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_name
+    #   Name of the Amazon S3 bucket into which CloudTrail delivers your
+    #   trail files. See [Amazon S3 Bucket Naming Requirements][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_key_prefix
+    #   Specifies the Amazon S3 key prefix that comes after the name of the
+    #   bucket you have designated for log file delivery. For more
+    #   information, see [Finding Your CloudTrail Log Files][1].The maximum
+    #   length is 200 characters.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_name
+    #   This field is deprecated. Use SnsTopicARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_arn
+    #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
+    #   send notifications when log files are delivered. The format of a
+    #   topic ARN is:
+    #
+    #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
+    #   @return [String]
+    #
+    # @!attribute [rw] include_global_service_events
+    #   Set to **True** to include AWS API calls from AWS global services
+    #   such as IAM. Otherwise, **False**.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] is_multi_region_trail
+    #   Specifies whether the trail belongs only to one region or exists in
+    #   all regions.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] home_region
+    #   The region in which the trail was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] trail_arn
+    #   Specifies the ARN of the trail. The format of a trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] log_file_validation_enabled
+    #   Specifies whether log file validation is enabled.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] cloud_watch_logs_log_group_arn
+    #   Specifies an Amazon Resource Name (ARN), a unique identifier that
+    #   represents the log group to which CloudTrail logs will be delivered.
+    #   @return [String]
+    #
+    # @!attribute [rw] cloud_watch_logs_role_arn
+    #   Specifies the role for the CloudWatch Logs endpoint to assume to
+    #   write to a user's log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   Specifies the KMS key ID that encrypts the logs delivered by
+    #   CloudTrail. The value is a fully specified ARN to a KMS key in the
+    #   format:
+    #
+    #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
+    #   @return [String]
+    #
+    # @!attribute [rw] has_custom_event_selectors
+    #   Specifies if the trail has custom event selectors.
+    #   @return [Boolean]
+    #
+    class Trail < Struct.new(
+      :name,
+      :s3_bucket_name,
+      :s3_key_prefix,
+      :sns_topic_name,
+      :sns_topic_arn,
+      :include_global_service_events,
+      :is_multi_region_trail,
+      :home_region,
+      :trail_arn,
+      :log_file_validation_enabled,
+      :cloud_watch_logs_log_group_arn,
+      :cloud_watch_logs_role_arn,
+      :kms_key_id,
+      :has_custom_event_selectors)
+      include Aws::Structure
+    end
 
-      # Returns the objects or data listed below if successful. Otherwise,
-      # returns an error.
-      # @!attribute [rw] name
-      #   Specifies the name of the trail.
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_bucket_name
-      #   Specifies the name of the Amazon S3 bucket designated for publishing
-      #   log files.
-      #   @return [String]
-      #
-      # @!attribute [rw] s3_key_prefix
-      #   Specifies the Amazon S3 key prefix that comes after the name of the
-      #   bucket you have designated for log file delivery. For more
-      #   information, see [Finding Your CloudTrail Log Files][1].
-      #
-      #
-      #
-      #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_name
-      #   This field is deprecated. Use SnsTopicARN.
-      #   @return [String]
-      #
-      # @!attribute [rw] sns_topic_arn
-      #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
-      #   send notifications when log files are delivered. The format of a
-      #   topic ARN is:
-      #
-      #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
-      #   @return [String]
-      #
-      # @!attribute [rw] include_global_service_events
-      #   Specifies whether the trail is publishing events from global
-      #   services such as IAM to the log files.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] is_multi_region_trail
-      #   Specifies whether the trail exists in one region or in all regions.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] trail_arn
-      #   Specifies the ARN of the trail that was updated. The format of a
-      #   trail ARN is:
-      #
-      #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
-      #   @return [String]
-      #
-      # @!attribute [rw] log_file_validation_enabled
-      #   Specifies whether log file integrity validation is enabled.
-      #   @return [Boolean]
-      #
-      # @!attribute [rw] cloud_watch_logs_log_group_arn
-      #   Specifies the Amazon Resource Name (ARN) of the log group to which
-      #   CloudTrail logs will be delivered.
