aws-sdk-cloudtrail 1.113.0 → 1.115.0

data/lib/aws-sdk-cloudtrail/client_api.rb

@@ -26,6 +26,8 @@ module Aws::CloudTrail
     AdvancedEventSelectors = Shapes::ListShape.new(name: 'AdvancedEventSelectors')
     AdvancedFieldSelector = Shapes::StructureShape.new(name: 'AdvancedFieldSelector')
     AdvancedFieldSelectors = Shapes::ListShape.new(name: 'AdvancedFieldSelectors')
+    AggregationConfiguration = Shapes::StructureShape.new(name: 'AggregationConfiguration')
+    AggregationConfigurations = Shapes::ListShape.new(name: 'AggregationConfigurations')
     BillingMode = Shapes::StringShape.new(name: 'BillingMode')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     ByteBuffer = Shapes::BlobShape.new(name: 'ByteBuffer')
@@ -98,6 +100,7 @@ module Aws::CloudTrail
     ErrorMessage = Shapes::StringShape.new(name: 'ErrorMessage')
     Event = Shapes::StructureShape.new(name: 'Event')
     EventCategory = Shapes::StringShape.new(name: 'EventCategory')
+    EventCategoryAggregation = Shapes::StringShape.new(name: 'EventCategoryAggregation')
     EventDataStore = Shapes::StructureShape.new(name: 'EventDataStore')
     EventDataStoreARNInvalidException = Shapes::StructureShape.new(name: 'EventDataStoreARNInvalidException')
     EventDataStoreAlreadyExistsException = Shapes::StructureShape.new(name: 'EventDataStoreAlreadyExistsException')
@@ -217,6 +220,13 @@ module Aws::CloudTrail
     ListImportsMaxResultsCount = Shapes::IntegerShape.new(name: 'ListImportsMaxResultsCount')
     ListImportsRequest = Shapes::StructureShape.new(name: 'ListImportsRequest')
     ListImportsResponse = Shapes::StructureShape.new(name: 'ListImportsResponse')
+    ListInsightsDataDimensionKey = Shapes::StringShape.new(name: 'ListInsightsDataDimensionKey')
+    ListInsightsDataDimensionValue = Shapes::StringShape.new(name: 'ListInsightsDataDimensionValue')
+    ListInsightsDataDimensions = Shapes::MapShape.new(name: 'ListInsightsDataDimensions')
+    ListInsightsDataMaxResultsCount = Shapes::IntegerShape.new(name: 'ListInsightsDataMaxResultsCount')
+    ListInsightsDataRequest = Shapes::StructureShape.new(name: 'ListInsightsDataRequest')
+    ListInsightsDataResponse = Shapes::StructureShape.new(name: 'ListInsightsDataResponse')
+    ListInsightsDataType = Shapes::StringShape.new(name: 'ListInsightsDataType')
     ListInsightsMetricDataRequest = Shapes::StructureShape.new(name: 'ListInsightsMetricDataRequest')
     ListInsightsMetricDataResponse = Shapes::StructureShape.new(name: 'ListInsightsMetricDataResponse')
     ListPublicKeysRequest = Shapes::StructureShape.new(name: 'ListPublicKeysRequest')
@@ -331,6 +341,8 @@ module Aws::CloudTrail
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     Source = Shapes::StringShape.new(name: 'Source')
     SourceConfig = Shapes::StructureShape.new(name: 'SourceConfig')
+    SourceEventCategories = Shapes::ListShape.new(name: 'SourceEventCategories')
+    SourceEventCategory = Shapes::StringShape.new(name: 'SourceEventCategory')
     StartDashboardRefreshRequest = Shapes::StructureShape.new(name: 'StartDashboardRefreshRequest')
     StartDashboardRefreshResponse = Shapes::StructureShape.new(name: 'StartDashboardRefreshResponse')
     StartEventDataStoreIngestionRequest = Shapes::StructureShape.new(name: 'StartEventDataStoreIngestionRequest')
@@ -353,6 +365,8 @@ module Aws::CloudTrail
     TagValue = Shapes::StringShape.new(name: 'TagValue')
     TagsLimitExceededException = Shapes::StructureShape.new(name: 'TagsLimitExceededException')
     TagsList = Shapes::ListShape.new(name: 'TagsList')
+    Template = Shapes::StringShape.new(name: 'Template')
+    Templates = Shapes::ListShape.new(name: 'Templates')
     TerminationProtectionEnabled = Shapes::BooleanShape.new(name: 'TerminationProtectionEnabled')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
     TimeOfDay = Shapes::StringShape.new(name: 'TimeOfDay')
@@ -415,6 +429,12 @@ module Aws::CloudTrail
 
