aws-sdk-cloudtrail 1.30.0 → 1.35.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 60b8c1effd0a3fa2af94daaaec0d61839a32804e915af6558ce4ac9d3efe9421
4
- data.tar.gz: edae4a6d5773ff73315edd7d935d50f964a5d39dc5f38baf0631c20b054f4942
3
+ metadata.gz: 23ba65a9162518884fe4096ec24c92e1305afa7211720af773fde28f00ee490f
4
+ data.tar.gz: a05fbbdc5c02421f1d9fc324d5897b1587b8f1bc834407381ad9d3c20006d358
5
5
  SHA512:
6
- metadata.gz: 8c6b1f56809811b24c18ff283f48c4cb6a1cade669cb854883ba78abbb5c5797902e0715131acba2d480ec0eacbdeb96de2fd395eee417f702a4ab88fa4e8d83
7
- data.tar.gz: 0e344c658117fc5edb0ac7419ac17f35419d40cb03cce07872ec8a73d3aed6d2e1051148d6b95f7f19dbd6c5a7bd74363bc9ed648168544424ee419f8e97aeb5
6
+ metadata.gz: 2a62b47f50bf25b8b1f994df2b7e561ef06dfe4013e8acba896cb56ce9ec250dea6f0c7201137aa94c8573b1fa98a4b14044db91b8d03b5b47e46a0a8789013b
7
+ data.tar.gz: 8c77c872ed2d10bea6f402b25f5638c74076ef87bba2b24390453e8e15bb1c4c9e2f0d54f1696a88efea0abe99d0f637a325c7fc5d800a86d77a535d2370ace3
data/CHANGELOG.md ADDED
@@ -0,0 +1,256 @@
1
+ Unreleased Changes
2
+ ------------------
3
+
4
+ 1.35.0 (2021-06-04)
5
+ ------------------
6
+
7
+ * Feature - AWS CloudTrail supports data events on new service resources, including Amazon DynamoDB tables and S3 Object Lambda access points.
8
+
9
+ 1.34.0 (2021-03-10)
10
+ ------------------
11
+
12
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
13
+
14
+ 1.33.0 (2021-02-08)
15
+ ------------------
16
+
17
+ * Feature - ConflictException is now thrown when certain operations are called on resources before CloudTrail has time to load the resources. Two new exceptions have been added to the PutInsightSelectors API.
18
+
19
+ 1.32.0 (2021-02-02)
20
+ ------------------
21
+
22
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
23
+
24
+ 1.31.0 (2020-12-11)
25
+ ------------------
26
+
27
+ * Feature - CloudTrailInvalidClientTokenIdException is now thrown when a call results in the InvalidClientTokenId error code. The Name parameter of the AdvancedEventSelector data type is now optional.
28
+
29
+ 1.30.0 (2020-11-24)
30
+ ------------------
31
+
32
+ * Feature - CloudTrail now includes advanced event selectors, which give you finer-grained control over the events that are logged to your trail.
33
+
34
+ 1.29.0 (2020-09-30)
35
+ ------------------
36
+
37
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
38
+
39
+ 1.28.0 (2020-09-15)
40
+ ------------------
41
+
42
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
43
+
44
+ 1.27.0 (2020-08-25)
45
+ ------------------
46
+
47
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
48
+
49
+ 1.26.0 (2020-07-02)
50
+ ------------------
51
+
52
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
53
+
54
+ 1.25.0 (2020-06-23)
55
+ ------------------
56
+
57
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
58
+
59
+ 1.24.1 (2020-06-11)
60
+ ------------------
61
+
62
+ * Issue - Republish previous version with correct dependency on `aws-sdk-core`.
63
+
64
+ 1.24.0 (2020-06-10)
65
+ ------------------
66
+
67
+ * Issue - This version has been yanked. (#2327).
68
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
69
+
70
+ 1.23.0 (2020-05-28)
71
+ ------------------
72
+
73
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
74
+
75
+ 1.22.0 (2020-05-07)
76
+ ------------------
77
+
78
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
79
+
80
+ 1.21.0 (2020-03-09)
81
+ ------------------
82
+
83
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
84
+
85
+ 1.20.0 (2019-11-20)
86
+ ------------------
87
+
88
+ * Feature - 1. This release adds two new APIs, GetInsightSelectors and PutInsightSelectors, which let you configure CloudTrail Insights event delivery on a trail. An Insights event is a new type of event that is generated when CloudTrail detects unusual activity in your AWS account. In this release, only "ApiCallRateInsight" is a supported Insights event type. 2. This release also adds the new "ExcludeManagementEventSource" option to the existing PutEventSelectors API. This field currently supports only AWS Key Management Services.
89
+
90
+ 1.19.0 (2019-11-01)
91
+ ------------------
92
+
93
+ * Feature - This release adds two new APIs, GetTrail and ListTrails, and support for adding tags when you create a trail by using a new TagsList parameter on CreateTrail operations.
94
+
95
+ 1.18.0 (2019-10-23)
96
+ ------------------
97
+
98
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
99
+
100
+ 1.17.0 (2019-07-25)
101
+ ------------------
102
+
103
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
104
+
105
+ 1.16.0 (2019-07-01)
106
+ ------------------
107
+
108
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
109
+
110
+ 1.15.0 (2019-06-17)
111
+ ------------------
112
+
113
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
114
+
115
+ 1.14.0 (2019-05-21)
116
+ ------------------
117
+
118
+ * Feature - API update.
119
+
120
+ 1.13.0 (2019-05-15)
121
+ ------------------
122
+
123
+ * Feature - API update.
124
+
125
+ 1.12.0 (2019-05-14)
126
+ ------------------
127
+
128
+ * Feature - API update.
129
+
130
+ 1.11.0 (2019-03-21)
131
+ ------------------
132
+
133
+ * Feature - API update.
134
+
135
+ 1.10.0 (2019-03-18)
136
+ ------------------
137
+
138
+ * Feature - API update.
139
+
140
+ 1.9.0 (2019-03-14)
141
+ ------------------
142
+
143
+ * Feature - API update.
144
+
145
+ 1.8.0 (2018-11-20)
146
+ ------------------
147
+
148
+ * Feature - API update.
149
+
150
+ 1.7.0 (2018-11-19)
151
+ ------------------
152
+
153
+ * Feature - API update.
154
+
155
+ 1.6.0 (2018-10-24)
156
+ ------------------
157
+
158
+ * Feature - API update.
159
+
160
+ 1.5.0 (2018-10-23)
161
+ ------------------
162
+
163
+ * Feature - API update.
164
+
165
+ 1.4.0 (2018-10-12)
166
+ ------------------
167
+
168
+ * Feature - API update.
169
+
170
+ 1.3.0 (2018-09-06)
171
+ ------------------
172
+
173
+ * Feature - Adds code paths and plugins for future SDK instrumentation and telemetry.
174
+
175
+ 1.2.0 (2018-09-05)
176
+ ------------------
177
+
178
+ * Feature - API update.
179
+
180
+ 1.1.0 (2018-06-26)
181
+ ------------------
182
+
183
+ * Feature - API update.
184
+
185
+ 1.0.1 (2018-02-16)
186
+ ------------------
187
+
188
+ * Issue - Update `aws-sdk-cloudtrail` gemspec metadata.
189
+
190
+ 1.0.0 (2017-08-29)
191
+ ------------------
