aws-sdk-cloudtrail 1.30.0 → 1.35.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 60b8c1effd0a3fa2af94daaaec0d61839a32804e915af6558ce4ac9d3efe9421
4
- data.tar.gz: edae4a6d5773ff73315edd7d935d50f964a5d39dc5f38baf0631c20b054f4942
3
+ metadata.gz: 23ba65a9162518884fe4096ec24c92e1305afa7211720af773fde28f00ee490f
4
+ data.tar.gz: a05fbbdc5c02421f1d9fc324d5897b1587b8f1bc834407381ad9d3c20006d358
5
5
  SHA512:
6
- metadata.gz: 8c6b1f56809811b24c18ff283f48c4cb6a1cade669cb854883ba78abbb5c5797902e0715131acba2d480ec0eacbdeb96de2fd395eee417f702a4ab88fa4e8d83
7
- data.tar.gz: 0e344c658117fc5edb0ac7419ac17f35419d40cb03cce07872ec8a73d3aed6d2e1051148d6b95f7f19dbd6c5a7bd74363bc9ed648168544424ee419f8e97aeb5
6
+ metadata.gz: 2a62b47f50bf25b8b1f994df2b7e561ef06dfe4013e8acba896cb56ce9ec250dea6f0c7201137aa94c8573b1fa98a4b14044db91b8d03b5b47e46a0a8789013b
7
+ data.tar.gz: 8c77c872ed2d10bea6f402b25f5638c74076ef87bba2b24390453e8e15bb1c4c9e2f0d54f1696a88efea0abe99d0f637a325c7fc5d800a86d77a535d2370ace3
data/CHANGELOG.md ADDED
@@ -0,0 +1,256 @@
1
+ Unreleased Changes
2
+ ------------------
3
+
4
+ 1.35.0 (2021-06-04)
5
+ ------------------
6
+
7
+ * Feature - AWS CloudTrail supports data events on new service resources, including Amazon DynamoDB tables and S3 Object Lambda access points.
8
+
9
+ 1.34.0 (2021-03-10)
10
+ ------------------
11
+
12
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
13
+
14
+ 1.33.0 (2021-02-08)
15
+ ------------------
16
+
17
+ * Feature - ConflictException is now thrown when certain operations are called on resources before CloudTrail has time to load the resources. Two new exceptions have been added to the PutInsightSelectors API.
18
+
19
+ 1.32.0 (2021-02-02)
20
+ ------------------
21
+
22
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
23
+
24
+ 1.31.0 (2020-12-11)
25
+ ------------------
26
+
27
+ * Feature - CloudTrailInvalidClientTokenIdException is now thrown when a call results in the InvalidClientTokenId error code. The Name parameter of the AdvancedEventSelector data type is now optional.
28
+
29
+ 1.30.0 (2020-11-24)
30
+ ------------------
31
+
32
+ * Feature - CloudTrail now includes advanced event selectors, which give you finer-grained control over the events that are logged to your trail.
33
+
34
+ 1.29.0 (2020-09-30)
35
+ ------------------
36
+
37
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
38
+
39
+ 1.28.0 (2020-09-15)
40
+ ------------------
41
+
42
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
43
+
44
+ 1.27.0 (2020-08-25)
45
+ ------------------
46
+
47
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
48
+
49
+ 1.26.0 (2020-07-02)
50
+ ------------------
51
+
52
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
53
+
54
+ 1.25.0 (2020-06-23)
55
+ ------------------
56
+
57
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
58
+
59
+ 1.24.1 (2020-06-11)
60
+ ------------------
61
+
62
+ * Issue - Republish previous version with correct dependency on `aws-sdk-core`.
63
+
64
+ 1.24.0 (2020-06-10)
65
+ ------------------
66
+
67
+ * Issue - This version has been yanked. (#2327).
68
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
69
+
70
+ 1.23.0 (2020-05-28)
71
+ ------------------
72
+
73
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
74
+
75
+ 1.22.0 (2020-05-07)
76
+ ------------------
77
+
78
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
79
+
80
+ 1.21.0 (2020-03-09)
81
+ ------------------
82
+
83
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
84
+
85
+ 1.20.0 (2019-11-20)
86
+ ------------------
87
+
88
+ * Feature - 1. This release adds two new APIs, GetInsightSelectors and PutInsightSelectors, which let you configure CloudTrail Insights event delivery on a trail. An Insights event is a new type of event that is generated when CloudTrail detects unusual activity in your AWS account. In this release, only "ApiCallRateInsight" is a supported Insights event type. 2. This release also adds the new "ExcludeManagementEventSource" option to the existing PutEventSelectors API. This field currently supports only AWS Key Management Services.
89
+
90
+ 1.19.0 (2019-11-01)
91
+ ------------------
92
+
93
+ * Feature - This release adds two new APIs, GetTrail and ListTrails, and support for adding tags when you create a trail by using a new TagsList parameter on CreateTrail operations.
94
+
95
+ 1.18.0 (2019-10-23)
96
+ ------------------
97
+
98
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
99
+
100
+ 1.17.0 (2019-07-25)
101
+ ------------------
102
+
103
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
104
+
105
+ 1.16.0 (2019-07-01)
106
+ ------------------
107
+
108
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
109
+
110
+ 1.15.0 (2019-06-17)
111
+ ------------------
112
+