     AdvancedFieldSelectors.member = Shapes::ShapeRef.new(shape: AdvancedFieldSelector)
 
+    AggregationConfiguration.add_member(:templates, Shapes::ShapeRef.new(shape: Templates, required: true, location_name: "Templates"))
+    AggregationConfiguration.add_member(:event_category, Shapes::ShapeRef.new(shape: EventCategoryAggregation, required: true, location_name: "EventCategory"))
+    AggregationConfiguration.struct_class = Types::AggregationConfiguration
+
+    AggregationConfigurations.member = Shapes::ShapeRef.new(shape: AggregationConfiguration)
+
     CancelQueryRequest.add_member(:event_data_store, Shapes::ShapeRef.new(shape: EventDataStoreArn, deprecated: true, location_name: "EventDataStore", metadata: {"deprecatedMessage" => "EventDataStore is no longer required by CancelQueryRequest"}))
     CancelQueryRequest.add_member(:query_id, Shapes::ShapeRef.new(shape: UUID, required: true, location_name: "QueryId"))
     CancelQueryRequest.add_member(:event_data_store_owner_account_id, Shapes::ShapeRef.new(shape: AccountId, location_name: "EventDataStoreOwnerAccountId"))
@@ -729,12 +749,15 @@ module Aws::CloudTrail
     GetDashboardResponse.add_member(:termination_protection_enabled, Shapes::ShapeRef.new(shape: TerminationProtectionEnabled, location_name: "TerminationProtectionEnabled"))
     GetDashboardResponse.struct_class = Types::GetDashboardResponse
 
+    GetEventConfigurationRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, location_name: "TrailName"))
     GetEventConfigurationRequest.add_member(:event_data_store, Shapes::ShapeRef.new(shape: String, location_name: "EventDataStore"))
     GetEventConfigurationRequest.struct_class = Types::GetEventConfigurationRequest
 
+    GetEventConfigurationResponse.add_member(:trail_arn, Shapes::ShapeRef.new(shape: String, location_name: "TrailARN"))
     GetEventConfigurationResponse.add_member(:event_data_store_arn, Shapes::ShapeRef.new(shape: EventDataStoreArn, location_name: "EventDataStoreArn"))
     GetEventConfigurationResponse.add_member(:max_event_size, Shapes::ShapeRef.new(shape: MaxEventSize, location_name: "MaxEventSize"))
     GetEventConfigurationResponse.add_member(:context_key_selectors, Shapes::ShapeRef.new(shape: ContextKeySelectors, location_name: "ContextKeySelectors"))
+    GetEventConfigurationResponse.add_member(:aggregation_configurations, Shapes::ShapeRef.new(shape: AggregationConfigurations, location_name: "AggregationConfigurations"))
     GetEventConfigurationResponse.struct_class = Types::GetEventConfigurationResponse
 
     GetEventDataStoreRequest.add_member(:event_data_store, Shapes::ShapeRef.new(shape: EventDataStoreArn, required: true, location_name: "EventDataStore"))
@@ -885,6 +908,7 @@ module Aws::CloudTrail
     InsightNotEnabledException.struct_class = Types::InsightNotEnabledException
 
     InsightSelector.add_member(:insight_type, Shapes::ShapeRef.new(shape: InsightType, location_name: "InsightType"))
+    InsightSelector.add_member(:event_categories, Shapes::ShapeRef.new(shape: SourceEventCategories, location_name: "EventCategories"))
     InsightSelector.struct_class = Types::InsightSelector
 