192
+
193
+ 1.0.0.rc13 (2017-08-15)
194
+ ------------------
195
+
196
+ * Feature - API update.
197
+
198
+ 1.0.0.rc12 (2017-08-01)
199
+ ------------------
200
+
201
+ * Feature - API update.
202
+
203
+ 1.0.0.rc11 (2017-07-25)
204
+ ------------------
205
+
206
+ * Feature - API update.
207
+
208
+ 1.0.0.rc10 (2017-07-13)
209
+ ------------------
210
+
211
+ * Feature - API update.
212
+
213
+ 1.0.0.rc9 (2017-07-06)
214
+ ------------------
215
+
216
+ * Feature - API update.
217
+
218
+ 1.0.0.rc8 (2017-06-29)
219
+ ------------------
220
+
221
+ * Feature - API update.
222
+
223
+ 1.0.0.rc7 (2017-05-23)
224
+ ------------------
225
+
226
+ * Feature - API update.
227
+
228
+ 1.0.0.rc6 (2017-05-09)
229
+ ------------------
230
+
231
+ * Feature - API update.
232
+
233
+ 1.0.0.rc5 (2017-05-09)
234
+ ------------------
235
+
236
+ * Feature - API update.
237
+
238
+ 1.0.0.rc4 (2017-04-21)
239
+ ------------------
240
+
241
+ * Feature - API update.
242
+
243
+ 1.0.0.rc3 (2017-03-07)
244
+ ------------------
245
+
246
+ * Feature - API update.
247
+
248
+ 1.0.0.rc2 (2017-01-24)
249
+ ------------------
250
+
251
+ * Feature - API update.
252
+
253
+ 1.0.0.rc1 (2016-12-05)
254
+ ------------------
255
+
256
+ * Feature - Initial preview release of the `aws-sdk-cloudtrail` gem.
data/LICENSE.txt ADDED
@@ -0,0 +1,202 @@
1
+
2
+ Apache License
3
+ Version 2.0, January 2004
4
+ http://www.apache.org/licenses/
5
+
6
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
7
+
8
+ 1. Definitions.
9
+
10
+ "License" shall mean the terms and conditions for use, reproduction,
11
+ and distribution as defined by Sections 1 through 9 of this document.
12
+
13
+ "Licensor" shall mean the copyright owner or entity authorized by
14
+ the copyright owner that is granting the License.
15
+
16
+ "Legal Entity" shall mean the union of the acting entity and all
17
+ other entities that control, are controlled by, or are under common
18
+ control with that entity. For the purposes of this definition,
19
+ "control" means (i) the power, direct or indirect, to cause the
20
+ direction or management of such entity, whether by contract or
21
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
22
+ outstanding shares, or (iii) beneficial ownership of such entity.
23
+
24
+ "You" (or "Your") shall mean an individual or Legal Entity
25
+ exercising permissions granted by this License.
26
+
27
+ "Source" form shall mean the preferred form for making modifications,
28
+ including but not limited to software source code, documentation
29
+ source, and configuration files.
30
+
31
+ "Object" form shall mean any form resulting from mechanical
32
+ transformation or translation of a Source form, including but
33
+ not limited to compiled object code, generated documentation,
34
+ and conversions to other media types.
35
+
36
+ "Work" shall mean the work of authorship, whether in Source or
37
+ Object form, made available under the License, as indicated by a
38
+ copyright notice that is included in or attached to the work
39
+ (an example is provided in the Appendix below).
40
+
41
+ "Derivative Works" shall mean any work, whether in Source or Object
42
+ form, that is based on (or derived from) the Work and for which the
43
+ editorial revisions, annotations, elaborations, or other modifications
44
+ represent, as a whole, an original work of authorship. For the purposes
45
+ of this License, Derivative Works shall not include works that remain
46
+ separable from, or merely link (or bind by name) to the interfaces of,
47
+ the Work and Derivative Works thereof.
48
+
49
+ "Contribution" shall mean any work of authorship, including
50
+ the original version of the Work and any modifications or additions
51
+ to that Work or Derivative Works thereof, that is intentionally
52
+ submitted to Licensor for inclusion in the Work by the copyright owner
53
+ or by an individual or Legal Entity authorized to submit on behalf of
54
+ the copyright owner. For the purposes of this definition, "submitted"
55
+ means any form of electronic, verbal, or written communication sent
56
+ to the Licensor or its representatives, including but not limited to
57
+ communication on electronic mailing lists, source code control systems,
58
+ and issue tracking systems that are managed by, or on behalf of, the
59
+ Licensor for the purpose of discussing and improving the Work, but
60
+ excluding communication that is conspicuously marked or otherwise
61
+ designated in writing by the copyright owner as "Not a Contribution."
62
+
63
+ "Contributor" shall mean Licensor and any individual or Legal Entity
64
+ on behalf of whom a Contribution has been received by Licensor and
65
+ subsequently incorporated within the Work.
66
+
67
+ 2. Grant of Copyright License. Subject to the terms and conditions of
68
+ this License, each Contributor hereby grants to You a perpetual,
69
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
70
+ copyright license to reproduce, prepare Derivative Works of,
71
+ publicly display, publicly perform, sublicense, and distribute the
72
+ Work and such Derivative Works in Source or Object form.
73
+
74
+ 3. Grant of Patent License. Subject to the terms and conditions of
75
+ this License, each Contributor hereby grants to You a perpetual,
76
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
77
+ (except as stated in this section) patent license to make, have made,
78
+ use, offer to sell, sell, import, and otherwise transfer the Work,
79
+ where such license applies only to those patent claims licensable
80
+ by such Contributor that are necessarily infringed by their
81
+ Contribution(s) alone or by combination of their Contribution(s)
82
+ with the Work to which such Contribution(s) was submitted. If You
83
+ institute patent litigation against any entity (including a
84
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
85
+ or a Contribution incorporated within the Work constitutes direct
86
+ or contributory patent infringement, then any patent licenses
87
+ granted to You under this License for that Work shall terminate
88
+ as of the date such litigation is filed.
89
+
90
+ 4. Redistribution. You may reproduce and distribute copies of the
91
+ Work or Derivative Works thereof in any medium, with or without
92
+ modifications, and in Source or Object form, provided that You
