aws-sdk-cloudtrail 1.27.0 → 1.32.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 13c4214be957bd6ade90067b2f21628d382df06f8a489cbcc564f66a363c5f2c
4
- data.tar.gz: 7f58aa648c2b76d37051d174c08212a5fc52606e568448a3970c21e555602073
3
+ metadata.gz: 8de0ebf64d173e8d803fd03099b9db03a9f2daca5315eff968e632e6b6b61cfe
4
+ data.tar.gz: bf5eeee8372c18d3a2247ace8b2e9fb2f49864f3102fd722397f91119cc277d2
5
5
  SHA512:
6
- metadata.gz: 5083200930c3143d81b3bec994af504d63e9b02b0885d529cc82aad256e027da1e0858bf6f327c627b88e1af069a3329217633e4b9883703125d93e97b905482
7
- data.tar.gz: '09e4a0159a16f09e6df5386a260f75df11cb739d7c1661485b3a275926697f86a724c6f3e41e5a042e1a1816b87eade72eec483851ca731bebf70758f483e3e1'
6
+ metadata.gz: 34e5eb79e04eac82110cb1738bd58c48677cb8d7fe1b78242e19adf1d1d741acc2c91c41aa3f12a394a05bfd806fa32eaede29d193ed43d028494c4413856de7
7
+ data.tar.gz: 49a0e0d6b655537de3447db0febe4827527f521ee98a2f90fe423c1ec3446b894d9268666c39cb01dff6a1976734c839d1702d94804de6ac9f704887d762f98d
@@ -7,6 +7,7 @@
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
10
+
10
11
  require 'aws-sdk-core'
11
12
  require 'aws-sigv4'
12
13
 
@@ -47,6 +48,6 @@ require_relative 'aws-sdk-cloudtrail/customizations'
47
48
  # @!group service
48
49
  module Aws::CloudTrail
49
50
 
50
- GEM_VERSION = '1.27.0'
51
+ GEM_VERSION = '1.32.0'
51
52
 
52
53
  end
@@ -689,6 +689,7 @@ module Aws::CloudTrail
689
689
  #
690
690
  # * {Types::GetEventSelectorsResponse#trail_arn #trail_arn} => String
691
691
  # * {Types::GetEventSelectorsResponse#event_selectors #event_selectors} => Array<Types::EventSelector>
692
+ # * {Types::GetEventSelectorsResponse#advanced_event_selectors #advanced_event_selectors} => Array<Types::AdvancedEventSelector>
692
693
  #
693
694
  # @example Request syntax with placeholder values
694
695
  #
@@ -708,6 +709,22 @@ module Aws::CloudTrail
708
709
  # resp.event_selectors[0].data_resources[0].values[0] #=> String
709
710
  # resp.event_selectors[0].exclude_management_event_sources #=> Array
710
711
  # resp.event_selectors[0].exclude_management_event_sources[0] #=> String
712
+ # resp.advanced_event_selectors #=> Array
713
+ # resp.advanced_event_selectors[0].name #=> String
714
+ # resp.advanced_event_selectors[0].field_selectors #=> Array
715
+ # resp.advanced_event_selectors[0].field_selectors[0].field #=> String
716
+ # resp.advanced_event_selectors[0].field_selectors[0].equals #=> Array
717
+ # resp.advanced_event_selectors[0].field_selectors[0].equals[0] #=> String
718
+ # resp.advanced_event_selectors[0].field_selectors[0].starts_with #=> Array
719
+ # resp.advanced_event_selectors[0].field_selectors[0].starts_with[0] #=> String
720
+ # resp.advanced_event_selectors[0].field_selectors[0].ends_with #=> Array
721
+ # resp.advanced_event_selectors[0].field_selectors[0].ends_with[0] #=> String
722
+ # resp.advanced_event_selectors[0].field_selectors[0].not_equals #=> Array
723
+ # resp.advanced_event_selectors[0].field_selectors[0].not_equals[0] #=> String
724
+ # resp.advanced_event_selectors[0].field_selectors[0].not_starts_with #=> Array
725
+ # resp.advanced_event_selectors[0].field_selectors[0].not_starts_with[0] #=> String
726
+ # resp.advanced_event_selectors[0].field_selectors[0].not_ends_with #=> Array
727
+ # resp.advanced_event_selectors[0].field_selectors[0].not_ends_with[0] #=> String
711
728
  #
712
729
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventSelectors AWS API Documentation
713
730
  #
@@ -1065,8 +1082,8 @@ module Aws::CloudTrail
1065
1082
  # 50, with a maximum of 50 possible. The response includes a token that
1066
1083
  # you can use to get the next page of results.
1067
1084
  #
1068
- # The rate of lookup requests is limited to two per second per account.
1069
- # If this limit is exceeded, a throttling error occurs.
1085
+ # The rate of lookup requests is limited to two per second, per account,
1086
+ # per region. If this limit is exceeded, a throttling error occurs.
1070
1087
  #
1071
1088
  #
1072
1089
  #
@@ -1152,16 +1169,17 @@ module Aws::CloudTrail
1152
1169
  req.send_request(options)
1153
1170
  end
1154
1171
 
