aws-sdk-cloudtrail 1.20.0 → 1.25.0

data/lib/aws-sdk-cloudtrail/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -6,6 +8,7 @@
 # WARNING ABOUT GENERATED CODE
 
 module Aws::CloudTrail
+
   class Resource
 
     # @param options ({})

data/lib/aws-sdk-cloudtrail/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -39,6 +41,7 @@ module Aws::CloudTrail
     class AddTagsRequest < Struct.new(
       :resource_id,
       :tags_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -49,6 +52,35 @@ module Aws::CloudTrail
     #
     class AddTagsResponse < Aws::EmptyStructure; end
 
+    # This exception is thrown when an operation is called with an invalid
+    # trail ARN. The format of a trail ARN is:
+    #
+    # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudTrailARNInvalidException AWS API Documentation
+    #
+    class CloudTrailARNInvalidException < Aws::EmptyStructure; end
+
+    # This exception is thrown when trusted access has not been enabled
+    # between AWS CloudTrail and AWS Organizations. For more information,
+    # see [Enabling Trusted Access with Other AWS Services][1] and [Prepare
+    # For Creating a Trail For Your Organization][2].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html
+    # [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudTrailAccessNotEnabledException AWS API Documentation
+    #
+    class CloudTrailAccessNotEnabledException < Aws::EmptyStructure; end
+
+    # Cannot set a CloudWatch Logs delivery for this region.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudWatchLogsDeliveryUnavailableException AWS API Documentation
+    #
+    class CloudWatchLogsDeliveryUnavailableException < Aws::EmptyStructure; end
+
     # Specifies the settings for each trail.
     #
     # @note When making an API call, you may pass CreateTrailRequest
@@ -201,6 +233,7 @@ module Aws::CloudTrail
       :kms_key_id,
       :is_organization_trail,
       :tags_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -296,6 +329,7 @@ module Aws::CloudTrail
       :cloud_watch_logs_role_arn,
       :kms_key_id,
       :is_organization_trail)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -415,6 +449,7 @@ module Aws::CloudTrail
     class DataResource < Struct.new(
       :type,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -437,6 +472,7 @@ module Aws::CloudTrail
     #
     class DeleteTrailRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -496,6 +532,7 @@ module Aws::CloudTrail
     class DescribeTrailsRequest < Struct.new(
       :trail_name_list,
       :include_shadow_trails)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -515,6 +552,7 @@ module Aws::CloudTrail
     #
     class DescribeTrailsResponse < Struct.new(
       :trail_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -573,6 +611,7 @@ module Aws::CloudTrail
       :username,
       :resources,
       :cloud_trail_event)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -658,6 +697,7 @@ module Aws::CloudTrail
       :include_management_events,
       :data_resources,
       :exclude_management_event_sources)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -693,6 +733,7 @@ module Aws::CloudTrail
     #
     class GetEventSelectorsRequest < Struct.new(
       :trail_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -709,6 +750,7 @@ module Aws::CloudTrail
     class GetEventSelectorsResponse < Struct.new(
       :trail_arn,
       :event_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -744,6 +786,7 @@ module Aws::CloudTrail
     #
     class GetInsightSelectorsRequest < Struct.new(
       :trail_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -763,6 +806,7 @@ module Aws::CloudTrail
     class GetInsightSelectorsResponse < Struct.new(
       :trail_arn,
       :insight_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -782,6 +826,7 @@ module Aws::CloudTrail
     #
     class GetTrailRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -793,6 +838,7 @@ module Aws::CloudTrail
     #
     class GetTrailResponse < Struct.new(
       :trail)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -818,6 +864,7 @@ module Aws::CloudTrail
     #
     class GetTrailStatusRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -956,9 +1003,18 @@ module Aws::CloudTrail
       :latest_delivery_attempt_succeeded,
       :time_logging_started,
       :time_logging_stopped)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # If you run `GetInsightSelectors` on a trail that does not have
+    # Insights events enabled, the operation throws the exception
+    # `InsightNotEnabledException`.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsightNotEnabledException AWS API Documentation
+    #
+    class InsightNotEnabledException < Aws::EmptyStructure; end
+
     # A JSON string that contains a list of insight types that are logged on
     # a trail.
     #
@@ -978,9 +1034,219 @@ module Aws::CloudTrail
     #
     class InsightSelector < Struct.new(
       :insight_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the IAM user or role that is used to
+    # create the organization trail is lacking one or more required
+    # permissions for creating an organization trail in a required service.