     InsightSelectors.member = Shapes::ShapeRef.new(shape: InsightSelector)
@@ -1004,6 +1028,23 @@ module Aws::CloudTrail
     ListImportsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: PaginationToken, location_name: "NextToken"))
     ListImportsResponse.struct_class = Types::ListImportsResponse
 
+    ListInsightsDataDimensions.key = Shapes::ShapeRef.new(shape: ListInsightsDataDimensionKey)
+    ListInsightsDataDimensions.value = Shapes::ShapeRef.new(shape: ListInsightsDataDimensionValue)
+
+    ListInsightsDataRequest.add_member(:insight_source, Shapes::ShapeRef.new(shape: ResourceArn, required: true, location_name: "InsightSource"))
+    ListInsightsDataRequest.add_member(:data_type, Shapes::ShapeRef.new(shape: ListInsightsDataType, required: true, location_name: "DataType"))
+    ListInsightsDataRequest.add_member(:dimensions, Shapes::ShapeRef.new(shape: ListInsightsDataDimensions, location_name: "Dimensions"))
+    ListInsightsDataRequest.add_member(:start_time, Shapes::ShapeRef.new(shape: Date, location_name: "StartTime"))
+    ListInsightsDataRequest.add_member(:end_time, Shapes::ShapeRef.new(shape: Date, location_name: "EndTime"))
+    ListInsightsDataRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: ListInsightsDataMaxResultsCount, location_name: "MaxResults"))
+    ListInsightsDataRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: PaginationToken, location_name: "NextToken"))
+    ListInsightsDataRequest.struct_class = Types::ListInsightsDataRequest
+
+    ListInsightsDataResponse.add_member(:events, Shapes::ShapeRef.new(shape: EventsList, location_name: "Events"))
+    ListInsightsDataResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: PaginationToken, location_name: "NextToken"))
+    ListInsightsDataResponse.struct_class = Types::ListInsightsDataResponse
+
+    ListInsightsMetricDataRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, location_name: "TrailName"))
     ListInsightsMetricDataRequest.add_member(:event_source, Shapes::ShapeRef.new(shape: EventSource, required: true, location_name: "EventSource"))
     ListInsightsMetricDataRequest.add_member(:event_name, Shapes::ShapeRef.new(shape: EventName, required: true, location_name: "EventName"))
     ListInsightsMetricDataRequest.add_member(:insight_type, Shapes::ShapeRef.new(shape: InsightType, required: true, location_name: "InsightType"))
@@ -1016,6 +1057,7 @@ module Aws::CloudTrail
     ListInsightsMetricDataRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: InsightsMetricNextToken, location_name: "NextToken"))
     ListInsightsMetricDataRequest.struct_class = Types::ListInsightsMetricDataRequest
 
+    ListInsightsMetricDataResponse.add_member(:trail_arn, Shapes::ShapeRef.new(shape: String, location_name: "TrailARN"))
     ListInsightsMetricDataResponse.add_member(:event_source, Shapes::ShapeRef.new(shape: EventSource, location_name: "EventSource"))
     ListInsightsMetricDataResponse.add_member(:event_name, Shapes::ShapeRef.new(shape: EventName, location_name: "EventName"))
     ListInsightsMetricDataResponse.add_member(:insight_type, Shapes::ShapeRef.new(shape: InsightType, location_name: "InsightType"))
@@ -1113,14 +1155,18 @@ module Aws::CloudTrail
 
     PublicKeyList.member = Shapes::ShapeRef.new(shape: PublicKey)
 