1155
- # Configures an event selector for your trail. Use event selectors to
1156
- # further specify the management and data event settings for your trail.
1157
- # By default, trails created without specific event selectors will be
1158
- # configured to log all read and write management events, and no data
1159
- # events.
1172
+ # Configures an event selector or advanced event selectors for your
1173
+ # trail. Use event selectors or advanced event selectors to specify
1174
+ # management and data event settings for your trail. By default, trails
1175
+ # created without specific event selectors are configured to log all
1176
+ # read and write management events, and no data events.
1160
1177
  #
1161
1178
  # When an event occurs in your account, CloudTrail evaluates the event
1162
- # selectors in all trails. For each trail, if the event matches any
1163
- # event selector, the trail processes and logs the event. If the event
1164
- # doesn't match any event selector, the trail doesn't log the event.
1179
+ # selectors or advanced event selectors in all trails. For each trail,
1180
+ # if the event matches any event selector, the trail processes and logs
1181
+ # the event. If the event doesn't match any event selector, the trail
1182
+ # doesn't log the event.
1165
1183
  #
1166
1184
  # Example
1167
1185
  #
@@ -1177,21 +1195,30 @@ module Aws::CloudTrail
1177
1195
  # 4. The `RunInstances` is a write-only event and it matches your event
1178
1196
  # selector. The trail logs the event.
1179
1197
  #
1180
- # 5. The `GetConsoleOutput` is a read-only event but it doesn't match
1198
+ # 5. The `GetConsoleOutput` is a read-only event that doesn't match
1181
1199
  # your event selector. The trail doesn't log the event.
1182
1200
  #
1183
1201
  # The `PutEventSelectors` operation must be called from the region in
1184
1202
  # which the trail was created; otherwise, an
1185
- # `InvalidHomeRegionException` is thrown.
1203
+ # `InvalidHomeRegionException` exception is thrown.
1186
1204
  #
1187
1205
  # You can configure up to five event selectors for each trail. For more
1188
- # information, see [Logging Data and Management Events for Trails ][1]
1189
- # and [Limits in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1206
+ # information, see [Logging data and management events for trails ][1]
1207
+ # and [Quotas in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1208
+ #
1209
+ # You can add advanced event selectors, and conditions for your advanced
1210
+ # event selectors, up to a maximum of 500 values for all conditions and
1211
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1212
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1213
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1214
+ # information about advanced event selectors, see [Logging data events
1215
+ # for trails][3] in the *AWS CloudTrail User Guide*.
1190
1216
  #
1191
1217
  #
1192
1218
  #
1193
1219
  # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html
1194
1220
  # [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
1221
+ # [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1195
1222
  #
1196
1223
  # @option params [required, String] :trail_name
1197
1224
  # Specifies the name of the trail or trail ARN. If you specify a trail
@@ -1213,20 +1240,38 @@ module Aws::CloudTrail
1213
1240
  #
1214
1241
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
1215
1242
  #
1216
- # @option params [required, Array<Types::EventSelector>] :event_selectors
1243
+ # @option params [Array<Types::EventSelector>] :event_selectors
1217
1244
  # Specifies the settings for your event selectors. You can configure up
1218
- # to five event selectors for a trail.
1245
+ # to five event selectors for a trail. You can use either
1246
+ # `EventSelectors` or `AdvancedEventSelectors` in a `PutEventSelectors`
1247
+ # request, but not both. If you apply `EventSelectors` to a trail, any
1248
+ # existing `AdvancedEventSelectors` are overwritten.
1249
+ #
1250
+ # @option params [Array<Types::AdvancedEventSelector>] :advanced_event_selectors
1251
+ # Specifies the settings for advanced event selectors. You can add
1252
+ # advanced event selectors, and conditions for your advanced event
1253
+ # selectors, up to a maximum of 500 values for all conditions and
1254
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1255
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1256
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1257
+ # information about advanced event selectors, see [Logging data events
1258
+ # for trails][1] in the *AWS CloudTrail User Guide*.
1259
+ #
1260
+ #
1261
+ #
1262
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1219
1263
  #
1220
1264
  # @return [Types::PutEventSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1221
1265
  #
1222
1266
  # * {Types::PutEventSelectorsResponse#trail_arn #trail_arn} => String
1223
1267
  # * {Types::PutEventSelectorsResponse#event_selectors #event_selectors} => Array&lt;Types::EventSelector&gt;
1268
+ # * {Types::PutEventSelectorsResponse#advanced_event_selectors #advanced_event_selectors} => Array&lt;Types::AdvancedEventSelector&gt;
1224
1269
  #
1225
1270
  # @example Request syntax with placeholder values
1226
1271
  #
1227
1272
  # resp = client.put_event_selectors({
1228
1273
  # trail_name: "String", # required
1229
- # event_selectors: [ # required
1274
+ # event_selectors: [
1230
1275
  # {
1231
1276
  # read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
1232
1277
  # include_management_events: false,
@@ -1239,6 +1284,22 @@ module Aws::CloudTrail
1239
1284
  # exclude_management_event_sources: ["String"],
1240
1285
  # },
1241
1286
  # ],
1287
+ # advanced_event_selectors: [
1288
+ # {
1289
+ # name: "SelectorName",
1290
+ # field_selectors: [ # required
1291
+ # {
1292
+ # field: "SelectorField", # required
1293
+ # equals: ["OperatorValue"],
1294
+ # starts_with: ["OperatorValue"],
1295
+ # ends_with: ["OperatorValue"],
1296
+ # not_equals: ["OperatorValue"],
1297
+ # not_starts_with: ["OperatorValue"],
1298
+ # not_ends_with: ["OperatorValue"],
1299
+ # },
1300
+ # ],
1301
+ # },
1302
+ # ],
1242
1303
  # })
1243
1304
  #
1244
1305
  # @example Response structure
@@ -1253,6 +1314,22 @@ module Aws::CloudTrail
1253
1314
  # resp.event_selectors[0].data_resources[0].values[0] #=> String
1254
1315
  # resp.event_selectors[0].exclude_management_event_sources #=> Array
1255
1316
  # resp.event_selectors[0].exclude_management_event_sources[0] #=> String
1317
+ # resp.advanced_event_selectors #=> Array
1318
+ # resp.advanced_event_selectors[0].name #=> String
1319
+ # resp.advanced_event_selectors[0].field_selectors #=> Array
1320
+ # resp.advanced_event_selectors[0].field_selectors[0].field #=> String
1321
+ # resp.advanced_event_selectors[0].field_selectors[0].equals #=> Array
1322
+ # resp.advanced_event_selectors[0].field_selectors[0].equals[0] #=> String
1323
+ # resp.advanced_event_selectors[0].field_selectors[0].starts_with #=> Array
1324
+ # resp.advanced_event_selectors[0].field_selectors[0].starts_with[0] #=> String
1325
+ # resp.advanced_event_selectors[0].field_selectors[0].ends_with #=> Array
1326
+ # resp.advanced_event_selectors[0].field_selectors[0].ends_with[0] #=> String
1327
+ # resp.advanced_event_selectors[0].field_selectors[0].not_equals #=> Array
1328
+ # resp.advanced_event_selectors[0].field_selectors[0].not_equals[0] #=> String
1329
+ # resp.advanced_event_selectors[0].field_selectors[0].not_starts_with #=> Array
1330
+ # resp.advanced_event_selectors[0].field_selectors[0].not_starts_with[0] #=> String
1331
+ # resp.advanced_event_selectors[0].field_selectors[0].not_ends_with #=> Array
1332
+ # resp.advanced_event_selectors[0].field_selectors[0].not_ends_with[0] #=> String
1256
1333
  #
1257
1334
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectors AWS API Documentation
1258
1335
  #
@@ -1593,7 +1670,7 @@ module Aws::CloudTrail
1593
1670
  params: params,
1594
1671
  config: config)
1595
1672
  context[:gem_name] = 'aws-sdk-cloudtrail'
1596
- context[:gem_version] = '1.27.0'
1673
+ context[:gem_version] = '1.32.0'
1597
1674
  Seahorse::Client::Request.new(handlers, context)
1598
1675
  end
1599
1676
 