93
+ meet the following conditions:
94
+
95
+ (a) You must give any other recipients of the Work or
96
+ Derivative Works a copy of this License; and
97
+
98
+ (b) You must cause any modified files to carry prominent notices
99
+ stating that You changed the files; and
100
+
101
+ (c) You must retain, in the Source form of any Derivative Works
102
+ that You distribute, all copyright, patent, trademark, and
103
+ attribution notices from the Source form of the Work,
104
+ excluding those notices that do not pertain to any part of
105
+ the Derivative Works; and
106
+
107
+ (d) If the Work includes a "NOTICE" text file as part of its
108
+ distribution, then any Derivative Works that You distribute must
109
+ include a readable copy of the attribution notices contained
110
+ within such NOTICE file, excluding those notices that do not
111
+ pertain to any part of the Derivative Works, in at least one
112
+ of the following places: within a NOTICE text file distributed
113
+ as part of the Derivative Works; within the Source form or
114
+ documentation, if provided along with the Derivative Works; or,
115
+ within a display generated by the Derivative Works, if and
116
+ wherever such third-party notices normally appear. The contents
117
+ of the NOTICE file are for informational purposes only and
118
+ do not modify the License. You may add Your own attribution
119
+ notices within Derivative Works that You distribute, alongside
120
+ or as an addendum to the NOTICE text from the Work, provided
121
+ that such additional attribution notices cannot be construed
122
+ as modifying the License.
123
+
124
+ You may add Your own copyright statement to Your modifications and
125
+ may provide additional or different license terms and conditions
126
+ for use, reproduction, or distribution of Your modifications, or
127
+ for any such Derivative Works as a whole, provided Your use,
128
+ reproduction, and distribution of the Work otherwise complies with
129
+ the conditions stated in this License.
130
+
131
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
132
+ any Contribution intentionally submitted for inclusion in the Work
133
+ by You to the Licensor shall be under the terms and conditions of
134
+ this License, without any additional terms or conditions.
135
+ Notwithstanding the above, nothing herein shall supersede or modify
136
+ the terms of any separate license agreement you may have executed
137
+ with Licensor regarding such Contributions.
138
+
139
+ 6. Trademarks. This License does not grant permission to use the trade
140
+ names, trademarks, service marks, or product names of the Licensor,
141
+ except as required for reasonable and customary use in describing the
142
+ origin of the Work and reproducing the content of the NOTICE file.
143
+
144
+ 7. Disclaimer of Warranty. Unless required by applicable law or
145
+ agreed to in writing, Licensor provides the Work (and each
146
+ Contributor provides its Contributions) on an "AS IS" BASIS,
147
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
148
+ implied, including, without limitation, any warranties or conditions
149
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
150
+ PARTICULAR PURPOSE. You are solely responsible for determining the
151
+ appropriateness of using or redistributing the Work and assume any
152
+ risks associated with Your exercise of permissions under this License.
153
+
154
+ 8. Limitation of Liability. In no event and under no legal theory,
155
+ whether in tort (including negligence), contract, or otherwise,
156
+ unless required by applicable law (such as deliberate and grossly
157
+ negligent acts) or agreed to in writing, shall any Contributor be
158
+ liable to You for damages, including any direct, indirect, special,
159
+ incidental, or consequential damages of any character arising as a
160
+ result of this License or out of the use or inability to use the
161
+ Work (including but not limited to damages for loss of goodwill,
162
+ work stoppage, computer failure or malfunction, or any and all
163
+ other commercial damages or losses), even if such Contributor
164
+ has been advised of the possibility of such damages.
165
+
166
+ 9. Accepting Warranty or Additional Liability. While redistributing
167
+ the Work or Derivative Works thereof, You may choose to offer,
168
+ and charge a fee for, acceptance of support, warranty, indemnity,
169
+ or other liability obligations and/or rights consistent with this
170
+ License. However, in accepting such obligations, You may act only
171
+ on Your own behalf and on Your sole responsibility, not on behalf
172
+ of any other Contributor, and only if You agree to indemnify,
173
+ defend, and hold each Contributor harmless for any liability
174
+ incurred by, or claims asserted against, such Contributor by reason
175
+ of your accepting any such warranty or additional liability.
176
+
177
+ END OF TERMS AND CONDITIONS
178
+
179
+ APPENDIX: How to apply the Apache License to your work.
180
+
181
+ To apply the Apache License to your work, attach the following
182
+ boilerplate notice, with the fields enclosed by brackets "[]"
183
+ replaced with your own identifying information. (Don't include
184
+ the brackets!) The text should be enclosed in the appropriate
185
+ comment syntax for the file format. We also recommend that a
186
+ file or class name and description of purpose be included on the
187
+ same "printed page" as the copyright notice for easier
188
+ identification within third-party archives.
189
+
190
+ Copyright [yyyy] [name of copyright owner]
191
+
192
+ Licensed under the Apache License, Version 2.0 (the "License");
193
+ you may not use this file except in compliance with the License.
194
+ You may obtain a copy of the License at
195
+
196
+ http://www.apache.org/licenses/LICENSE-2.0
197
+
198
+ Unless required by applicable law or agreed to in writing, software
199
+ distributed under the License is distributed on an "AS IS" BASIS,
200
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
201
+ See the License for the specific language governing permissions and
202
+ limitations under the License.
data/VERSION ADDED
@@ -0,0 +1 @@
1
+ 1.35.0
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-cloudtrail/customizations'
48
48
  # @!group service
49
49
  module Aws::CloudTrail
50
50
 