-      #   @return [String]
-      #
-      # @!attribute [rw] cloud_watch_logs_role_arn
-      #   Specifies the role for the CloudWatch Logs endpoint to assume to
-      #   write to a user's log group.
-      #   @return [String]
-      #
-      # @!attribute [rw] kms_key_id
-      #   Specifies the KMS key ID that encrypts the logs delivered by
-      #   CloudTrail. The value is a fully specified ARN to a KMS key in the
-      #   format:
-      #
-      #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
-      #   @return [String]
-      class UpdateTrailResponse < Struct.new(
-        :name,
-        :s3_bucket_name,
-        :s3_key_prefix,
-        :sns_topic_name,
-        :sns_topic_arn,
-        :include_global_service_events,
-        :is_multi_region_trail,
-        :trail_arn,
-        :log_file_validation_enabled,
-        :cloud_watch_logs_log_group_arn,
-        :cloud_watch_logs_role_arn,
-        :kms_key_id)
-        include Aws::Structure
-      end
+    # Specifies settings to update for the trail.
+    #
+    # @note When making an API call, you may pass UpdateTrailRequest
+    #   data as a hash:
+    #
+    #       {
+    #         name: "String", # required
+    #         s3_bucket_name: "String",
+    #         s3_key_prefix: "String",
+    #         sns_topic_name: "String",
+    #         include_global_service_events: false,
+    #         is_multi_region_trail: false,
+    #         enable_log_file_validation: false,
+    #         cloud_watch_logs_log_group_arn: "String",
+    #         cloud_watch_logs_role_arn: "String",
+    #         kms_key_id: "String",
+    #       }
+    #
+    # @!attribute [rw] name
+    #   Specifies the name of the trail or trail ARN. If `Name` is a trail
+    #   name, the string must meet the following requirements:
+    #
+    #   * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
+    #     underscores (\_), or dashes (-)
+    #
+    #   * Start with a letter or number, and end with a letter or number
+    #
+    #   * Be between 3 and 128 characters
+    #
+    #   * Have no adjacent periods, underscores or dashes. Names like
+    #     `my-_namespace` and `my--namespace` are invalid.
+    #
+    #   * Not be in IP address format (for example, 192.168.5.4)
+    #
+    #   If `Name` is a trail ARN, it must be in the format:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_name
+    #   Specifies the name of the Amazon S3 bucket designated for publishing
+    #   log files. See [Amazon S3 Bucket Naming Requirements][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_key_prefix
+    #   Specifies the Amazon S3 key prefix that comes after the name of the
+    #   bucket you have designated for log file delivery. For more
+    #   information, see [Finding Your CloudTrail Log Files][1]. The maximum
+    #   length is 200 characters.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_name
+    #   Specifies the name of the Amazon SNS topic defined for notification
+    #   of log file delivery. The maximum length is 256 characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] include_global_service_events
+    #   Specifies whether the trail is publishing events from global
+    #   services such as IAM to the log files.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] is_multi_region_trail
+    #   Specifies whether the trail applies only to the current region or to
+    #   all regions. The default is false. If the trail exists only in the
+    #   current region and this value is set to true, shadow trails
+    #   (replications of the trail) will be created in the other regions. If
+    #   the trail exists in all regions and this value is set to false, the
+    #   trail will remain in the region where it was created, and its shadow
+    #   trails in other regions will be deleted.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] enable_log_file_validation
+    #   Specifies whether log file validation is enabled. The default is
+    #   false.
+    #
+    #   <note markdown="1"> When you disable log file integrity validation, the chain of digest
+    #   files is broken after one hour. CloudTrail will not create digest
+    #   files for log files that were delivered during a period in which log
+    #   file integrity validation was disabled. For example, if you enable
+    #   log file integrity validation at noon on January 1, disable it at
+    #   noon on January 2, and re-enable it at noon on January 10, digest
+    #   files will not be created for the log files delivered from noon on
+    #   January 2 to noon on January 10. The same applies whenever you stop
+    #   CloudTrail logging or delete a trail.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] cloud_watch_logs_log_group_arn
+    #   Specifies a log group name using an Amazon Resource Name (ARN), a
+    #   unique identifier that represents the log group to which CloudTrail
+    #   logs will be delivered. Not required unless you specify
+    #   CloudWatchLogsRoleArn.