+    # For more information, see [Prepare For Creating a Trail For Your
+    # Organization][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsufficientDependencyServiceAccessPermissionException AWS API Documentation
+    #
+    class InsufficientDependencyServiceAccessPermissionException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the policy on the S3 bucket or KMS key
+    # is not sufficient.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsufficientEncryptionPolicyException AWS API Documentation
+    #
+    class InsufficientEncryptionPolicyException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the policy on the S3 bucket is not
+    # sufficient.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsufficientS3BucketPolicyException AWS API Documentation
+    #
+    class InsufficientS3BucketPolicyException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the policy on the SNS topic is not
+    # sufficient.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsufficientSnsTopicPolicyException AWS API Documentation
+    #
+    class InsufficientSnsTopicPolicyException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided CloudWatch log group is not
+    # valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidCloudWatchLogsLogGroupArnException AWS API Documentation
+    #
+    class InvalidCloudWatchLogsLogGroupArnException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided role is not valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidCloudWatchLogsRoleArnException AWS API Documentation
+    #
+    class InvalidCloudWatchLogsRoleArnException < Aws::EmptyStructure; end
+
+    # Occurs if an event category that is not valid is specified as a value
+    # of `EventCategory`.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidEventCategoryException AWS API Documentation
+    #
+    class InvalidEventCategoryException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the `PutEventSelectors` operation is
+    # called with a number of event selectors or data resources that is not
+    # valid. The combination of event selectors and data resources is not
+    # valid. A trail can have up to 5 event selectors. A trail is limited to
+    # 250 data resources. These data resources can be distributed across
+    # event selectors, but the overall total cannot exceed 250.
+    #
+    # You can:
+    #
+    # * Specify a valid number of event selectors (1 to 5) for a trail.
+    #
+    # * Specify a valid number of data resources (1 to 250) for an event
+    #   selector. The limit of number of resources on an individual event
+    #   selector is configurable up to 250. However, this upper limit is
+    #   allowed only if the total number of data resources does not exceed
+    #   250 across all event selectors for a trail.
+    #
+    # * Specify a valid value for a parameter. For example, specifying the
+    #   `ReadWriteType` parameter with a value of `read-only` is invalid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidEventSelectorsException AWS API Documentation
+    #
+    class InvalidEventSelectorsException < Aws::EmptyStructure; end
+
+    # This exception is thrown when an operation is called on a trail from a
+    # region other than the region in which the trail was created.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidHomeRegionException AWS API Documentation
+    #
+    class InvalidHomeRegionException < Aws::EmptyStructure; end
+
+    # The formatting or syntax of the `InsightSelectors` JSON statement in
+    # your `PutInsightSelectors` or `GetInsightSelectors` request is not
+    # valid, or the specified insight type in the `InsightSelectors`
+    # statement is not a valid insight type.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidInsightSelectorsException AWS API Documentation
+    #
+    class InvalidInsightSelectorsException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the KMS key ARN is invalid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidKmsKeyIdException AWS API Documentation
+    #
+    class InvalidKmsKeyIdException < Aws::EmptyStructure; end
+
+    # Occurs when an invalid lookup attribute is specified.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidLookupAttributesException AWS API Documentation
+    #
+    class InvalidLookupAttributesException < Aws::EmptyStructure; end
+
+    # This exception is thrown if the limit specified is invalid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidMaxResultsException AWS API Documentation
+    #
+    class InvalidMaxResultsException < Aws::EmptyStructure; end
+
+    # Invalid token or token that was previously used in a request with
+    # different parameters. This exception is thrown if the token is
+    # invalid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidNextTokenException AWS API Documentation
+    #
+    class InvalidNextTokenException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the combination of parameters provided
+    # is not valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidParameterCombinationException AWS API Documentation
+    #
+    class InvalidParameterCombinationException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided S3 bucket name is not
+    # valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidS3BucketNameException AWS API Documentation
+    #
+    class InvalidS3BucketNameException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided S3 prefix is not valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidS3PrefixException AWS API Documentation
+    #
+    class InvalidS3PrefixException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided SNS topic name is not
+    # valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidSnsTopicNameException AWS API Documentation
+    #
+    class InvalidSnsTopicNameException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the specified tag key or values are not
+    # valid. It can also occur if there are duplicate tags or too many tags
+    # on the resource.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidTagParameterException AWS API Documentation
+    #
+    class InvalidTagParameterException < Aws::EmptyStructure; end
+
+    # Occurs if the timestamp values are invalid. Either the start time
+    # occurs after the end time or the time range is outside the range of
+    # possible values.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidTimeRangeException AWS API Documentation
+    #
+    class InvalidTimeRangeException < Aws::EmptyStructure; end
+
+    # Reserved for future use.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidTokenException AWS API Documentation
+    #
+    class InvalidTokenException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the provided trail name is not valid.