+    PutEventConfigurationRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, location_name: "TrailName"))
     PutEventConfigurationRequest.add_member(:event_data_store, Shapes::ShapeRef.new(shape: String, location_name: "EventDataStore"))
-    PutEventConfigurationRequest.add_member(:max_event_size, Shapes::ShapeRef.new(shape: MaxEventSize, required: true, location_name: "MaxEventSize"))
-    PutEventConfigurationRequest.add_member(:context_key_selectors, Shapes::ShapeRef.new(shape: ContextKeySelectors, required: true, location_name: "ContextKeySelectors"))
+    PutEventConfigurationRequest.add_member(:max_event_size, Shapes::ShapeRef.new(shape: MaxEventSize, location_name: "MaxEventSize"))
+    PutEventConfigurationRequest.add_member(:context_key_selectors, Shapes::ShapeRef.new(shape: ContextKeySelectors, location_name: "ContextKeySelectors"))
+    PutEventConfigurationRequest.add_member(:aggregation_configurations, Shapes::ShapeRef.new(shape: AggregationConfigurations, location_name: "AggregationConfigurations"))
     PutEventConfigurationRequest.struct_class = Types::PutEventConfigurationRequest
 
+    PutEventConfigurationResponse.add_member(:trail_arn, Shapes::ShapeRef.new(shape: String, location_name: "TrailARN"))
     PutEventConfigurationResponse.add_member(:event_data_store_arn, Shapes::ShapeRef.new(shape: EventDataStoreArn, location_name: "EventDataStoreArn"))
     PutEventConfigurationResponse.add_member(:max_event_size, Shapes::ShapeRef.new(shape: MaxEventSize, location_name: "MaxEventSize"))
     PutEventConfigurationResponse.add_member(:context_key_selectors, Shapes::ShapeRef.new(shape: ContextKeySelectors, location_name: "ContextKeySelectors"))
+    PutEventConfigurationResponse.add_member(:aggregation_configurations, Shapes::ShapeRef.new(shape: AggregationConfigurations, location_name: "AggregationConfigurations"))
     PutEventConfigurationResponse.struct_class = Types::PutEventConfigurationResponse
 
     PutEventSelectorsRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TrailName"))
@@ -1285,6 +1331,8 @@ module Aws::CloudTrail
     SourceConfig.add_member(:advanced_event_selectors, Shapes::ShapeRef.new(shape: AdvancedEventSelectors, location_name: "AdvancedEventSelectors"))
     SourceConfig.struct_class = Types::SourceConfig
 
+    SourceEventCategories.member = Shapes::ShapeRef.new(shape: SourceEventCategory)
+
     StartDashboardRefreshRequest.add_member(:dashboard_id, Shapes::ShapeRef.new(shape: DashboardArn, required: true, location_name: "DashboardId"))
     StartDashboardRefreshRequest.add_member(:query_parameter_values, Shapes::ShapeRef.new(shape: QueryParameterValues, location_name: "QueryParameterValues"))
     StartDashboardRefreshRequest.struct_class = Types::StartDashboardRefreshRequest
@@ -1362,6 +1410,8 @@ module Aws::CloudTrail
 
     TagsList.member = Shapes::ShapeRef.new(shape: Tag)
 
+    Templates.member = Shapes::ShapeRef.new(shape: Template)
+
     ThrottlingException.struct_class = Types::ThrottlingException
 
     Timestamps.member = Shapes::ShapeRef.new(shape: Date)
@@ -1619,6 +1669,7 @@ module Aws::CloudTrail
         o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
         o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
         o.errors << Shapes::ShapeRef.new(shape: NoManagementAccountSLRExistsException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:create_trail, Seahorse::Model::Operation.new.tap do |o|
@@ -1878,6 +1929,8 @@ module Aws::CloudTrail
         o.http_request_uri = "/"
         o.input = Shapes::ShapeRef.new(shape: GetEventConfigurationRequest)
         o.output = Shapes::ShapeRef.new(shape: GetEventConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: TrailNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidTrailNameException)
         o.errors << Shapes::ShapeRef.new(shape: CloudTrailARNInvalidException)
         o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
         o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
@@ -2094,6 +2147,23 @@ module Aws::CloudTrail
         )
       end)
 