113
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
114
+
115
+ 1.14.0 (2019-05-21)
116
+ ------------------
117
+
118
+ * Feature - API update.
119
+
120
+ 1.13.0 (2019-05-15)
121
+ ------------------
122
+
123
+ * Feature - API update.
124
+
125
+ 1.12.0 (2019-05-14)
126
+ ------------------
127
+
128
+ * Feature - API update.
129
+
130
+ 1.11.0 (2019-03-21)
131
+ ------------------
132
+
133
+ * Feature - API update.
134
+
135
+ 1.10.0 (2019-03-18)
136
+ ------------------
137
+
138
+ * Feature - API update.
139
+
140
+ 1.9.0 (2019-03-14)
141
+ ------------------
142
+
143
+ * Feature - API update.
144
+
145
+ 1.8.0 (2018-11-20)
146
+ ------------------
147
+
148
+ * Feature - API update.
149
+
150
+ 1.7.0 (2018-11-19)
151
+ ------------------
152
+
153
+ * Feature - API update.
154
+
155
+ 1.6.0 (2018-10-24)
156
+ ------------------
157
+
158
+ * Feature - API update.
159
+
160
+ 1.5.0 (2018-10-23)
161
+ ------------------
162
+
163
+ * Feature - API update.
164
+
165
+ 1.4.0 (2018-10-12)
166
+ ------------------
167
+
168
+ * Feature - API update.
169
+
170
+ 1.3.0 (2018-09-06)
171
+ ------------------
172
+
173
+ * Feature - Adds code paths and plugins for future SDK instrumentation and telemetry.
174
+
175
+ 1.2.0 (2018-09-05)
176
+ ------------------
177
+
178
+ * Feature - API update.
179
+
180
+ 1.1.0 (2018-06-26)
181
+ ------------------
182
+
183
+ * Feature - API update.
184
+
185
+ 1.0.1 (2018-02-16)
186
+ ------------------
187
+
188
+ * Issue - Update `aws-sdk-cloudtrail` gemspec metadata.
189
+
190
+ 1.0.0 (2017-08-29)
191
+ ------------------
192
+
193
+ 1.0.0.rc13 (2017-08-15)
194
+ ------------------
195
+
196
+ * Feature - API update.
197
+
198
+ 1.0.0.rc12 (2017-08-01)
199
+ ------------------
200
+
201
+ * Feature - API update.
202
+
203
+ 1.0.0.rc11 (2017-07-25)
204
+ ------------------
205
+
206
+ * Feature - API update.
207
+
208
+ 1.0.0.rc10 (2017-07-13)
209
+ ------------------
210
+
211
+ * Feature - API update.
212
+
213
+ 1.0.0.rc9 (2017-07-06)
214
+ ------------------
215
+
216
+ * Feature - API update.
217
+
218
+ 1.0.0.rc8 (2017-06-29)
219
+ ------------------
220
+
221
+ * Feature - API update.
222
+
223
+ 1.0.0.rc7 (2017-05-23)
224
+ ------------------
225
+
226
+ * Feature - API update.
227
+
228
+ 1.0.0.rc6 (2017-05-09)
229
+ ------------------
230
+
231
+ * Feature - API update.
232
+
233
+ 1.0.0.rc5 (2017-05-09)
234
+ ------------------
235
+
236
+ * Feature - API update.
237
+
238
+ 1.0.0.rc4 (2017-04-21)
239
+ ------------------
240
+
241
+ * Feature - API update.
242
+
243
+ 1.0.0.rc3 (2017-03-07)
244
+ ------------------
245
+
246
+ * Feature - API update.
247
+
248
+ 1.0.0.rc2 (2017-01-24)
249
+ ------------------
250
+
251
+ * Feature - API update.
252
+
253
+ 1.0.0.rc1 (2016-12-05)
254
+ ------------------
255
+
256
+ * Feature - Initial preview release of the `aws-sdk-cloudtrail` gem.
data/LICENSE.txt ADDED
@@ -0,0 +1,202 @@
1
+
2
+ Apache License
3
+ Version 2.0, January 2004
4
+ http://www.apache.org/licenses/
5
+
6
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
7
+
8
+ 1. Definitions.
9
+
10
+ "License" shall mean the terms and conditions for use, reproduction,
11
+ and distribution as defined by Sections 1 through 9 of this document.
12
+
13
+ "Licensor" shall mean the copyright owner or entity authorized by
14
+ the copyright owner that is granting the License.
15
+
16
+ "Legal Entity" shall mean the union of the acting entity and all
17
+ other entities that control, are controlled by, or are under common
18
+ control with that entity. For the purposes of this definition,
19
+ "control" means (i) the power, direct or indirect, to cause the
20
+ direction or management of such entity, whether by contract or
21
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
22
+ outstanding shares, or (iii) beneficial ownership of such entity.
23
+
24
+ "You" (or "Your") shall mean an individual or Legal Entity
25
+ exercising permissions granted by this License.
26
+
27
+ "Source" form shall mean the preferred form for making modifications,
28
+ including but not limited to software source code, documentation
29
+ source, and configuration files.
30
+
31
+ "Object" form shall mean any form resulting from mechanical
32
+ transformation or translation of a Source form, including but
33
+ not limited to compiled object code, generated documentation,
34
+ and conversions to other media types.
35
+
36
+ "Work" shall mean the work of authorship, whether in Source or
37
+ Object form, made available under the License, as indicated by a
38
+ copyright notice that is included in or attached to the work
39
+ (an example is provided in the Appendix below).
40
+
41
+ "Derivative Works" shall mean any work, whether in Source or Object
42