51
- GEM_VERSION = '1.30.0'
51
+ GEM_VERSION = '1.35.0'
52
52
 
53
53
  end
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -655,8 +655,8 @@ module Aws::CloudTrail
655
655
  #
656
656
  # * If your event selector includes management events.
657
657
  #
658
- # * If your event selector includes data events, the Amazon S3 objects
659
- # or AWS Lambda functions that you are logging for data events.
658
+ # * If your event selector includes data events, the resources on which
659
+ # you are logging data events.
660
660
  #
661
661
  # For more information, see [Logging Data and Management Events for
662
662
  # Trails ][1] in the *AWS CloudTrail User Guide*.
@@ -1169,16 +1169,17 @@ module Aws::CloudTrail
1169
1169
  req.send_request(options)
1170
1170
  end
1171
1171
 
1172
- # Configures an event selector for your trail. Use event selectors to
1173
- # further specify the management and data event settings for your trail.
1174
- # By default, trails created without specific event selectors will be
1175
- # configured to log all read and write management events, and no data
1176
- # events.
1172
+ # Configures an event selector or advanced event selectors for your
1173
+ # trail. Use event selectors or advanced event selectors to specify
1174
+ # management and data event settings for your trail. By default, trails
1175
+ # created without specific event selectors are configured to log all
1176
+ # read and write management events, and no data events.
1177
1177
  #
1178
1178
  # When an event occurs in your account, CloudTrail evaluates the event
1179
- # selectors in all trails. For each trail, if the event matches any
1180
- # event selector, the trail processes and logs the event. If the event
1181
- # doesn't match any event selector, the trail doesn't log the event.
1179
+ # selectors or advanced event selectors in all trails. For each trail,
1180
+ # if the event matches any event selector, the trail processes and logs
1181
+ # the event. If the event doesn't match any event selector, the trail
1182
+ # doesn't log the event.
1182
1183
  #
1183
1184
  # Example
1184
1185
  #
@@ -1194,21 +1195,30 @@ module Aws::CloudTrail
1194
1195
  # 4. The `RunInstances` is a write-only event and it matches your event
1195
1196
  # selector. The trail logs the event.
1196
1197
  #
1197
- # 5. The `GetConsoleOutput` is a read-only event but it doesn't match
1198
+ # 5. The `GetConsoleOutput` is a read-only event that doesn't match
1198
1199
  # your event selector. The trail doesn't log the event.
1199
1200
  #
1200
1201
  # The `PutEventSelectors` operation must be called from the region in
1201
1202
  # which the trail was created; otherwise, an
1202
- # `InvalidHomeRegionException` is thrown.
1203
+ # `InvalidHomeRegionException` exception is thrown.
1203
1204
  #
1204
1205
  # You can configure up to five event selectors for each trail. For more
1205
- # information, see [Logging Data and Management Events for Trails ][1]
1206
- # and [Limits in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1206
+ # information, see [Logging data and management events for trails ][1]
1207
+ # and [Quotas in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1208
+ #
1209
+ # You can add advanced event selectors, and conditions for your advanced
1210
+ # event selectors, up to a maximum of 500 values for all conditions and
1211
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1212
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1213
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1214
+ # information about advanced event selectors, see [Logging data events
1215
+ # for trails][3] in the *AWS CloudTrail User Guide*.
1207
1216
  #
1208
1217
  #
1209
1218
  #
1210
1219
  # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html
1211
1220
  # [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
1221
+ # [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1212
1222
  #
1213
1223
  # @option params [required, String] :trail_name
1214
1224
  # Specifies the name of the trail or trail ARN. If you specify a trail
@@ -1232,9 +1242,24 @@ module Aws::CloudTrail
1232
1242
  #
1233
1243
  # @option params [Array<Types::EventSelector>] :event_selectors
1234
1244
  # Specifies the settings for your event selectors. You can configure up
1235
- # to five event selectors for a trail.
1245
+ # to five event selectors for a trail. You can use either
1246
+ # `EventSelectors` or `AdvancedEventSelectors` in a `PutEventSelectors`
1247
+ # request, but not both. If you apply `EventSelectors` to a trail, any
1248
+ # existing `AdvancedEventSelectors` are overwritten.
1236
1249
  #
1237
1250
  # @option params [Array<Types::AdvancedEventSelector>] :advanced_event_selectors
1251
+ # Specifies the settings for advanced event selectors. You can add
1252
+ # advanced event selectors, and conditions for your advanced event
1253
+ # selectors, up to a maximum of 500 values for all conditions and
1254
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1255
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1256
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1257
+ # information about advanced event selectors, see [Logging data events
1258
+ # for trails][1] in the *AWS CloudTrail User Guide*.
1259
+ #
1260
+ #
1261
+ #
1262
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1238
1263
  #
1239
1264
  # @return [Types::PutEventSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1240
1265
  #
@@ -1261,7 +1286,7 @@ module Aws::CloudTrail
1261
1286
  # ],
1262
1287
  # advanced_event_selectors: [
1263
1288
  # {
1264
- # name: "SelectorName", # required
1289
+ # name: "SelectorName",
1265
1290
  # field_selectors: [ # required
1266
1291
  # {
1267
1292
  # field: "SelectorField", # required
@@ -1645,7 +1670,7 @@ module Aws::CloudTrail
1645
1670
  params: params,
1646
1671
  config: config)
1647
1672
  context[:gem_name] = 'aws-sdk-cloudtrail'
1648
- context[:gem_version] = '1.30.0'
1673
+ context[:gem_version] = '1.35.0'
1649
1674
  Seahorse::Client::Request.new(handlers, context)
1650
1675
  end
1651
1676
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -23,7 +23,9 @@ module Aws::CloudTrail
23
23
  ByteBuffer = Shapes::BlobShape.new(name: 'ByteBuffer')
24
24
  CloudTrailARNInvalidException = Shapes::StructureShape.new(name: 'CloudTrailARNInvalidException')
25
25
  CloudTrailAccessNotEnabledException = Shapes::StructureShape.new(name: 'CloudTrailAccessNotEnabledException')
26
+ CloudTrailInvalidClientTokenIdException = Shapes::StructureShape.new(name: 'CloudTrailInvalidClientTokenIdException')
26
27
  CloudWatchLogsDeliveryUnavailableException = Shapes::StructureShape.new(name: 'CloudWatchLogsDeliveryUnavailableException')
28
+ ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
27
29
  CreateTrailRequest = Shapes::StructureShape.new(name: 'CreateTrailRequest')
28
30
  CreateTrailResponse = Shapes::StructureShape.new(name: 'CreateTrailResponse')
29
31
  DataResource = Shapes::StructureShape.new(name: 'DataResource')
@@ -142,7 +144,7 @@ module Aws::CloudTrail
142
144
 
143
145
  AddTagsResponse.struct_class = Types::AddTagsResponse
144
146
 
145
- AdvancedEventSelector.add_member(:name, Shapes::ShapeRef.new(shape: SelectorName, required: true, location_name: "Name"))
147
+ AdvancedEventSelector.add_member(:name, Shapes::ShapeRef.new(shape: SelectorName, location_name: "Name"))
146
148
  AdvancedEventSelector.add_member(:field_selectors, Shapes::ShapeRef.new(shape: AdvancedFieldSelectors, required: true, location_name: "FieldSelectors"))
147
149
  AdvancedEventSelector.struct_class = Types::AdvancedEventSelector
148
150
 