+      api.add_operation(:list_insights_data, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListInsightsData"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: ListInsightsDataRequest)
+        o.output = Shapes::ShapeRef.new(shape: ListInsightsDataResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
+        o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:list_insights_metric_data, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListInsightsMetricData"
         o.http_method = "POST"
@@ -2101,6 +2171,7 @@ module Aws::CloudTrail
         o.input = Shapes::ShapeRef.new(shape: ListInsightsMetricDataRequest)
         o.output = Shapes::ShapeRef.new(shape: ListInsightsMetricDataResponse)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidTrailNameException)
         o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
         o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
         o[:pager] = Aws::Pager.new(
@@ -2220,6 +2291,11 @@ module Aws::CloudTrail
         o.http_request_uri = "/"
         o.input = Shapes::ShapeRef.new(shape: PutEventConfigurationRequest)
         o.output = Shapes::ShapeRef.new(shape: PutEventConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: TrailNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidTrailNameException)
+        o.errors << Shapes::ShapeRef.new(shape: CloudTrailARNInvalidException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterCombinationException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidHomeRegionException)
         o.errors << Shapes::ShapeRef.new(shape: EventDataStoreARNInvalidException)
         o.errors << Shapes::ShapeRef.new(shape: EventDataStoreNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidEventDataStoreStatusException)
@@ -2229,8 +2305,6 @@ module Aws::CloudTrail
         o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
-        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterCombinationException)
-        o.errors << Shapes::ShapeRef.new(shape: CloudTrailARNInvalidException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
         o.errors << Shapes::ShapeRef.new(shape: NoManagementAccountSLRExistsException)
@@ -2579,6 +2653,8 @@ module Aws::CloudTrail
         o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
         o.errors << Shapes::ShapeRef.new(shape: NoManagementAccountSLRExistsException)
         o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:update_trail, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-cloudtrail/types.rb

@@ -193,6 +193,27 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # An object that contains configuration settings for aggregating events.
+    #
+    # @!attribute [rw] templates
+    #   A list of aggregation templates that can be used to configure event
+    #   aggregation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] event_category
+    #   Specifies the event category for which aggregation should be
+    #   performed.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AggregationConfiguration AWS API Documentation
+    #
+    class AggregationConfiguration < Struct.new(
+      :templates,
+      :event_category)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] event_data_store
     #   The ARN (or the ID suffix of the ARN) of an event data store on
     #   which the specified query is running.
@@ -884,10 +905,10 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   Specifies the KMS key ID to use to encrypt the logs delivered by
-    #   CloudTrail. The value can be an alias name prefixed by `alias/`, a
-    #   fully specified ARN to an alias, a fully specified ARN to a key, or
-    #   a globally unique identifier.
+    #   Specifies the KMS key ID to use to encrypt the logs and digest files
+    #   delivered by CloudTrail. The value can be an alias name prefixed by
+    #   `alias/`, a fully specified ARN to an alias, a fully specified ARN
+    #   to a key, or a globally unique identifier.
     #
     #   CloudTrail also supports KMS multi-Region keys. For more information
     #   about multi-Region keys, see [Using multi-Region keys][1] in the
@@ -2056,6 +2077,11 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @!attribute [rw] trail_name
+    #   The name of the trail for which you want to retrieve event
+    #   configuration settings.
+    #   @return [String]
+    #
     # @!attribute [rw] event_data_store
     #   The Amazon Resource Name (ARN) or ID suffix of the ARN of the event
     #   data store for which you want to retrieve event configuration
@@ -2065,11 +2091,17 @@ module Aws::CloudTrail
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventConfigurationRequest AWS API Documentation
     #
     class GetEventConfigurationRequest < Struct.new(
+      :trail_name,
       :event_data_store)
       SENSITIVE = []
       include Aws::Structure
     end
 