+ form, that is based on (or derived from) the Work and for which the
43
+ editorial revisions, annotations, elaborations, or other modifications
44
+ represent, as a whole, an original work of authorship. For the purposes
45
+ of this License, Derivative Works shall not include works that remain
46
+ separable from, or merely link (or bind by name) to the interfaces of,
47
+ the Work and Derivative Works thereof.
48
+
49
+ "Contribution" shall mean any work of authorship, including
50
+ the original version of the Work and any modifications or additions
51
+ to that Work or Derivative Works thereof, that is intentionally
52
+ submitted to Licensor for inclusion in the Work by the copyright owner
53
+ or by an individual or Legal Entity authorized to submit on behalf of
54
+ the copyright owner. For the purposes of this definition, "submitted"
55
+ means any form of electronic, verbal, or written communication sent
56
+ to the Licensor or its representatives, including but not limited to
57
+ communication on electronic mailing lists, source code control systems,
58
+ and issue tracking systems that are managed by, or on behalf of, the
59
+ Licensor for the purpose of discussing and improving the Work, but
60
+ excluding communication that is conspicuously marked or otherwise
61
+ designated in writing by the copyright owner as "Not a Contribution."
62
+
63
+ "Contributor" shall mean Licensor and any individual or Legal Entity
64
+ on behalf of whom a Contribution has been received by Licensor and
65
+ subsequently incorporated within the Work.
66
+
67
+ 2. Grant of Copyright License. Subject to the terms and conditions of
68
+ this License, each Contributor hereby grants to You a perpetual,
69
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
70
+ copyright license to reproduce, prepare Derivative Works of,
71
+ publicly display, publicly perform, sublicense, and distribute the
72
+ Work and such Derivative Works in Source or Object form.
73
+
74
+ 3. Grant of Patent License. Subject to the terms and conditions of
75
+ this License, each Contributor hereby grants to You a perpetual,
76
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
77
+ (except as stated in this section) patent license to make, have made,
78
+ use, offer to sell, sell, import, and otherwise transfer the Work,
79
+ where such license applies only to those patent claims licensable
80
+ by such Contributor that are necessarily infringed by their
81
+ Contribution(s) alone or by combination of their Contribution(s)
82
+ with the Work to which such Contribution(s) was submitted. If You
83
+ institute patent litigation against any entity (including a
84
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
85
+ or a Contribution incorporated within the Work constitutes direct
86
+ or contributory patent infringement, then any patent licenses
87
+ granted to You under this License for that Work shall terminate
88
+ as of the date such litigation is filed.
89
+
90
+ 4. Redistribution. You may reproduce and distribute copies of the
91
+ Work or Derivative Works thereof in any medium, with or without
92
+ modifications, and in Source or Object form, provided that You
93
+ meet the following conditions:
94
+
95
+ (a) You must give any other recipients of the Work or
96
+ Derivative Works a copy of this License; and
97
+
98
+ (b) You must cause any modified files to carry prominent notices
99
+ stating that You changed the files; and
100
+
101
+ (c) You must retain, in the Source form of any Derivative Works
102
+ that You distribute, all copyright, patent, trademark, and
103
+ attribution notices from the Source form of the Work,
104
+ excluding those notices that do not pertain to any part of
105
+ the Derivative Works; and
106
+
107
+ (d) If the Work includes a "NOTICE" text file as part of its
108
+ distribution, then any Derivative Works that You distribute must
109
+ include a readable copy of the attribution notices contained
110
+ within such NOTICE file, excluding those notices that do not
111
+ pertain to any part of the Derivative Works, in at least one
112
+ of the following places: within a NOTICE text file distributed
113
+ as part of the Derivative Works; within the Source form or
114
+ documentation, if provided along with the Derivative Works; or,
115
+ within a display generated by the Derivative Works, if and
116
+ wherever such third-party notices normally appear. The contents
117
+ of the NOTICE file are for informational purposes only and
118
+ do not modify the License. You may add Your own attribution
119
+ notices within Derivative Works that You distribute, alongside
120
+ or as an addendum to the NOTICE text from the Work, provided
121
+ that such additional attribution notices cannot be construed