+    # Trail names must meet the following requirements:
+    #
+    # * Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.),
+    #   underscores (\_), or dashes (-)
+    #
+    # * Start with a letter or number, and end with a letter or number
+    #
+    # * Be between 3 and 128 characters
+    #
+    # * Have no adjacent periods, underscores or dashes. Names like
+    #   `my-_namespace` and `my--namespace` are invalid.
+    #
+    # * Not be in IP address format (for example, 192.168.5.4)
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidTrailNameException AWS API Documentation
+    #
+    class InvalidTrailNameException < Aws::EmptyStructure; end
+
+    # This exception is thrown when there is an issue with the specified KMS
+    # key and the trail can’t be updated.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsException AWS API Documentation
+    #
+    class KmsException < Aws::EmptyStructure; end
+
+    # This exception is no longer in use.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsKeyDisabledException AWS API Documentation
+    #
+    class KmsKeyDisabledException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the KMS key does not exist, or when the
+    # S3 bucket and the KMS key are not in the same region.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsKeyNotFoundException AWS API Documentation
+    #
+    class KmsKeyNotFoundException < Aws::EmptyStructure; end
+
     # Requests the public keys for a specified time range.
     #
     # @note When making an API call, you may pass ListPublicKeysRequest
@@ -1014,6 +1280,7 @@ module Aws::CloudTrail
       :start_time,
       :end_time,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1037,6 +1304,7 @@ module Aws::CloudTrail
     class ListPublicKeysResponse < Struct.new(
       :public_key_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1066,6 +1334,7 @@ module Aws::CloudTrail
     class ListTagsRequest < Struct.new(
       :resource_id_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1085,6 +1354,7 @@ module Aws::CloudTrail
     class ListTagsResponse < Struct.new(
       :resource_tag_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1108,6 +1378,7 @@ module Aws::CloudTrail
     #
     class ListTrailsRequest < Struct.new(
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1130,6 +1401,7 @@ module Aws::CloudTrail
     class ListTrailsResponse < Struct.new(
       :trails,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1156,6 +1428,7 @@ module Aws::CloudTrail
     class LookupAttribute < Struct.new(
       :attribute_key,
       :attribute_value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1225,6 +1498,7 @@ module Aws::CloudTrail
       :event_category,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1250,9 +1524,57 @@ module Aws::CloudTrail
     class LookupEventsResponse < Struct.new(
       :events,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the maximum number of trails is reached.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/MaximumNumberOfTrailsExceededException AWS API Documentation
+    #
+    class MaximumNumberOfTrailsExceededException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the AWS account making the request to
+    # create or update an organization trail is not the master account for
+    # an organization in AWS Organizations. For more information, see
+    # [Prepare For Creating a Trail For Your Organization][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/NotOrganizationMasterAccountException AWS API Documentation
+    #
+    class NotOrganizationMasterAccountException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the requested operation is not
+    # permitted.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/OperationNotPermittedException AWS API Documentation
+    #
+    class OperationNotPermittedException < Aws::EmptyStructure; end
+
+    # This exception is thrown when AWS Organizations is not configured to
+    # support all features. All features must be enabled in AWS Organization
+    # to support creating an organization trail. For more information, see
+    # [Prepare For Creating a Trail For Your Organization][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/OrganizationNotInAllFeaturesModeException AWS API Documentation
+    #
+    class OrganizationNotInAllFeaturesModeException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the request is made from an AWS account
+    # that is not a member of an organization. To make this request, sign in
+    # using the credentials of an account that belongs to an organization.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/OrganizationsNotInUseException AWS API Documentation