@@ -15,10 +15,15 @@ module Aws::CloudTrail
15
15
 
16
16
  AddTagsRequest = Shapes::StructureShape.new(name: 'AddTagsRequest')
17
17
  AddTagsResponse = Shapes::StructureShape.new(name: 'AddTagsResponse')
18
+ AdvancedEventSelector = Shapes::StructureShape.new(name: 'AdvancedEventSelector')
19
+ AdvancedEventSelectors = Shapes::ListShape.new(name: 'AdvancedEventSelectors')
20
+ AdvancedFieldSelector = Shapes::StructureShape.new(name: 'AdvancedFieldSelector')
21
+ AdvancedFieldSelectors = Shapes::ListShape.new(name: 'AdvancedFieldSelectors')
18
22
  Boolean = Shapes::BooleanShape.new(name: 'Boolean')
19
23
  ByteBuffer = Shapes::BlobShape.new(name: 'ByteBuffer')
20
24
  CloudTrailARNInvalidException = Shapes::StructureShape.new(name: 'CloudTrailARNInvalidException')
21
25
  CloudTrailAccessNotEnabledException = Shapes::StructureShape.new(name: 'CloudTrailAccessNotEnabledException')
26
+ CloudTrailInvalidClientTokenIdException = Shapes::StructureShape.new(name: 'CloudTrailInvalidClientTokenIdException')
22
27
  CloudWatchLogsDeliveryUnavailableException = Shapes::StructureShape.new(name: 'CloudWatchLogsDeliveryUnavailableException')
23
28
  CreateTrailRequest = Shapes::StructureShape.new(name: 'CreateTrailRequest')
24
29
  CreateTrailResponse = Shapes::StructureShape.new(name: 'CreateTrailResponse')
@@ -89,6 +94,8 @@ module Aws::CloudTrail
89
94
  NextToken = Shapes::StringShape.new(name: 'NextToken')
90
95
  NotOrganizationMasterAccountException = Shapes::StructureShape.new(name: 'NotOrganizationMasterAccountException')
91
96
  OperationNotPermittedException = Shapes::StructureShape.new(name: 'OperationNotPermittedException')
97
+ Operator = Shapes::ListShape.new(name: 'Operator')
98
+ OperatorValue = Shapes::StringShape.new(name: 'OperatorValue')
92
99
  OrganizationNotInAllFeaturesModeException = Shapes::StructureShape.new(name: 'OrganizationNotInAllFeaturesModeException')
93
100
  OrganizationsNotInUseException = Shapes::StructureShape.new(name: 'OrganizationsNotInUseException')
94
101
  PublicKey = Shapes::StructureShape.new(name: 'PublicKey')
@@ -108,6 +115,8 @@ module Aws::CloudTrail
108
115
  ResourceTagList = Shapes::ListShape.new(name: 'ResourceTagList')
109
116
  ResourceTypeNotSupportedException = Shapes::StructureShape.new(name: 'ResourceTypeNotSupportedException')
110
117
  S3BucketDoesNotExistException = Shapes::StructureShape.new(name: 'S3BucketDoesNotExistException')
118
+ SelectorField = Shapes::StringShape.new(name: 'SelectorField')
119
+ SelectorName = Shapes::StringShape.new(name: 'SelectorName')
111
120
  StartLoggingRequest = Shapes::StructureShape.new(name: 'StartLoggingRequest')
112
121
  StartLoggingResponse = Shapes::StructureShape.new(name: 'StartLoggingResponse')
113
122
  StopLoggingRequest = Shapes::StructureShape.new(name: 'StopLoggingRequest')
@@ -134,10 +143,29 @@ module Aws::CloudTrail
134
143
 