@@ -163,8 +165,12 @@ module Aws::CloudTrail
163
165
 
164
166
  CloudTrailAccessNotEnabledException.struct_class = Types::CloudTrailAccessNotEnabledException
165
167
 
168
+ CloudTrailInvalidClientTokenIdException.struct_class = Types::CloudTrailInvalidClientTokenIdException
169
+
166
170
  CloudWatchLogsDeliveryUnavailableException.struct_class = Types::CloudWatchLogsDeliveryUnavailableException
167
171
 
172
+ ConflictException.struct_class = Types::ConflictException
173
+
168
174
  CreateTrailRequest.add_member(:name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Name"))
169
175
  CreateTrailRequest.add_member(:s3_bucket_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "S3BucketName"))
170
176
  CreateTrailRequest.add_member(:s3_key_prefix, Shapes::ShapeRef.new(shape: String, location_name: "S3KeyPrefix"))
@@ -595,6 +601,7 @@ module Aws::CloudTrail
595
601
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
596
602
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
597
603
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
604
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
598
605
  end)
599
606
 
600
607
  api.add_operation(:delete_trail, Seahorse::Model::Operation.new.tap do |o|
@@ -610,6 +617,7 @@ module Aws::CloudTrail
610
617
  o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
611
618
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
612
619
  o.errors << Shapes::ShapeRef.new(shape: InsufficientDependencyServiceAccessPermissionException)
620
+ o.errors << Shapes::ShapeRef.new(shape: ConflictException)
613
621
  end)
614
622
 
615
623
  api.add_operation(:describe_trails, Seahorse::Model::Operation.new.tap do |o|
@@ -773,6 +781,8 @@ module Aws::CloudTrail
773
781
  o.errors << Shapes::ShapeRef.new(shape: InvalidInsightSelectorsException)
774
782
  o.errors << Shapes::ShapeRef.new(shape: InsufficientS3BucketPolicyException)
775
783
  o.errors << Shapes::ShapeRef.new(shape: InsufficientEncryptionPolicyException)
784
+ o.errors << Shapes::ShapeRef.new(shape: S3BucketDoesNotExistException)
785
+ o.errors << Shapes::ShapeRef.new(shape: KmsException)
776
786
  o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
777
787
  o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
778
788
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
@@ -857,6 +867,7 @@ module Aws::CloudTrail
857
867
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
858
868
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
859
869
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
870
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
860
871
  end)
861
872
  end
862
873
 
@@ -2,7 +2,7 @@
2
2
  # WARNING ABOUT GENERATED CODE
3
3
  #
4
4
  # This file is generated. See the contributing for info on making contributions:
5
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
5
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
6
6
  #
7
7
  # WARNING ABOUT GENERATED CODE
8
8
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -29,7 +29,9 @@ module Aws::CloudTrail
29
29
  # ## Error Classes
30
30
  # * {CloudTrailARNInvalidException}
31
31
  # * {CloudTrailAccessNotEnabledException}
32
+ # * {CloudTrailInvalidClientTokenIdException}
32
33
  # * {CloudWatchLogsDeliveryUnavailableException}
34
+ # * {ConflictException}
33
35
  # * {InsightNotEnabledException}
34
36
  # * {InsufficientDependencyServiceAccessPermissionException}
35
37
  # * {InsufficientEncryptionPolicyException}
@@ -96,6 +98,16 @@ module Aws::CloudTrail
96
98
  end
97
99
  end
98
100
 
101
+ class CloudTrailInvalidClientTokenIdException < ServiceError
102
+
103
+ # @param [Seahorse::Client::RequestContext] context
104
+ # @param [String] message
105
+ # @param [Aws::CloudTrail::Types::CloudTrailInvalidClientTokenIdException] data
106
+ def initialize(context, message, data = Aws::EmptyStructure.new)
107
+ super(context, message, data)
108
+ end
109
+ end
110
+
99
111
  class CloudWatchLogsDeliveryUnavailableException < ServiceError
100
112
 
101
113
  # @param [Seahorse::Client::RequestContext] context
@@ -106,6 +118,16 @@ module Aws::CloudTrail
106
118
  end
107
119
  end
108
120
 
121
+ class ConflictException < ServiceError
122
+
123
+ # @param [Seahorse::Client::RequestContext] context
124
+ # @param [String] message
125
+ # @param [Aws::CloudTrail::Types::ConflictException] data
126
+ def initialize(context, message, data = Aws::EmptyStructure.new)
127
+ super(context, message, data)
128
+ end
129
+ end
130
+
109
131
  class InsightNotEnabledException < ServiceError
110
132
 
111
133
  # @param [Seahorse::Client::RequestContext] context
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -52,11 +52,36 @@ module Aws::CloudTrail
52
52
  #
53
53
  class AddTagsResponse < Aws::EmptyStructure; end
54
54
 
55
+ # Advanced event selectors let you create fine-grained selectors for the
56
+ # following AWS CloudTrail event record fields. They help you control
57
+ # costs by logging only those events that are important to you. For more
58
+ # information about advanced event selectors, see [Logging data events
59
+ # for trails][1] in the *AWS CloudTrail User Guide*.
60
+ #
61
+ # * `readOnly`
62
+ #
63
+ # * `eventSource`
64
+ #
65
+ # * `eventName`
66
+ #
67
+ # * `eventCategory`
68
+ #
69
+ # * `resources.type`
70
+ #
71
+ # * `resources.ARN`
72
+ #
73
+ # You cannot apply both event selectors and advanced event selectors to
74
+ # a trail.
75
+ #
76
+ #
77
+ #
78
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
79
+ #
55
80
  # @note When making an API call, you may pass AdvancedEventSelector
56
81
  # data as a hash:
57
82
  #
58
83
  # {
59
- # name: "SelectorName", # required
84
+ # name: "SelectorName",
60
85
  # field_selectors: [ # required
61
86
  # {
62
87
  # field: "SelectorField", # required
@@ -71,9 +96,12 @@ module Aws::CloudTrail
71
96
  # }
72
97
  #
73
98
  # @!attribute [rw] name
99
+ # An optional, descriptive name for an advanced event selector, such
100
+ # as "Log data events for only two S3 buckets".
74
101
  # @return [String]
75
102
  #
76
103
  # @!attribute [rw] field_selectors
104
+ # Contains all selector statements in an advanced event selector.
77
105
  # @return [Array<Types::AdvancedFieldSelector>]
78
106
  #
79
107
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedEventSelector AWS API Documentation
@@ -85,6 +113,8 @@ module Aws::CloudTrail
85
113
  include Aws::Structure
86
114
  end
87
115
 