122
+ as modifying the License.
123
+
124
+ You may add Your own copyright statement to Your modifications and
125
+ may provide additional or different license terms and conditions
126
+ for use, reproduction, or distribution of Your modifications, or
127
+ for any such Derivative Works as a whole, provided Your use,
128
+ reproduction, and distribution of the Work otherwise complies with
129
+ the conditions stated in this License.
130
+
131
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
132
+ any Contribution intentionally submitted for inclusion in the Work
133
+ by You to the Licensor shall be under the terms and conditions of
134
+ this License, without any additional terms or conditions.
135
+ Notwithstanding the above, nothing herein shall supersede or modify
136
+ the terms of any separate license agreement you may have executed
137
+ with Licensor regarding such Contributions.
138
+
139
+ 6. Trademarks. This License does not grant permission to use the trade
140
+ names, trademarks, service marks, or product names of the Licensor,
141
+ except as required for reasonable and customary use in describing the
142
+ origin of the Work and reproducing the content of the NOTICE file.
143
+
144
+ 7. Disclaimer of Warranty. Unless required by applicable law or
145
+ agreed to in writing, Licensor provides the Work (and each
146
+ Contributor provides its Contributions) on an "AS IS" BASIS,
147
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
148
+ implied, including, without limitation, any warranties or conditions
149
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
150
+ PARTICULAR PURPOSE. You are solely responsible for determining the
151
+ appropriateness of using or redistributing the Work and assume any
152
+ risks associated with Your exercise of permissions under this License.
153
+
154
+ 8. Limitation of Liability. In no event and under no legal theory,
155
+ whether in tort (including negligence), contract, or otherwise,
156
+ unless required by applicable law (such as deliberate and grossly
157
+ negligent acts) or agreed to in writing, shall any Contributor be
158
+ liable to You for damages, including any direct, indirect, special,
159
+ incidental, or consequential damages of any character arising as a
160
+ result of this License or out of the use or inability to use the
161
+ Work (including but not limited to damages for loss of goodwill,
162
+ work stoppage, computer failure or malfunction, or any and all
163
+ other commercial damages or losses), even if such Contributor
164
+ has been advised of the possibility of such damages.
165
+
166
+ 9. Accepting Warranty or Additional Liability. While redistributing
167
+ the Work or Derivative Works thereof, You may choose to offer,
168
+ and charge a fee for, acceptance of support, warranty, indemnity,
169
+ or other liability obligations and/or rights consistent with this
170
+ License. However, in accepting such obligations, You may act only
171
+ on Your own behalf and on Your sole responsibility, not on behalf
172
+ of any other Contributor, and only if You agree to indemnify,
173
+ defend, and hold each Contributor harmless for any liability
174
+ incurred by, or claims asserted against, such Contributor by reason
175
+ of your accepting any such warranty or additional liability.
176
+
177
+ END OF TERMS AND CONDITIONS
178
+
179
+ APPENDIX: How to apply the Apache License to your work.
180
+
181
+ To apply the Apache License to your work, attach the following
182
+ boilerplate notice, with the fields enclosed by brackets "[]"
183
+ replaced with your own identifying information. (Don't include
184
+ the brackets!) The text should be enclosed in the appropriate
185
+ comment syntax for the file format. We also recommend that a
186
+ file or class name and description of purpose be included on the
187
+ same "printed page" as the copyright notice for easier
188
+ identification within third-party archives.
189
+
190
+ Copyright [yyyy] [name of copyright owner]
191
+
192
+ Licensed under the Apache License, Version 2.0 (the "License");
193
+ you may not use this file except in compliance with the License.
194
+ You may obtain a copy of the License at
195
+
196
+ http://www.apache.org/licenses/LICENSE-2.0
197
+
198
+ Unless required by applicable law or agreed to in writing, software
199
+ distributed under the License is distributed on an "AS IS" BASIS,
200
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
201
+ See the License for the specific language governing permissions and
202
+ limitations under the License.
data/VERSION ADDED
@@ -0,0 +1 @@
1
+ 1.35.0
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-cloudtrail/customizations'
48
48
  # @!group service
49
49
  module Aws::CloudTrail
50
50
 