135
144
  AddTagsResponse.struct_class = Types::AddTagsResponse
136
145
 
146
+ AdvancedEventSelector.add_member(:name, Shapes::ShapeRef.new(shape: SelectorName, location_name: "Name"))
147
+ AdvancedEventSelector.add_member(:field_selectors, Shapes::ShapeRef.new(shape: AdvancedFieldSelectors, required: true, location_name: "FieldSelectors"))
148
+ AdvancedEventSelector.struct_class = Types::AdvancedEventSelector
149
+
150
+ AdvancedEventSelectors.member = Shapes::ShapeRef.new(shape: AdvancedEventSelector)
151
+
152
+ AdvancedFieldSelector.add_member(:field, Shapes::ShapeRef.new(shape: SelectorField, required: true, location_name: "Field"))
153
+ AdvancedFieldSelector.add_member(:equals, Shapes::ShapeRef.new(shape: Operator, location_name: "Equals"))
154
+ AdvancedFieldSelector.add_member(:starts_with, Shapes::ShapeRef.new(shape: Operator, location_name: "StartsWith"))
155
+ AdvancedFieldSelector.add_member(:ends_with, Shapes::ShapeRef.new(shape: Operator, location_name: "EndsWith"))
156
+ AdvancedFieldSelector.add_member(:not_equals, Shapes::ShapeRef.new(shape: Operator, location_name: "NotEquals"))
157
+ AdvancedFieldSelector.add_member(:not_starts_with, Shapes::ShapeRef.new(shape: Operator, location_name: "NotStartsWith"))
158
+ AdvancedFieldSelector.add_member(:not_ends_with, Shapes::ShapeRef.new(shape: Operator, location_name: "NotEndsWith"))
159
+ AdvancedFieldSelector.struct_class = Types::AdvancedFieldSelector
160
+
161
+ AdvancedFieldSelectors.member = Shapes::ShapeRef.new(shape: AdvancedFieldSelector)
162
+
137
163
  CloudTrailARNInvalidException.struct_class = Types::CloudTrailARNInvalidException
138
164
 
139
165
  CloudTrailAccessNotEnabledException.struct_class = Types::CloudTrailAccessNotEnabledException
140
166
 
167
+ CloudTrailInvalidClientTokenIdException.struct_class = Types::CloudTrailInvalidClientTokenIdException
168
+
141
169
  CloudWatchLogsDeliveryUnavailableException.struct_class = Types::CloudWatchLogsDeliveryUnavailableException
142
170
 
143
171
  CreateTrailRequest.add_member(:name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Name"))
@@ -217,6 +245,7 @@ module Aws::CloudTrail
217
245
 
218
246
  GetEventSelectorsResponse.add_member(:trail_arn, Shapes::ShapeRef.new(shape: String, location_name: "TrailARN"))
219
247
  GetEventSelectorsResponse.add_member(:event_selectors, Shapes::ShapeRef.new(shape: EventSelectors, location_name: "EventSelectors"))
248
+ GetEventSelectorsResponse.add_member(:advanced_event_selectors, Shapes::ShapeRef.new(shape: AdvancedEventSelectors, location_name: "AdvancedEventSelectors"))
220
249
  GetEventSelectorsResponse.struct_class = Types::GetEventSelectorsResponse
221
250
 
222
251
  GetInsightSelectorsRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TrailName"))
@@ -359,6 +388,8 @@ module Aws::CloudTrail
359
388
 
360
389
  OperationNotPermittedException.struct_class = Types::OperationNotPermittedException
361
390
 
391
+ Operator.member = Shapes::ShapeRef.new(shape: OperatorValue)
392
+
362
393
  OrganizationNotInAllFeaturesModeException.struct_class = Types::OrganizationNotInAllFeaturesModeException
363
394
 