116
+ # A single selector statement in an advanced event selector.
117
+ #
88
118
  # @note When making an API call, you may pass AdvancedFieldSelector
89
119
  # data as a hash:
90
120
  #
@@ -99,24 +129,122 @@ module Aws::CloudTrail
99
129
  # }
100
130
  #
101
131
  # @!attribute [rw] field
132
+ # A field in an event record on which to filter events to be logged.
133
+ # Supported fields include `readOnly`, `eventCategory`, `eventSource`
134
+ # (for management events), `eventName`, `resources.type`, and
135
+ # `resources.ARN`.
136
+ #
137
+ # * <b> <code>readOnly</code> </b> - Optional. Can be set to `Equals`
138
+ # a value of `true` or `false`. A value of `false` logs both `read`
139
+ # and `write` events.
140
+ #
141
+ # * <b> <code>eventSource</code> </b> - For filtering management
142
+ # events only. This can be set only to `NotEquals`
143
+ # `kms.amazonaws.com`.
144
+ #
145
+ # * <b> <code>eventName</code> </b> - Can use any operator. You can
146
+ # use it to filter in or filter out any data event logged to
147
+ # CloudTrail, such as `PutBucket`. You can have multiple values for
148
+ # this field, separated by commas.
149
+ #
150
+ # * <b> <code>eventCategory</code> </b> - This is required. It must be
151
+ # set to `Equals`, and the value must be `Management` or `Data`.
152
+ #
153
+ # * <b> <code>resources.type</code> </b> - This field is required.
154
+ # `resources.type` can only use the `Equals` operator, and the value
155
+ # can be one of the following: `AWS::S3::Object`,
156
+ # `AWS::Lambda::Function`, `AWS::DynamoDB::Table`,
157
+ # `AWS::S3Outposts::Object`, `AWS::ManagedBlockchain::Node`, or
158
+ # `AWS::S3ObjectLambda::AccessPoint`. You can have only one
159
+ # `resources.type` field per selector. To log data events on more
160
+ # than one resource type, add another selector.
161
+ #
162
+ # * <b> <code>resources.ARN</code> </b> - You can use any operator
163
+ # with resources.ARN, but if you use `Equals` or `NotEquals`, the
164
+ # value must exactly match the ARN of a valid resource of the type
165
+ # you've specified in the template as the value of resources.type.
166
+ # For example, if resources.type equals `AWS::S3::Object`, the ARN
167
+ # must be in one of the following formats. To log all data events
168
+ # for all objects in a specific S3 bucket, use the `StartsWith`
169
+ # operator, and include only the bucket ARN as the matching value.
170
+ #
171
+ # The trailing slash is intentional; do not exclude it.
172
+ #
173
+ # * `arn:partition:s3:::bucket_name/`
174
+ #
175
+ # * `arn:partition:s3:::bucket_name/object_or_file_name/`
176
+ #
177
+ # When resources.type equals `AWS::Lambda::Function`, and the
178
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
179
+ # following format:
180
+ #
181
+ # * `arn:partition:lambda:region:account_ID:function:function_name`
182
+ #
183
+ # ^
184
+ #
185
+ # When resources.type equals `AWS::DynamoDB::Table`, and the
186
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
187
+ # following format:
188
+ #
189
+ # * `arn:partition:dynamodb:region:account_ID:table:table_name`
190
+ #
191
+ # ^
192
+ #
193
+ # When `resources.type` equals `AWS::S3Outposts::Object`, and the
194
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
195
+ # following format:
196
+ #
197
+ # * `arn:partition:s3-outposts:region:>account_ID:object_path`
198
+ #
199
+ # ^
200
+ #
201
+ # When `resources.type` equals `AWS::ManagedBlockchain::Node`, and
202
+ # the operator is set to `Equals` or `NotEquals`, the ARN must be in
203
+ # the following format:
204
+ #
205
+ # * `arn:partition:managedblockchain:region:account_ID:nodes/node_ID`
206
+ #
207
+ # ^
208
+ #
209
+ # When `resources.type` equals `AWS::S3ObjectLambda::AccessPoint`,
210
+ # and the operator is set to `Equals` or `NotEquals`, the ARN must
211
+ # be in the following format:
212
+ #
213
+ # * `arn:partition:s3-object-lambda:region:account_ID:accesspoint/access_point_name`
214
+ #
215
+ # ^
102
216
  # @return [String]
103
217
  #
104
218
  # @!attribute [rw] equals
219
+ # An operator that includes events that match the exact value of the
220
+ # event record field specified as the value of `Field`. This is the
221
+ # only valid operator that you can use with the `readOnly`,
222
+ # `eventCategory`, and `resources.type` fields.
105
223
  # @return [Array<String>]
106
224
  #
107
225
  # @!attribute [rw] starts_with
226
+ # An operator that includes events that match the first few characters
227
+ # of the event record field specified as the value of `Field`.
108
228
  # @return [Array<String>]
109
229
  #
110
230
  # @!attribute [rw] ends_with
231
+ # An operator that includes events that match the last few characters
232
+ # of the event record field specified as the value of `Field`.
111
233
  # @return [Array<String>]
112
234
  #
113
235
  # @!attribute [rw] not_equals
236
+ # An operator that excludes events that match the exact value of the
237
+ # event record field specified as the value of `Field`.
114
238
  # @return [Array<String>]
115
239
  #
116
240
  # @!attribute [rw] not_starts_with
241
+ # An operator that excludes events that match the first few characters
242
+ # of the event record field specified as the value of `Field`.
117
243
  # @return [Array<String>]
118
244
  #
119
245
  # @!attribute [rw] not_ends_with
246
+ # An operator that excludes events that match the last few characters
247
+ # of the event record field specified as the value of `Field`.
120
248
  # @return [Array<String>]
121
249
  #
122
250
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedFieldSelector AWS API Documentation
@@ -156,12 +284,31 @@ module Aws::CloudTrail
156
284
  #
157
285
  class CloudTrailAccessNotEnabledException < Aws::EmptyStructure; end
158
286
 