+    # @!attribute [rw] trail_arn
+    #   The Amazon Resource Name (ARN) of the trail for which the event
+    #   configuration settings are returned.
+    #   @return [String]
+    #
     # @!attribute [rw] event_data_store_arn
     #   The Amazon Resource Name (ARN) or ID suffix of the ARN of the event
     #   data store for which the event configuration settings are returned.
@@ -2085,12 +2117,19 @@ module Aws::CloudTrail
     #   data store.
     #   @return [Array<Types::ContextKeySelector>]
     #
+    # @!attribute [rw] aggregation_configurations
+    #   The list of aggregation configurations that are configured for the
+    #   trail.
+    #   @return [Array<Types::AggregationConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventConfigurationResponse AWS API Documentation
     #
     class GetEventConfigurationResponse < Struct.new(
+      :trail_arn,
       :event_data_store_arn,
       :max_event_size,
-      :context_key_selectors)
+      :context_key_selectors,
+      :aggregation_configurations)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2378,9 +2417,12 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] insight_selectors
-    #   A JSON string that contains the Insight types you want to log on a
-    #   trail or event data store. `ApiErrorRateInsight` and
-    #   `ApiCallRateInsight` are supported as Insights types.
+    #   Contains the Insights types that are enabled on a trail or event
+    #   data store. It also specifies the event categories on which a
+    #   particular Insight type is enabled. `ApiCallRateInsight` and
+    #   `ApiErrorRateInsight` are valid Insight types.The EventCategory
+    #   field can specify `Management` or `Data` events or both. For event
+    #   data store, you can log Insights for management events only.
     #   @return [Array<Types::InsightSelector>]
     #
     # @!attribute [rw] event_data_store_arn
@@ -2919,18 +2961,33 @@ module Aws::CloudTrail
     #   types.
     #
     #   The `ApiCallRateInsight` Insights type analyzes write-only
-    #   management API calls that are aggregated per minute against a
-    #   baseline API call volume.
+    #   management API calls or read and write data API calls that are
+    #   aggregated per minute against a baseline API call volume.
     #
-    #   The `ApiErrorRateInsight` Insights type analyzes management API
-    #   calls that result in error codes. The error is shown if the API call
-    #   is unsuccessful.
+    #   The `ApiErrorRateInsight` Insights type analyzes management and data
+    #   API calls that result in error codes. The error is shown if the API
+    #   call is unsuccessful.
     #   @return [String]
     #
+    # @!attribute [rw] event_categories
+    #   Select the event category on which Insights should be enabled.
+    #
+    #   * If EventCategories is not provided, the specified Insights types
+    #     are enabled on management API calls by default.
+    #
+    #   * If EventCategories is provided, the given event categories will
+    #     overwrite the existing ones. For example, if a trail already has
+    #     Insights enabled on management events, and then a
+    #     PutInsightSelectors request is made with only data events
+    #     specified in EventCategories, Insights on management events will
+    #     be disabled.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsightSelector AWS API Documentation
     #
     class InsightSelector < Struct.new(
-      :insight_type)
+      :insight_type,
+      :event_categories)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3443,6 +3500,92 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @!attribute [rw] insight_source
+    #   The Amazon Resource Name(ARN) of the trail for which you want to
+    #   retrieve Insights events.
+    #   @return [String]
+    #
+    # @!attribute [rw] data_type
+    #   Specifies the category of events returned. To fetch Insights events,
+    #   specify `InsightsEvents` as the value of `DataType`
+    #   @return [String]
+    #
+    # @!attribute [rw] dimensions
+    #   Contains a map of dimensions. Currently the map can contain only one
+    #   item.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] start_time
+    #   Specifies that only events that occur after or at the specified time
+    #   are returned. If the specified start time is after the specified end
+    #   time, an error is returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_time
+    #   Specifies that only events that occur before or at the specified
+    #   time are returned. If the specified end time is before the specified
+    #   start time, an error is returned.
+    #   @return [Time]