364
395
  OrganizationsNotInUseException.struct_class = Types::OrganizationsNotInUseException
@@ -372,11 +403,13 @@ module Aws::CloudTrail
372
403
  PublicKeyList.member = Shapes::ShapeRef.new(shape: PublicKey)
373
404
 
374
405
  PutEventSelectorsRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TrailName"))
375
- PutEventSelectorsRequest.add_member(:event_selectors, Shapes::ShapeRef.new(shape: EventSelectors, required: true, location_name: "EventSelectors"))
406
+ PutEventSelectorsRequest.add_member(:event_selectors, Shapes::ShapeRef.new(shape: EventSelectors, location_name: "EventSelectors"))
407
+ PutEventSelectorsRequest.add_member(:advanced_event_selectors, Shapes::ShapeRef.new(shape: AdvancedEventSelectors, location_name: "AdvancedEventSelectors"))
376
408
  PutEventSelectorsRequest.struct_class = Types::PutEventSelectorsRequest
377
409
 
378
410
  PutEventSelectorsResponse.add_member(:trail_arn, Shapes::ShapeRef.new(shape: String, location_name: "TrailARN"))
379
411
  PutEventSelectorsResponse.add_member(:event_selectors, Shapes::ShapeRef.new(shape: EventSelectors, location_name: "EventSelectors"))
412
+ PutEventSelectorsResponse.add_member(:advanced_event_selectors, Shapes::ShapeRef.new(shape: AdvancedEventSelectors, location_name: "AdvancedEventSelectors"))
380
413
  PutEventSelectorsResponse.struct_class = Types::PutEventSelectorsResponse
381
414
 
382
415
  PutInsightSelectorsRequest.add_member(:trail_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TrailName"))
@@ -565,6 +598,7 @@ module Aws::CloudTrail
565
598
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
566
599
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
567
600
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
601
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
568
602
  end)
569
603
 
570
604
  api.add_operation(:delete_trail, Seahorse::Model::Operation.new.tap do |o|
@@ -827,6 +861,7 @@ module Aws::CloudTrail
827
861
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
828
862
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
829
863
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
864
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
830
865
  end)
831
866
  end
832
867
 
@@ -29,6 +29,7 @@ module Aws::CloudTrail
29
29
  # ## Error Classes
30
30
  # * {CloudTrailARNInvalidException}
31
31
  # * {CloudTrailAccessNotEnabledException}
32
+ # * {CloudTrailInvalidClientTokenIdException}
32
33
  # * {CloudWatchLogsDeliveryUnavailableException}
33
34
  # * {InsightNotEnabledException}
34
35
  # * {InsufficientDependencyServiceAccessPermissionException}
@@ -96,6 +97,16 @@ module Aws::CloudTrail
96
97
  end
97
98
  end
98
99
 
100
+ class CloudTrailInvalidClientTokenIdException < ServiceError
101
+
102
+ # @param [Seahorse::Client::RequestContext] context
103
+ # @param [String] message
104
+ # @param [Aws::CloudTrail::Types::CloudTrailInvalidClientTokenIdException] data
105
+ def initialize(context, message, data = Aws::EmptyStructure.new)
106
+ super(context, message, data)
107
+ end
108
+ end
109
+
99
110
  class CloudWatchLogsDeliveryUnavailableException < ServiceError
100
111
 
101
112
  # @param [Seahorse::Client::RequestContext] context
@@ -52,6 +52,178 @@ module Aws::CloudTrail
52
52
  #
53
53
  class AddTagsResponse < Aws::EmptyStructure; end
54
54
 