51
- GEM_VERSION = '1.30.0'
51
+ GEM_VERSION = '1.35.0'
52
52
 
53
53
  end
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -655,8 +655,8 @@ module Aws::CloudTrail
655
655
  #
656
656
  # * If your event selector includes management events.
657
657
  #
658
- # * If your event selector includes data events, the Amazon S3 objects
659
- # or AWS Lambda functions that you are logging for data events.
658
+ # * If your event selector includes data events, the resources on which
659
+ # you are logging data events.
660
660
  #
661
661
  # For more information, see [Logging Data and Management Events for
662
662
  # Trails ][1] in the *AWS CloudTrail User Guide*.
@@ -1169,16 +1169,17 @@ module Aws::CloudTrail
1169
1169
  req.send_request(options)
1170
1170
  end
1171
1171
 
1172
- # Configures an event selector for your trail. Use event selectors to
1173
- # further specify the management and data event settings for your trail.
1174
- # By default, trails created without specific event selectors will be
1175
- # configured to log all read and write management events, and no data
1176
- # events.
1172
+ # Configures an event selector or advanced event selectors for your
1173
+ # trail. Use event selectors or advanced event selectors to specify
1174
+ # management and data event settings for your trail. By default, trails
1175
+ # created without specific event selectors are configured to log all
1176
+ # read and write management events, and no data events.
1177
1177
  #
1178
1178
  # When an event occurs in your account, CloudTrail evaluates the event
1179
- # selectors in all trails. For each trail, if the event matches any
1180
- # event selector, the trail processes and logs the event. If the event
1181
- # doesn't match any event selector, the trail doesn't log the event.
1179
+ # selectors or advanced event selectors in all trails. For each trail,
1180
+ # if the event matches any event selector, the trail processes and logs
1181
+ # the event. If the event doesn't match any event selector, the trail
1182
+ # doesn't log the event.
1182
1183
  #
1183
1184
  # Example
1184
1185
  #
@@ -1194,21 +1195,30 @@ module Aws::CloudTrail
1194
1195
  # 4. The `RunInstances` is a write-only event and it matches your event
1195
1196
  # selector. The trail logs the event.
1196
1197
  #
1197
- # 5. The `GetConsoleOutput` is a read-only event but it doesn't match
1198
+ # 5. The `GetConsoleOutput` is a read-only event that doesn't match
1198
1199
  # your event selector. The trail doesn't log the event.
1199
1200
  #
1200
1201
  # The `PutEventSelectors` operation must be called from the region in
1201
1202
  # which the trail was created; otherwise, an
1202
- # `InvalidHomeRegionException` is thrown.
1203
+ # `InvalidHomeRegionException` exception is thrown.
1203
1204
  #
1204
1205
  # You can configure up to five event selectors for each trail. For more
1205
- # information, see [Logging Data and Management Events for Trails ][1]
1206
- # and [Limits in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1206
+ # information, see [Logging data and management events for trails ][1]
1207
+ # and [Quotas in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1208
+ #
1209
+ # You can add advanced event selectors, and conditions for your advanced
1210
+ # event selectors, up to a maximum of 500 values for all conditions and
1211
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1212
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1213
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1214
+ # information about advanced event selectors, see [Logging data events
1215
+ # for trails][3] in the *AWS CloudTrail User Guide*.
1207
1216
  #
1208
1217
  #
1209
1218
  #
1210
1219
  # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html
1211
1220
  # [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
1221
+ # [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1212
1222
  #
1213
1223
  # @option params [required, String] :trail_name
1214
1224
  # Specifies the name of the trail or trail ARN. If you specify a trail
@@ -1232,9 +1242,24 @@ module Aws::CloudTrail
1232
1242
  #
1233
1243
  # @option params [Array<Types::EventSelector>] :event_selectors
1234
1244
  # Specifies the settings for your event selectors. You can configure up
1235
- # to five event selectors for a trail.
1245
+ # to five event selectors for a trail. You can use either
1246
+ # `EventSelectors` or `AdvancedEventSelectors` in a `PutEventSelectors`
1247
+ # request, but not both. If you apply `EventSelectors` to a trail, any
1248
+ # existing `AdvancedEventSelectors` are overwritten.
1236
1249
  #
1237
1250
  # @option params [Array<Types::AdvancedEventSelector>] :advanced_event_selectors
1251
+ # Specifies the settings for advanced event selectors. You can add
1252
+ # advanced event selectors, and conditions for your advanced event
1253
+ # selectors, up to a maximum of 500 values for all conditions and
1254
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1255
+ # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1256
+ # to a trail, any existing `EventSelectors` are overwritten. For more
1257
+ # information about advanced event selectors, see [Logging data events
1258
+ # for trails][1] in the *AWS CloudTrail User Guide*.
1259
+ #
1260
+ #
1261
+ #
1262
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1238
1263
  #
1239
1264
  # @return [Types::PutEventSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1240
1265
  #
@@ -1261,7 +1286,7 @@ module Aws::CloudTrail
1261
1286
  # ],
1262
1287
  # advanced_event_selectors: [
1263
1288
  # {
1264
- # name: "SelectorName", # required
1289
+ # name: "SelectorName",
1265
1290
  # field_selectors: [ # required
1266
1291
  # {
1267
1292
  # field: "SelectorField", # required
@@ -1645,7 +1670,7 @@ module Aws::CloudTrail
1645
1670
  params: params,
1646
1671
  config: config)
1647
1672
  context[:gem_name] = 'aws-sdk-cloudtrail'
1648
- context[:gem_version] = '1.30.0'
1673
+ context[:gem_version] = '1.35.0'
1649
1674
  Seahorse::Client::Request.new(handlers, context)
1650
1675
  end
1651
1676
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -23,7 +23,9 @@ module Aws::CloudTrail
23
23
  ByteBuffer = Shapes::BlobShape.new(name: 'ByteBuffer')
24
24
  CloudTrailARNInvalidException = Shapes::StructureShape.new(name: 'CloudTrailARNInvalidException')
25
25
  CloudTrailAccessNotEnabledException = Shapes::StructureShape.new(name: 'CloudTrailAccessNotEnabledException')
26
+ CloudTrailInvalidClientTokenIdException = Shapes::StructureShape.new(name: 'CloudTrailInvalidClientTokenIdException')
26
27
  CloudWatchLogsDeliveryUnavailableException = Shapes::StructureShape.new(name: 'CloudWatchLogsDeliveryUnavailableException')
28
+ ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
27
29
  CreateTrailRequest = Shapes::StructureShape.new(name: 'CreateTrailRequest')
28
30
  CreateTrailResponse = Shapes::StructureShape.new(name: 'CreateTrailResponse')
29
31
  DataResource = Shapes::StructureShape.new(name: 'DataResource')
@@ -142,7 +144,7 @@ module Aws::CloudTrail
142
144
 