+    #
+    # @!attribute [rw] max_results
+    #   The number of events to return. Possible values are 1 through 50.
+    #   The default is 50.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to get the next page of results after a previous
+    #   API call. This token must be passed in with the same parameters that
+    #   were specified in the original call. For example, if the original
+    #   call specified a EventName as a dimension with `PutObject` as a
+    #   value, the call with NextToken should include those same parameters.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListInsightsDataRequest AWS API Documentation
+    #
+    class ListInsightsDataRequest < Struct.new(
+      :insight_source,
+      :data_type,
+      :dimensions,
+      :start_time,
+      :end_time,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] events
+    #   A list of events returned based on the InsightSource, DataType or
+    #   Dimensions specified. The events list is sorted by time. The most
+    #   recent event is listed first.
+    #   @return [Array<Types::Event>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to get the next page of results after a previous
+    #   API call. If the token does not appear, there are no more results to
+    #   return. The token must be passed in with the same parameters as the
+    #   previous call. For example, if the original call specified a
+    #   EventName as a dimension with `PutObject` as a value, the call with
+    #   NextToken should include those same parameters.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListInsightsDataResponse AWS API Documentation
+    #
+    class ListInsightsDataResponse < Struct.new(
+      :events,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] trail_name
+    #   The Amazon Resource Name(ARN) or name of the trail for which you
+    #   want to retrieve Insights metrics data. This parameter should only
+    #   be provided to fetch Insights metrics data generated on trails
+    #   logging data events. This parameter is not required for Insights
+    #   metric data generated on trails logging management events.
+    #   @return [String]
+    #
     # @!attribute [rw] event_source
     #   The Amazon Web Services service to which the request was made, such
     #   as `iam.amazonaws.com` or `s3.amazonaws.com`.
@@ -3513,6 +3656,7 @@ module Aws::CloudTrail
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListInsightsMetricDataRequest AWS API Documentation
     #
     class ListInsightsMetricDataRequest < Struct.new(
+      :trail_name,
       :event_source,
       :event_name,
       :insight_type,
@@ -3527,6 +3671,11 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @!attribute [rw] trail_arn
+    #   Specifies the ARN of the trail. This is only returned when Insights
+    #   is enabled on a trail logging data events.
+    #   @return [String]
+    #
     # @!attribute [rw] event_source
     #   The Amazon Web Services service to which the request was made, such
     #   as `iam.amazonaws.com` or `s3.amazonaws.com`.
@@ -3574,6 +3723,7 @@ module Aws::CloudTrail
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListInsightsMetricDataResponse AWS API Documentation
     #
     class ListInsightsMetricDataResponse < Struct.new(
+      :trail_arn,
       :event_source,
       :event_name,
       :insight_type,
@@ -4007,10 +4157,14 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @!attribute [rw] trail_name
+    #   The name of the trail for which you want to update event
+    #   configuration settings.
+    #   @return [String]
+    #
     # @!attribute [rw] event_data_store
     #   The Amazon Resource Name (ARN) or ID suffix of the ARN of the event
-    #   data store for which you want to update event configuration
-    #   settings.
+    #   data store for which event configuration settings are updated.
     #   @return [String]
     #
     # @!attribute [rw] max_event_size
@@ -4024,16 +4178,28 @@ module Aws::CloudTrail
     #   enriched event data.
     #   @return [Array<Types::ContextKeySelector>]
     #
+    # @!attribute [rw] aggregation_configurations
+    #   The list of aggregation configurations that you want to configure
+    #   for the trail.
+    #   @return [Array<Types::AggregationConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventConfigurationRequest AWS API Documentation
     #
     class PutEventConfigurationRequest < Struct.new(
+      :trail_name,
       :event_data_store,
       :max_event_size,
-      :context_key_selectors)
+      :context_key_selectors,
+      :aggregation_configurations)
       SENSITIVE = []
       include Aws::Structure
     end
 