55
+ # Advanced event selectors let you create fine-grained selectors for the
56
+ # following AWS CloudTrail event record fields. They help you control
57
+ # costs by logging only those events that are important to you. For more
58
+ # information about advanced event selectors, see [Logging data events
59
+ # for trails][1] in the *AWS CloudTrail User Guide*.
60
+ #
61
+ # * `readOnly`
62
+ #
63
+ # * `eventSource`
64
+ #
65
+ # * `eventName`
66
+ #
67
+ # * `eventCategory`
68
+ #
69
+ # * `resources.type`
70
+ #
71
+ # * `resources.ARN`
72
+ #
73
+ # You cannot apply both event selectors and advanced event selectors to
74
+ # a trail.
75
+ #
76
+ #
77
+ #
78
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
79
+ #
80
+ # @note When making an API call, you may pass AdvancedEventSelector
81
+ # data as a hash:
82
+ #
83
+ # {
84
+ # name: "SelectorName",
85
+ # field_selectors: [ # required
86
+ # {
87
+ # field: "SelectorField", # required
88
+ # equals: ["OperatorValue"],
89
+ # starts_with: ["OperatorValue"],
90
+ # ends_with: ["OperatorValue"],
91
+ # not_equals: ["OperatorValue"],
92
+ # not_starts_with: ["OperatorValue"],
93
+ # not_ends_with: ["OperatorValue"],
94
+ # },
95
+ # ],
96
+ # }
97
+ #
98
+ # @!attribute [rw] name
99
+ # An optional, descriptive name for an advanced event selector, such
100
+ # as "Log data events for only two S3 buckets".
101
+ # @return [String]
102
+ #
103
+ # @!attribute [rw] field_selectors
104
+ # Contains all selector statements in an advanced event selector.
105
+ # @return [Array<Types::AdvancedFieldSelector>]
106
+ #
107
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedEventSelector AWS API Documentation
108
+ #
109
+ class AdvancedEventSelector < Struct.new(
110
+ :name,
111
+ :field_selectors)
112
+ SENSITIVE = []
113
+ include Aws::Structure
114
+ end
115
+
116
+ # A single selector statement in an advanced event selector.
117
+ #
118
+ # @note When making an API call, you may pass AdvancedFieldSelector
119
+ # data as a hash:
120
+ #
121
+ # {
122
+ # field: "SelectorField", # required
123
+ # equals: ["OperatorValue"],
124
+ # starts_with: ["OperatorValue"],
125
+ # ends_with: ["OperatorValue"],
126
+ # not_equals: ["OperatorValue"],
127
+ # not_starts_with: ["OperatorValue"],
128
+ # not_ends_with: ["OperatorValue"],
129
+ # }
130
+ #
131
+ # @!attribute [rw] field
132
+ # A field in an event record on which to filter events to be logged.
133
+ # Supported fields include `readOnly`, `eventCategory`, `eventSource`
134
+ # (for management events), `eventName`, `resources.type`, and
135
+ # `resources.ARN`.
136
+ #
137
+ # * <b> <code>readOnly</code> </b> - Optional. Can be set to `Equals`
138
+ # a value of `true` or `false`. A value of `false` logs both `read`
139
+ # and `write` events.
140
+ #
141
+ # * <b> <code>eventSource</code> </b> - For filtering management
142
+ # events only. This can be set only to `NotEquals`
143
+ # `kms.amazonaws.com`.
144
+ #
145
+ # * <b> <code>eventName</code> </b> - Can use any operator. You can
146
+ # use it to filter in or filter out any data event logged to
147
+ # CloudTrail, such as `PutBucket`. You can have multiple values for
148
+ # this field, separated by commas.
149
+ #
150
+ # * <b> <code>eventCategory</code> </b> - This is required. It must be
151
+ # set to `Equals`, and the value must be `Management` or `Data`.
152
+ #
153
+ # * <b> <code>resources.type</code> </b> - This field is required.
154
+ # `resources.type` can only use the `Equals` operator, and the value
155
+ # can be one of the following: `AWS::S3::Object` or
156
+ # `AWS::Lambda::Function`. You can have only one `resources.type`
157
+ # field per selector. To log data events on more than one resource
158
+ # type, add another selector.
159
+ #
160
+ # * <b> <code>resources.ARN</code> </b> - You can use any operator
161
+ # with resources.ARN, but if you use `Equals` or `NotEquals`, the
162
+ # value must exactly match the ARN of a valid resource of the type
163
+ # you've specified in the template as the value of resources.type.
164
+ # For example, if resources.type equals `AWS::S3::Object`, the ARN
165
+ # must be in one of the following formats. The trailing slash is
166
+ # intentional; do not exclude it.
167
+ #
168
+ # * `arn:partition:s3:::bucket_name/`
169
+ #
170
+ # * `arn:partition:s3:::bucket_name/object_or_file_name/`
171
+ #
172
+ # When resources.type equals `AWS::Lambda::Function`, and the
173
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
174
+ # following format:
175
+ #
176
+ # * `arn:partition:lambda:region:account_ID:function:function_name`
177
+ #
178
+ # ^
179
+ # @return [String]
180
+ #
181
+ # @!attribute [rw] equals
182
+ # An operator that includes events that match the exact value of the
183
+ # event record field specified as the value of `Field`. This is the
184
+ # only valid operator that you can use with the `readOnly`,
185
+ # `eventCategory`, and `resources.type` fields.
186
+ # @return [Array<String>]
187
+ #
188
+ # @!attribute [rw] starts_with
189
+ # An operator that includes events that match the first few characters
190
+ # of the event record field specified as the value of `Field`.
191
+ # @return [Array<String>]
192
+ #
193
+ # @!attribute [rw] ends_with
194
+ # An operator that includes events that match the last few characters
195
+ # of the event record field specified as the value of `Field`.
196
+ # @return [Array<String>]
197
+ #
198
+ # @!attribute [rw] not_equals
199
+ # An operator that excludes events that match the exact value of the
200
+ # event record field specified as the value of `Field`.
201
+ # @return [Array<String>]
202
+ #
203
+ # @!attribute [rw] not_starts_with
204
+ # An operator that excludes events that match the first few characters
205
+ # of the event record field specified as the value of `Field`.
206
+ # @return [Array<String>]
207
+ #
208
+ # @!attribute [rw] not_ends_with
209
+ # An operator that excludes events that match the last few characters
210
+ # of the event record field specified as the value of `Field`.
211
+ # @return [Array<String>]
212
+ #
213
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedFieldSelector AWS API Documentation
214
+ #
215
+ class AdvancedFieldSelector < Struct.new(
216
+ :field,
217
+ :equals,
218
+ :starts_with,
219
+ :ends_with,
220
+ :not_equals,
221
+ :not_starts_with,
222
+ :not_ends_with)
223
+ SENSITIVE = []
224
+ include Aws::Structure
225
+ end
226
+
55
227
  # This exception is thrown when an operation is called with an invalid
56
228
  # trail ARN. The format of a trail ARN is:
57
229
  #
@@ -75,6 +247,15 @@ module Aws::CloudTrail
75
247
  #
76
248
  class CloudTrailAccessNotEnabledException < Aws::EmptyStructure; end
77
249
 