+    #
+    class OrganizationsNotInUseException < Aws::EmptyStructure; end
+
     # Contains information about a returned public key.
     #
     # @!attribute [rw] value
@@ -1278,6 +1600,7 @@ module Aws::CloudTrail
       :validity_start_time,
       :validity_end_time,
       :fingerprint)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1332,6 +1655,7 @@ module Aws::CloudTrail
     class PutEventSelectorsRequest < Struct.new(
       :trail_name,
       :event_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1351,6 +1675,7 @@ module Aws::CloudTrail
     class PutEventSelectorsResponse < Struct.new(
       :trail_arn,
       :event_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1382,6 +1707,7 @@ module Aws::CloudTrail
     class PutInsightSelectorsRequest < Struct.new(
       :trail_name,
       :insight_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1401,6 +1727,7 @@ module Aws::CloudTrail
     class PutInsightSelectorsResponse < Struct.new(
       :trail_arn,
       :insight_selectors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1435,6 +1762,7 @@ module Aws::CloudTrail
     class RemoveTagsRequest < Struct.new(
       :resource_id,
       :tags_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1472,9 +1800,16 @@ module Aws::CloudTrail
     class Resource < Struct.new(
       :resource_type,
       :resource_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the specified resource is not found.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ResourceNotFoundException AWS API Documentation
+    #
+    class ResourceNotFoundException < Aws::EmptyStructure; end
+
     # A resource tag.
     #
     # @!attribute [rw] resource_id
@@ -1490,9 +1825,23 @@ module Aws::CloudTrail
     class ResourceTag < Struct.new(
       :resource_id,
       :tags_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the specified resource type is not
+    # supported by CloudTrail.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ResourceTypeNotSupportedException AWS API Documentation
+    #
+    class ResourceTypeNotSupportedException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the specified S3 bucket does not exist.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/S3BucketDoesNotExistException AWS API Documentation
+    #
+    class S3BucketDoesNotExistException < Aws::EmptyStructure; end
+
     # The request to CloudTrail to start logging AWS API calls for an
     # account.
     #
@@ -1514,6 +1863,7 @@ module Aws::CloudTrail
     #
     class StartLoggingRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1546,6 +1896,7 @@ module Aws::CloudTrail
     #
     class StopLoggingRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1583,9 +1934,17 @@ module Aws::CloudTrail
     class Tag < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # The number of tags per trail has exceeded the permitted amount.
+    # Currently, the limit is 50.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/TagsLimitExceededException AWS API Documentation
+    #
+    class TagsLimitExceededException < Aws::EmptyStructure; end
+
     # The settings for a trail.
     #
     # @!attribute [rw] name
@@ -1699,9 +2058,16 @@ module Aws::CloudTrail
       :has_custom_event_selectors,
       :has_insight_selectors,
       :is_organization_trail)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the specified trail already exists.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/TrailAlreadyExistsException AWS API Documentation
+    #
+    class TrailAlreadyExistsException < Aws::EmptyStructure; end
+
     # Information about a CloudTrail trail, including the trail's name,
     # home region, and Amazon Resource Name (ARN).
     #
@@ -1723,9 +2089,30 @@ module Aws::CloudTrail
       :trail_arn,
       :name,
       :home_region)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # This exception is thrown when the trail with the given name is not
+    # found.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/TrailNotFoundException AWS API Documentation
+    #
+    class TrailNotFoundException < Aws::EmptyStructure; end
+
+    # This exception is no longer in use.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/TrailNotProvidedException AWS API Documentation
+    #
+    class TrailNotProvidedException < Aws::EmptyStructure; end
+
+    # This exception is thrown when the requested operation is not
+    # supported.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/UnsupportedOperationException AWS API Documentation
+    #
+    class UnsupportedOperationException < Aws::EmptyStructure; end
+
     # Specifies settings to update for the trail.
     #
     # @note When making an API call, you may pass UpdateTrailRequest
@@ -1880,6 +2267,7 @@ module Aws::CloudTrail
       :cloud_watch_logs_role_arn,
       :kms_key_id,
       :is_organization_trail)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1975,6 +2363,7 @@ module Aws::CloudTrail
       :cloud_watch_logs_role_arn,
       :kms_key_id,
       :is_organization_trail)
+      SENSITIVE = []
       include Aws::Structure
     end