+    #   @return [String]
+    #
+    # @!attribute [rw] cloud_watch_logs_role_arn
+    #   Specifies the role for the CloudWatch Logs endpoint to assume to
+    #   write to a user's log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   Specifies the KMS key ID to use to encrypt the logs delivered by
+    #   CloudTrail. The value can be a an alias name prefixed by "alias/",
+    #   a fully specified ARN to an alias, a fully specified ARN to a key,
+    #   or a globally unique identifier.
+    #
+    #   Examples:
+    #
+    #   * alias/MyAliasName
+    #
+    #   * arn:aws:kms:us-east-1:123456789012:alias/MyAliasName
+    #
+    #   * arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
+    #
+    #   * 12345678-1234-1234-1234-123456789012
+    #   @return [String]
+    #
+    class UpdateTrailRequest < Struct.new(
+      :name,
+      :s3_bucket_name,
+      :s3_key_prefix,
+      :sns_topic_name,
+      :include_global_service_events,
+      :is_multi_region_trail,
+      :enable_log_file_validation,
+      :cloud_watch_logs_log_group_arn,
+      :cloud_watch_logs_role_arn,
+      :kms_key_id)
+      include Aws::Structure
+    end
 
+    # Returns the objects or data listed below if successful. Otherwise,
+    # returns an error.
+    #
+    # @!attribute [rw] name
+    #   Specifies the name of the trail.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_name
+    #   Specifies the name of the Amazon S3 bucket designated for publishing
+    #   log files.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_key_prefix
+    #   Specifies the Amazon S3 key prefix that comes after the name of the
+    #   bucket you have designated for log file delivery. For more
+    #   information, see [Finding Your CloudTrail Log Files][1].
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_name
+    #   This field is deprecated. Use SnsTopicARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] sns_topic_arn
+    #   Specifies the ARN of the Amazon SNS topic that CloudTrail uses to
+    #   send notifications when log files are delivered. The format of a
+    #   topic ARN is:
+    #
+    #   `arn:aws:sns:us-east-1:123456789012:MyTopic`
+    #   @return [String]
+    #
+    # @!attribute [rw] include_global_service_events
+    #   Specifies whether the trail is publishing events from global
+    #   services such as IAM to the log files.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] is_multi_region_trail
+    #   Specifies whether the trail exists in one region or in all regions.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] trail_arn
+    #   Specifies the ARN of the trail that was updated. The format of a
+    #   trail ARN is:
+    #
+    #   `arn:aws:cloudtrail:us-east-1:123456789012:trail/MyTrail`
+    #   @return [String]
+    #
+    # @!attribute [rw] log_file_validation_enabled
+    #   Specifies whether log file integrity validation is enabled.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] cloud_watch_logs_log_group_arn
+    #   Specifies the Amazon Resource Name (ARN) of the log group to which
+    #   CloudTrail logs will be delivered.
+    #   @return [String]
+    #
+    # @!attribute [rw] cloud_watch_logs_role_arn
+    #   Specifies the role for the CloudWatch Logs endpoint to assume to
+    #   write to a user's log group.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_id
+    #   Specifies the KMS key ID that encrypts the logs delivered by
+    #   CloudTrail. The value is a fully specified ARN to a KMS key in the
+    #   format:
+    #
+    #   `arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
+    #   @return [String]
+    #
+    class UpdateTrailResponse < Struct.new(
+      :name,
+      :s3_bucket_name,
+      :s3_key_prefix,
+      :sns_topic_name,
+      :sns_topic_arn,
+      :include_global_service_events,
+      :is_multi_region_trail,
+      :trail_arn,
+      :log_file_validation_enabled,
+      :cloud_watch_logs_log_group_arn,
+      :cloud_watch_logs_role_arn,
+      :kms_key_id)
+      include Aws::Structure
     end
+
   end
 end