250
+ # This exception is thrown when a call results in the
251
+ # `InvalidClientTokenId` error code. This can occur when you are
252
+ # creating or updating a trail to send notifications to an Amazon SNS
253
+ # topic that is in a suspended AWS account.
254
+ #
255
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudTrailInvalidClientTokenIdException AWS API Documentation
256
+ #
257
+ class CloudTrailInvalidClientTokenIdException < Aws::EmptyStructure; end
258
+
78
259
  # Cannot set a CloudWatch Logs delivery for this region.
79
260
  #
80
261
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudWatchLogsDeliveryUnavailableException AWS API Documentation
@@ -343,6 +524,10 @@ module Aws::CloudTrail
343
524
  # distributed between 1 and 5 event selectors, but the total cannot
344
525
  # exceed 250 across all selectors.
345
526
  #
527
+ # If you are using advanced event selectors, the maximum total number of
528
+ # values for all conditions, across all advanced event selectors for the
529
+ # trail, is 500.
530
+ #
346
531
  # </note>
347
532
  #
348
533
  # The following example demonstrates how logging works when you
@@ -626,6 +811,9 @@ module Aws::CloudTrail
626
811
  #
627
812
  # You can configure up to five event selectors for a trail.
628
813
  #
814
+ # You cannot apply both event selectors and advanced event selectors to
815
+ # a trail.
816
+ #
629
817
  # @note When making an API call, you may pass EventSelector
630
818
  # data as a hash:
631
819
  #
@@ -659,9 +847,15 @@ module Aws::CloudTrail
659
847
  #
660
848
  # By default, the value is `true`.
661
849
  #
850
+ # The first copy of management events is free. You are charged for
851
+ # additional copies of management events that you are logging on any
852
+ # subsequent trail in the same region. For more information about
853
+ # CloudTrail pricing, see [AWS CloudTrail Pricing][2].
854
+ #
662
855
  #
663
856
  #
664
857
  # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html#logging-management-events
858
+ # [2]: http://aws.amazon.com/cloudtrail/pricing/
665
859
  # @return [Boolean]
666
860
  #
667
861
  # @!attribute [rw] data_resources
@@ -745,11 +939,16 @@ module Aws::CloudTrail
745
939
  # The event selectors that are configured for the trail.
746
940
  # @return [Array<Types::EventSelector>]
747
941
  #
942
+ # @!attribute [rw] advanced_event_selectors
943
+ # The advanced event selectors that are configured for the trail.
944
+ # @return [Array<Types::AdvancedEventSelector>]
945
+ #
748
946
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventSelectorsResponse AWS API Documentation
749
947
  #
750
948
  class GetEventSelectorsResponse < Struct.new(
751
949
  :trail_arn,
752
- :event_selectors)
950
+ :event_selectors,
951
+ :advanced_event_selectors)
753
952
  SENSITIVE = []
754
953
  include Aws::Structure
755
954
  end
@@ -1094,11 +1293,14 @@ module Aws::CloudTrail
1094
1293
  class InvalidEventCategoryException < Aws::EmptyStructure; end
1095
1294
 
1096
1295
  # This exception is thrown when the `PutEventSelectors` operation is
1097
- # called with a number of event selectors or data resources that is not
1098
- # valid. The combination of event selectors and data resources is not
1099
- # valid. A trail can have up to 5 event selectors. A trail is limited to
1100
- # 250 data resources. These data resources can be distributed across
1101
- # event selectors, but the overall total cannot exceed 250.
1296
+ # called with a number of event selectors, advanced event selectors, or
1297
+ # data resources that is not valid. The combination of event selectors
1298
+ # or advanced event selectors and data resources is not valid. A trail
1299
+ # can have up to 5 event selectors. If a trail uses advanced event
1300
+ # selectors, a maximum of 500 total values for all conditions in all
1301
+ # advanced event selectors is allowed. A trail is limited to 250 data
1302
+ # resources. These data resources can be distributed across event
1303
+ # selectors, but the overall total cannot exceed 250.
1102
1304
  #
1103
1305
  # You can:
1104
1306
  #
@@ -1110,6 +1312,9 @@ module Aws::CloudTrail
1110
1312
  # allowed only if the total number of data resources does not exceed
1111
1313
  # 250 across all event selectors for a trail.
1112
1314
  #
1315
+ # * Specify up to 500 values for all conditions in all advanced event
1316
+ # selectors for a trail.
1317
+ #
1113
1318
  # * Specify a valid value for a parameter. For example, specifying the
1114
1319
  # `ReadWriteType` parameter with a value of `read-only` is invalid.
1115
1320
  #
@@ -1240,8 +1445,10 @@ module Aws::CloudTrail
1240
1445
  #
1241
1446
  class KmsKeyDisabledException < Aws::EmptyStructure; end
1242
1447
 