287
+ # This exception is thrown when a call results in the
288
+ # `InvalidClientTokenId` error code. This can occur when you are
289
+ # creating or updating a trail to send notifications to an Amazon SNS
290
+ # topic that is in a suspended AWS account.
291
+ #
292
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudTrailInvalidClientTokenIdException AWS API Documentation
293
+ #
294
+ class CloudTrailInvalidClientTokenIdException < Aws::EmptyStructure; end
295
+
159
296
  # Cannot set a CloudWatch Logs delivery for this region.
160
297
  #
161
298
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudWatchLogsDeliveryUnavailableException AWS API Documentation
162
299
  #
163
300
  class CloudWatchLogsDeliveryUnavailableException < Aws::EmptyStructure; end
164
301
 
302
+ # This exception is thrown when the specified resource is not ready for
303
+ # an operation. This can occur when you try to run an operation on a
304
+ # trail before CloudTrail has time to fully load the trail. If this
305
+ # exception occurs, wait a few minutes, and then try the operation
306
+ # again.
307
+ #
308
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ConflictException AWS API Documentation
309
+ #
310
+ class ConflictException < Aws::EmptyStructure; end
311
+
165
312
  # Specifies the settings for each trail.
166
313
  #
167
314
  # @note When making an API call, you may pass CreateTrailRequest
@@ -414,16 +561,21 @@ module Aws::CloudTrail
414
561
  include Aws::Structure
415
562
  end
416
563
 
417
- # The Amazon S3 buckets or AWS Lambda functions that you specify in your
418
- # event selectors for your trail to log data events. Data events provide
419
- # information about the resource operations performed on or within a
420
- # resource itself. These are also known as data plane operations. You
421
- # can specify up to 250 data resources for a trail.
564
+ # The Amazon S3 buckets, AWS Lambda functions, or Amazon DynamoDB tables
565
+ # that you specify in your event selectors for your trail to log data
566
+ # events. Data events provide information about the resource operations
567
+ # performed on or within a resource itself. These are also known as data
568
+ # plane operations. You can specify up to 250 data resources for a
569
+ # trail.
422
570
  #
423
571
  # <note markdown="1"> The total number of allowed data resources is 250. This number can be
424
572
  # distributed between 1 and 5 event selectors, but the total cannot
425
573
  # exceed 250 across all selectors.
426
574
  #
575
+ # If you are using advanced event selectors, the maximum total number of
576
+ # values for all conditions, across all advanced event selectors for the
577
+ # trail, is 500.
578
+ #
427
579
  # </note>
428
580
  #
429
581
  # The following example demonstrates how logging works when you
@@ -476,7 +628,13 @@ module Aws::CloudTrail
476
628
  #
477
629
  # @!attribute [rw] type
478
630
  # The resource type in which you want to log data events. You can
479
- # specify `AWS::S3::Object` or `AWS::Lambda::Function` resources.
631
+ # specify `AWS::S3::Object`, `AWS::Lambda::Function`, or
632
+ # `AWS::DynamoDB::Table` resources.
633
+ #
634
+ # The `AWS::S3Outposts::Object`, `AWS::ManagedBlockchain::Node`, and
635
+ # `AWS::S3ObjectLambda::AccessPoint` resource types are not valid in
636
+ # basic event selectors. To log data events on these resource types,
637
+ # use advanced event selectors.
480
638
  # @return [String]
481
639
  #
482
640
  # @!attribute [rw] values
@@ -502,8 +660,8 @@ module Aws::CloudTrail
502
660
  # trail logs data events for objects in this S3 bucket that match
503
661
  # the prefix.
504
662
  #
505
- # * To log data events for all functions in your AWS account, specify
506
- # the prefix as `arn:aws:lambda`.
663
+ # * To log data events for all Lambda functions in your AWS account,
664
+ # specify the prefix as `arn:aws:lambda`.
507
665
  #
508
666
  # <note markdown="1"> This will also enable logging of `Invoke` activity performed by
509
667
  # any user or role in your AWS account, even if that activity is
@@ -523,6 +681,9 @@ module Aws::CloudTrail
523
681
  # *arn:aws:lambda:us-west-2:111111111111:function:helloworld2*.
524
682
  #
525
683
  # </note>
684
+ #
685
+ # * To log data events for all DynamoDB tables in your AWS account,
686
+ # specify the prefix as `arn:aws:dynamodb`.
526
687
  # @return [Array<String>]
527
688
  #
528
689
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/DataResource AWS API Documentation
@@ -707,6 +868,9 @@ module Aws::CloudTrail
707
868
  #
708
869
  # You can configure up to five event selectors for a trail.
709
870
  #
871
+ # You cannot apply both event selectors and advanced event selectors to
872
+ # a trail.
873
+ #
710
874
  # @note When making an API call, you may pass EventSelector
711
875
  # data as a hash:
712
876
  #
@@ -753,11 +917,11 @@ module Aws::CloudTrail
753
917
  #
754
918
  # @!attribute [rw] data_resources
755
919
  # CloudTrail supports data event logging for Amazon S3 objects and AWS
756
- # Lambda functions. You can specify up to 250 resources for an
757
- # individual event selector, but the total number of data resources
758
- # cannot exceed 250 across all event selectors in a trail. This limit
759
- # does not apply if you configure resource logging for all data
760
- # events.
920
+ # Lambda functions with basic event selectors. You can specify up to
921
+ # 250 resources for an individual event selector, but the total number
922
+ # of data resources cannot exceed 250 across all event selectors in a
923
+ # trail. This limit does not apply if you configure resource logging
924
+ # for all data events.
761
925
  #
762
926
  # For more information, see [Data Events][1] and [Limits in AWS
763
927
  # CloudTrail][2] in the *AWS CloudTrail User Guide*.
@@ -833,6 +997,7 @@ module Aws::CloudTrail
833
997
  # @return [Array<Types::EventSelector>]
834
998
  #
835
999
  # @!attribute [rw] advanced_event_selectors
1000
+ # The advanced event selectors that are configured for the trail.
836
1001
  # @return [Array<Types::AdvancedEventSelector>]
837
1002
  #
838
1003
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventSelectorsResponse AWS API Documentation
@@ -1185,11 +1350,14 @@ module Aws::CloudTrail
1185
1350
  class InvalidEventCategoryException < Aws::EmptyStructure; end
1186
1351
 