143
145
  AddTagsResponse.struct_class = Types::AddTagsResponse
144
146
 
145
- AdvancedEventSelector.add_member(:name, Shapes::ShapeRef.new(shape: SelectorName, required: true, location_name: "Name"))
147
+ AdvancedEventSelector.add_member(:name, Shapes::ShapeRef.new(shape: SelectorName, location_name: "Name"))
146
148
  AdvancedEventSelector.add_member(:field_selectors, Shapes::ShapeRef.new(shape: AdvancedFieldSelectors, required: true, location_name: "FieldSelectors"))
147
149
  AdvancedEventSelector.struct_class = Types::AdvancedEventSelector
148
150
 
@@ -163,8 +165,12 @@ module Aws::CloudTrail
163
165
 
164
166
  CloudTrailAccessNotEnabledException.struct_class = Types::CloudTrailAccessNotEnabledException
165
167
 
168
+ CloudTrailInvalidClientTokenIdException.struct_class = Types::CloudTrailInvalidClientTokenIdException
169
+
166
170
  CloudWatchLogsDeliveryUnavailableException.struct_class = Types::CloudWatchLogsDeliveryUnavailableException
167
171
 
172
+ ConflictException.struct_class = Types::ConflictException
173
+
168
174
  CreateTrailRequest.add_member(:name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Name"))
169
175
  CreateTrailRequest.add_member(:s3_bucket_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "S3BucketName"))
170
176
  CreateTrailRequest.add_member(:s3_key_prefix, Shapes::ShapeRef.new(shape: String, location_name: "S3KeyPrefix"))
@@ -595,6 +601,7 @@ module Aws::CloudTrail
595
601
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
596
602
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
597
603
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
604
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
598
605
  end)
599
606
 