1243
- # This exception is thrown when the KMS key does not exist, or when the
1244
- # S3 bucket and the KMS key are not in the same region.
1448
+ # This exception is thrown when the KMS key does not exist, when the S3
1449
+ # bucket and the KMS key are not in the same region, or when the KMS key
1450
+ # associated with the SNS topic either does not exist or is not in the
1451
+ # same region.
1245
1452
  #
1246
1453
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsKeyNotFoundException AWS API Documentation
1247
1454
  #
@@ -1609,7 +1816,7 @@ module Aws::CloudTrail
1609
1816
  #
1610
1817
  # {
1611
1818
  # trail_name: "String", # required
1612
- # event_selectors: [ # required
1819
+ # event_selectors: [
1613
1820
  # {
1614
1821
  # read_write_type: "ReadOnly", # accepts ReadOnly, WriteOnly, All
1615
1822
  # include_management_events: false,
@@ -1622,6 +1829,22 @@ module Aws::CloudTrail
1622
1829
  # exclude_management_event_sources: ["String"],
1623
1830
  # },
1624
1831
  # ],
1832
+ # advanced_event_selectors: [
1833
+ # {
1834
+ # name: "SelectorName",
1835
+ # field_selectors: [ # required
1836
+ # {
1837
+ # field: "SelectorField", # required
1838
+ # equals: ["OperatorValue"],
1839
+ # starts_with: ["OperatorValue"],
1840
+ # ends_with: ["OperatorValue"],
1841
+ # not_equals: ["OperatorValue"],
1842
+ # not_starts_with: ["OperatorValue"],
1843
+ # not_ends_with: ["OperatorValue"],
1844
+ # },
1845
+ # ],
1846
+ # },
1847
+ # ],
1625
1848
  # }
1626
1849
  #
1627
1850
  # @!attribute [rw] trail_name
@@ -1647,14 +1870,35 @@ module Aws::CloudTrail
1647
1870
  #
1648
1871
  # @!attribute [rw] event_selectors
1649
1872
  # Specifies the settings for your event selectors. You can configure
1650
- # up to five event selectors for a trail.
1873
+ # up to five event selectors for a trail. You can use either
1874
+ # `EventSelectors` or `AdvancedEventSelectors` in a
1875
+ # `PutEventSelectors` request, but not both. If you apply
1876
+ # `EventSelectors` to a trail, any existing `AdvancedEventSelectors`
1877
+ # are overwritten.
1651
1878
  # @return [Array<Types::EventSelector>]
1652
1879
  #
1880
+ # @!attribute [rw] advanced_event_selectors
1881
+ # Specifies the settings for advanced event selectors. You can add
1882
+ # advanced event selectors, and conditions for your advanced event
1883
+ # selectors, up to a maximum of 500 values for all conditions and
1884
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1885
+ # `EventSelectors`, but not both. If you apply
1886
+ # `AdvancedEventSelectors` to a trail, any existing `EventSelectors`
1887
+ # are overwritten. For more information about advanced event
1888
+ # selectors, see [Logging data events for trails][1] in the *AWS
1889
+ # CloudTrail User Guide*.
1890
+ #
1891
+ #
1892
+ #
1893
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1894
+ # @return [Array<Types::AdvancedEventSelector>]
1895
+ #
1653
1896
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsRequest AWS API Documentation
1654
1897
  #
1655
1898
  class PutEventSelectorsRequest < Struct.new(
1656
1899
  :trail_name,
1657
- :event_selectors)
1900
+ :event_selectors,
1901
+ :advanced_event_selectors)
1658
1902
  SENSITIVE = []
1659
1903
  include Aws::Structure
1660
1904
  end
@@ -1670,11 +1914,16 @@ module Aws::CloudTrail
1670
1914
  # Specifies the event selectors configured for your trail.
1671
1915
  # @return [Array<Types::EventSelector>]
1672
1916
  #
1917
+ # @!attribute [rw] advanced_event_selectors
1918
+ # Specifies the advanced event selectors configured for your trail.
1919
+ # @return [Array<Types::AdvancedEventSelector>]
1920
+ #
1673
1921
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsResponse AWS API Documentation
1674
1922
  #
1675
1923
  class PutEventSelectorsResponse < Struct.new(
1676
1924
  :trail_arn,
1677
- :event_selectors)
1925
+ :event_selectors,
1926
+ :advanced_event_selectors)
1678
1927
  SENSITIVE = []
1679
1928
  include Aws::Structure
1680
1929
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-cloudtrail
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.27.0
4
+ version: 1.32.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-08-25 00:00:00.000000000 Z
11
+ date: 2021-02-02 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
19
19
  version: '3'
20
20
  - - ">="
21
21
  - !ruby/object:Gem::Version
22
- version: 3.99.0
22
+ version: 3.112.0
23
23
  type: :runtime
24
24
  prerelease: false
25
25
  version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
29
29
  version: '3'
30
30
  - - ">="
31
31
  - !ruby/object:Gem::Version
32
- version: 3.99.0
32
+ version: 3.112.0
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: aws-sigv4
35
35
  requirement: !ruby/object:Gem::Requirement