1187
1352
  # This exception is thrown when the `PutEventSelectors` operation is
1188
- # called with a number of event selectors or data resources that is not
1189
- # valid. The combination of event selectors and data resources is not
1190
- # valid. A trail can have up to 5 event selectors. A trail is limited to
1191
- # 250 data resources. These data resources can be distributed across
1192
- # event selectors, but the overall total cannot exceed 250.
1353
+ # called with a number of event selectors, advanced event selectors, or
1354
+ # data resources that is not valid. The combination of event selectors
1355
+ # or advanced event selectors and data resources is not valid. A trail
1356
+ # can have up to 5 event selectors. If a trail uses advanced event
1357
+ # selectors, a maximum of 500 total values for all conditions in all
1358
+ # advanced event selectors is allowed. A trail is limited to 250 data
1359
+ # resources. These data resources can be distributed across event
1360
+ # selectors, but the overall total cannot exceed 250.
1193
1361
  #
1194
1362
  # You can:
1195
1363
  #
@@ -1201,6 +1369,9 @@ module Aws::CloudTrail
1201
1369
  # allowed only if the total number of data resources does not exceed
1202
1370
  # 250 across all event selectors for a trail.
1203
1371
  #
1372
+ # * Specify up to 500 values for all conditions in all advanced event
1373
+ # selectors for a trail.
1374
+ #
1204
1375
  # * Specify a valid value for a parameter. For example, specifying the
1205
1376
  # `ReadWriteType` parameter with a value of `read-only` is invalid.
1206
1377
  #
@@ -1331,10 +1502,10 @@ module Aws::CloudTrail
1331
1502
  #
1332
1503
  class KmsKeyDisabledException < Aws::EmptyStructure; end
1333
1504
 
1334
- # This exception is thrown when the KMS key does not exist, when the S3
1335
- # bucket and the KMS key are not in the same region, or when the KMS key
1336
- # associated with the SNS topic either does not exist or is not in the
1337
- # same region.
1505
+ # This exception is thrown when the AWS KMS key does not exist, when the
1506
+ # S3 bucket and the AWS KMS key are not in the same region, or when the
1507
+ # AWS KMS key associated with the SNS topic either does not exist or is
1508
+ # not in the same region.
1338
1509
  #
1339
1510
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsKeyNotFoundException AWS API Documentation
1340
1511
  #
@@ -1717,7 +1888,7 @@ module Aws::CloudTrail
1717
1888
  # ],
1718
1889
  # advanced_event_selectors: [
1719
1890
  # {
1720
- # name: "SelectorName", # required
1891
+ # name: "SelectorName",
1721
1892
  # field_selectors: [ # required
1722
1893
  # {
1723
1894
  # field: "SelectorField", # required
@@ -1756,10 +1927,27 @@ module Aws::CloudTrail
1756
1927
  #
1757
1928
  # @!attribute [rw] event_selectors
1758
1929
  # Specifies the settings for your event selectors. You can configure
1759
- # up to five event selectors for a trail.
1930
+ # up to five event selectors for a trail. You can use either
1931
+ # `EventSelectors` or `AdvancedEventSelectors` in a
1932
+ # `PutEventSelectors` request, but not both. If you apply
1933
+ # `EventSelectors` to a trail, any existing `AdvancedEventSelectors`
1934
+ # are overwritten.
1760
1935
  # @return [Array<Types::EventSelector>]
1761
1936
  #
1762
1937
  # @!attribute [rw] advanced_event_selectors
1938
+ # Specifies the settings for advanced event selectors. You can add
1939
+ # advanced event selectors, and conditions for your advanced event
1940
+ # selectors, up to a maximum of 500 values for all conditions and
1941
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1942
+ # `EventSelectors`, but not both. If you apply
1943
+ # `AdvancedEventSelectors` to a trail, any existing `EventSelectors`
1944
+ # are overwritten. For more information about advanced event
1945
+ # selectors, see [Logging data events for trails][1] in the *AWS
1946
+ # CloudTrail User Guide*.
1947
+ #
1948
+ #
1949
+ #
1950
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1763
1951
  # @return [Array<Types::AdvancedEventSelector>]
1764
1952
  #
1765
1953
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsRequest AWS API Documentation
@@ -1784,6 +1972,7 @@ module Aws::CloudTrail
1784
1972
  # @return [Array<Types::EventSelector>]
1785
1973
  #
1786
1974
  # @!attribute [rw] advanced_event_selectors
1975
+ # Specifies the advanced event selectors configured for your trail.
1787
1976
  # @return [Array<Types::AdvancedEventSelector>]
1788
1977
  #
1789
1978
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsResponse AWS API Documentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-cloudtrail
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.30.0
4
+ version: 1.35.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-11-24 00:00:00.000000000 Z
11
+ date: 2021-06-04 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
19
19
  version: '3'
20
20
  - - ">="
21
21
  - !ruby/object:Gem::Version
22
- version: 3.109.0
22
+ version: 3.112.0
23
23
  type: :runtime
24
24
  prerelease: false
25
25
  version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
29
29
  version: '3'
30
30
  - - ">="
31
31
  - !ruby/object:Gem::Version
32
- version: 3.109.0
32
+ version: 3.112.0
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: aws-sigv4
35
35
  requirement: !ruby/object:Gem::Requirement
@@ -47,11 +47,14 @@ dependencies:
47
47
  description: Official AWS Ruby gem for AWS CloudTrail (CloudTrail). This gem is part
48
48
  of the AWS SDK for Ruby.
49
49
  email:
50
- - trevrowe@amazon.com
50
+ - aws-dr-rubygems@amazon.com
51
51
  executables: []
52
52
  extensions: []
53
53
  extra_rdoc_files: []
54
54
  files:
55
+ - CHANGELOG.md
56
+ - LICENSE.txt
57
+ - VERSION
55
58
  - lib/aws-sdk-cloudtrail.rb
56
59
  - lib/aws-sdk-cloudtrail/client.rb
57
60
  - lib/aws-sdk-cloudtrail/client_api.rb
@@ -63,8 +66,8 @@ homepage: https://github.com/aws/aws-sdk-ruby
63
66
  licenses:
64
67
  - Apache-2.0
65
68
  metadata:
66
- source_code_uri: https://github.com/aws/aws-sdk-ruby/tree/master/gems/aws-sdk-cloudtrail
67
- changelog_uri: https://github.com/aws/aws-sdk-ruby/tree/master/gems/aws-sdk-cloudtrail/CHANGELOG.md
69
+ source_code_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-sdk-cloudtrail
70
+ changelog_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-sdk-cloudtrail/CHANGELOG.md
68
71
  post_install_message:
69
72
  rdoc_options: []
70
73
  require_paths:
@@ -80,8 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
80
83
  - !ruby/object:Gem::Version
81
84
  version: '0'
82
85
  requirements: []
83
- rubyforge_project:
84
- rubygems_version: 2.7.6.2
86
+ rubygems_version: 3.1.6
85
87
  signing_key:
86
88
  specification_version: 4
87
89
  summary: AWS SDK for Ruby - CloudTrail