+    # @!attribute [rw] trail_arn
+    #   The Amazon Resource Name (ARN) of the trail that has aggregation
+    #   enabled.
+    #   @return [String]
+    #
     # @!attribute [rw] event_data_store_arn
     #   The Amazon Resource Name (ARN) or ID suffix of the ARN of the event
     #   data store for which the event configuration settings were updated.
@@ -4049,12 +4215,19 @@ module Aws::CloudTrail
     #   data store.
     #   @return [Array<Types::ContextKeySelector>]
     #
+    # @!attribute [rw] aggregation_configurations
+    #   A list of aggregation configurations that are configured for the
+    #   trail.
+    #   @return [Array<Types::AggregationConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventConfigurationResponse AWS API Documentation
     #
     class PutEventConfigurationResponse < Struct.new(
+      :trail_arn,
       :event_data_store_arn,
       :max_event_size,
-      :context_key_selectors)
+      :context_key_selectors,
+      :aggregation_configurations)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4164,17 +4337,19 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] insight_selectors
-    #   A JSON string that contains the Insights types you want to log on a
-    #   trail or event data store. `ApiCallRateInsight` and
-    #   `ApiErrorRateInsight` are valid Insight types.
+    #   Contains the Insights types you want to log on a specific category
+    #   of events on a trail or event data store. `ApiCallRateInsight` and
+    #   `ApiErrorRateInsight` are valid Insight types.The EventCategory
+    #   field can specify `Management` or `Data` events or both. For event
+    #   data store, you can log Insights for management events only.
     #
     #   The `ApiCallRateInsight` Insights type analyzes write-only
-    #   management API calls that are aggregated per minute against a
-    #   baseline API call volume.
+    #   management API calls or read and write data API calls that are
+    #   aggregated per minute against a baseline API call volume.
     #
-    #   The `ApiErrorRateInsight` Insights type analyzes management API
-    #   calls that result in error codes. The error is shown if the API call
-    #   is unsuccessful.
+    #   The `ApiErrorRateInsight` Insights type analyzes management and data
+    #   API calls that result in error codes. The error is shown if the API
+    #   call is unsuccessful.
     #   @return [Array<Types::InsightSelector>]
     #
     # @!attribute [rw] event_data_store
@@ -4212,9 +4387,11 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] insight_selectors
-    #   A JSON string that contains the Insights event types that you want
-    #   to log on a trail or event data store. The valid Insights types are
-    #   `ApiErrorRateInsight` and `ApiCallRateInsight`.
+    #   Contains the Insights types you want to log on a specific category
+    #   of events in a trail or event data store. `ApiCallRateInsight` and
+    #   `ApiErrorRateInsight` are valid Insight types.The EventCategory
+    #   field can specify `Management` or `Data` events or both. For event
+    #   data store, you can only log Insights for management events only.
     #   @return [Array<Types::InsightSelector>]
     #
     # @!attribute [rw] event_data_store_arn
@@ -5342,9 +5519,9 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   Specifies the KMS key ID that encrypts the logs delivered by
-    #   CloudTrail. The value is a fully specified ARN to a KMS key in the
-    #   following format.
+    #   Specifies the KMS key ID that encrypts the logs and digest files
+    #   delivered by CloudTrail. The value is a fully specified ARN to a KMS
+    #   key in the following format.
     #
     #   `arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012`
     #   @return [String]
@@ -5910,10 +6087,10 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   Specifies the KMS key ID to use to encrypt the logs delivered by
-    #   CloudTrail. The value can be an alias name prefixed by "alias/", a
-    #   fully specified ARN to an alias, a fully specified ARN to a key, or
-    #   a globally unique identifier.
+    #   Specifies the KMS key ID to use to encrypt the logs and digest files
+    #   delivered by CloudTrail. The value can be an alias name prefixed by
+    #   "alias/", a fully specified ARN to an alias, a fully specified ARN
+    #   to a key, or a globally unique identifier.
     #
     #   CloudTrail also supports KMS multi-Region keys. For more information
     #   about multi-Region keys, see [Using multi-Region keys][1] in the
@@ -6037,9 +6214,9 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   Specifies the KMS key ID that encrypts the logs delivered by
-    #   CloudTrail. The value is a fully specified ARN to a KMS key in the
-    #   following format.
+    #   Specifies the KMS key ID that encrypts the logs and digest files
+    #   delivered by CloudTrail. The value is a fully specified ARN to a KMS
+    #   key in the following format.
     #
     #   `arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012`
     #   @return [String]

data/lib/aws-sdk-cloudtrail.rb

@@ -54,7 +54,7 @@ module Aws::CloudTrail
   autoload :EndpointProvider, 'aws-sdk-cloudtrail/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cloudtrail/endpoints'
 
-  GEM_VERSION = '1.113.0'
+  GEM_VERSION = '1.115.0'
 
 end