600
607
  api.add_operation(:delete_trail, Seahorse::Model::Operation.new.tap do |o|
@@ -610,6 +617,7 @@ module Aws::CloudTrail
610
617
  o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
611
618
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
612
619
  o.errors << Shapes::ShapeRef.new(shape: InsufficientDependencyServiceAccessPermissionException)
620
+ o.errors << Shapes::ShapeRef.new(shape: ConflictException)
613
621
  end)
614
622
 
615
623
  api.add_operation(:describe_trails, Seahorse::Model::Operation.new.tap do |o|
@@ -773,6 +781,8 @@ module Aws::CloudTrail
773
781
  o.errors << Shapes::ShapeRef.new(shape: InvalidInsightSelectorsException)
774
782
  o.errors << Shapes::ShapeRef.new(shape: InsufficientS3BucketPolicyException)
775
783
  o.errors << Shapes::ShapeRef.new(shape: InsufficientEncryptionPolicyException)
784
+ o.errors << Shapes::ShapeRef.new(shape: S3BucketDoesNotExistException)
785
+ o.errors << Shapes::ShapeRef.new(shape: KmsException)
776
786
  o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
777
787
  o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
778
788
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
@@ -857,6 +867,7 @@ module Aws::CloudTrail
857
867
  o.errors << Shapes::ShapeRef.new(shape: OrganizationsNotInUseException)
858
868
  o.errors << Shapes::ShapeRef.new(shape: NotOrganizationMasterAccountException)
859
869
  o.errors << Shapes::ShapeRef.new(shape: OrganizationNotInAllFeaturesModeException)
870
+ o.errors << Shapes::ShapeRef.new(shape: CloudTrailInvalidClientTokenIdException)
860
871
  end)
861
872
  end
862
873
 
@@ -2,7 +2,7 @@
2
2
  # WARNING ABOUT GENERATED CODE
3
3
  #
4
4
  # This file is generated. See the contributing for info on making contributions:
5
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
5
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
6
6
  #
7
7
  # WARNING ABOUT GENERATED CODE
8
8
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -29,7 +29,9 @@ module Aws::CloudTrail
29
29
  # ## Error Classes
30
30
  # * {CloudTrailARNInvalidException}
31
31
  # * {CloudTrailAccessNotEnabledException}
32
+ # * {CloudTrailInvalidClientTokenIdException}
32
33
  # * {CloudWatchLogsDeliveryUnavailableException}
34
+ # * {ConflictException}
33
35
  # * {InsightNotEnabledException}
34
36
  # * {InsufficientDependencyServiceAccessPermissionException}
35
37
  # * {InsufficientEncryptionPolicyException}
@@ -96,6 +98,16 @@ module Aws::CloudTrail
96
98
  end
97
99
  end
98
100
 
101
+ class CloudTrailInvalidClientTokenIdException < ServiceError
102
+
103
+ # @param [Seahorse::Client::RequestContext] context
104
+ # @param [String] message
105
+ # @param [Aws::CloudTrail::Types::CloudTrailInvalidClientTokenIdException] data
106
+ def initialize(context, message, data = Aws::EmptyStructure.new)
107
+ super(context, message, data)
108
+ end
109
+ end
110
+
99
111
  class CloudWatchLogsDeliveryUnavailableException < ServiceError
100
112
 
101
113
  # @param [Seahorse::Client::RequestContext] context
@@ -106,6 +118,16 @@ module Aws::CloudTrail
106
118
  end
107
119
  end
108
120
 
121
+ class ConflictException < ServiceError
122
+
123
+ # @param [Seahorse::Client::RequestContext] context
124
+ # @param [String] message
125
+ # @param [Aws::CloudTrail::Types::ConflictException] data
126
+ def initialize(context, message, data = Aws::EmptyStructure.new)
127
+ super(context, message, data)
128
+ end
129
+ end
130
+
109
131
  class InsightNotEnabledException < ServiceError
110
132
 
111
133
  # @param [Seahorse::Client::RequestContext] context
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -52,11 +52,36 @@ module Aws::CloudTrail
52
52
  #
53
53
  class AddTagsResponse < Aws::EmptyStructure; end
54
54
 
55
+ # Advanced event selectors let you create fine-grained selectors for the
56
+ # following AWS CloudTrail event record fields. They help you control
57
+ # costs by logging only those events that are important to you. For more
58
+ # information about advanced event selectors, see [Logging data events
59
+ # for trails][1] in the *AWS CloudTrail User Guide*.
60
+ #
61
+ # * `readOnly`
62
+ #
63
+ # * `eventSource`
64
+ #
65
+ # * `eventName`
66
+ #
67
+ # * `eventCategory`
68
+ #
69
+ # * `resources.type`
70
+ #
71
+ # * `resources.ARN`
72
+ #
73
+ # You cannot apply both event selectors and advanced event selectors to
74
+ # a trail.
75
+ #
76
+ #
77
+ #
78
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
79
+ #
55
80
  # @note When making an API call, you may pass AdvancedEventSelector
56
81
  # data as a hash:
57
82
  #
58
83
  # {
59
- # name: "SelectorName", # required
84
+ # name: "SelectorName",
60
85
  # field_selectors: [ # required
61
86
  # {
62
87
  # field: "SelectorField", # required
@@ -71,9 +96,12 @@ module Aws::CloudTrail
71
96
  # }
72
97
  #
73
98
  # @!attribute [rw] name
99
+ # An optional, descriptive name for an advanced event selector, such
100
+ # as "Log data events for only two S3 buckets".
74
101
  # @return [String]
75
102
  #
76
103
  # @!attribute [rw] field_selectors
104
+ # Contains all selector statements in an advanced event selector.
77
105
  # @return [Array<Types::AdvancedFieldSelector>]
78
106
  #
79
107
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedEventSelector AWS API Documentation
@@ -85,6 +113,8 @@ module Aws::CloudTrail
85
113
  include Aws::Structure
86
114
  end
87
115
 
116
+ # A single selector statement in an advanced event selector.
117
+ #
88
118
  # @note When making an API call, you may pass AdvancedFieldSelector
89
119
  # data as a hash:
90
120
  #
@@ -99,24 +129,122 @@ module Aws::CloudTrail
99
129
  # }
100
130
  #
101
131
  # @!attribute [rw] field
132
+ # A field in an event record on which to filter events to be logged.
133
+ # Supported fields include `readOnly`, `eventCategory`, `eventSource`
134
+ # (for management events), `eventName`, `resources.type`, and
135
+ # `resources.ARN`.
136
+ #
137
+ # * <b> <code>readOnly</code> </b> - Optional. Can be set to `Equals`
138
+ # a value of `true` or `false`. A value of `false` logs both `read`
139
+ # and `write` events.
140
+ #
141
+ # * <b> <code>eventSource</code> </b> - For filtering management
142
+ # events only. This can be set only to `NotEquals`
143
+ # `kms.amazonaws.com`.
144
+ #
145
+ # * <b> <code>eventName</code> </b> - Can use any operator. You can
146
+ # use it to filter in or filter out any data event logged to
147
+ # CloudTrail, such as `PutBucket`. You can have multiple values for
148
+ # this field, separated by commas.
149
+ #
150
+ # * <b> <code>eventCategory</code> </b> - This is required. It must be
151
+ # set to `Equals`, and the value must be `Management` or `Data`.
152
+ #
153
+ # * <b> <code>resources.type</code> </b> - This field is required.
154
+ # `resources.type` can only use the `Equals` operator, and the value
155
+ # can be one of the following: `AWS::S3::Object`,
156
+ # `AWS::Lambda::Function`, `AWS::DynamoDB::Table`,
157
+ # `AWS::S3Outposts::Object`, `AWS::ManagedBlockchain::Node`, or
158
+ # `AWS::S3ObjectLambda::AccessPoint`. You can have only one
159
+ # `resources.type` field per selector. To log data events on more
160
+ # than one resource type, add another selector.
161
+ #
162
+ # * <b> <code>resources.ARN</code> </b> - You can use any operator
163
+ # with resources.ARN, but if you use `Equals` or `NotEquals`, the
164
+ # value must exactly match the ARN of a valid resource of the type
165
+ # you've specified in the template as the value of resources.type.
166
+ # For example, if resources.type equals `AWS::S3::Object`, the ARN
167
+ # must be in one of the following formats. To log all data events
168
+ # for all objects in a specific S3 bucket, use the `StartsWith`
169
+ # operator, and include only the bucket ARN as the matching value.
170
+ #
171
+ # The trailing slash is intentional; do not exclude it.
172
+ #
173
+ # * `arn:partition:s3:::bucket_name/`
174
+ #
175
+ # * `arn:partition:s3:::bucket_name/object_or_file_name/`
176
+ #
177
+ # When resources.type equals `AWS::Lambda::Function`, and the
178
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
179
+ # following format:
180
+ #
181
+ # * `arn:partition:lambda:region:account_ID:function:function_name`
182
+ #
183
+ # ^
184
+ #
185
+ # When resources.type equals `AWS::DynamoDB::Table`, and the
186
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
187
+ # following format:
188
+ #
189
+ # * `arn:partition:dynamodb:region:account_ID:table:table_name`
190
+ #
191
+ # ^
192
+ #
193
+ # When `resources.type` equals `AWS::S3Outposts::Object`, and the
194
+ # operator is set to `Equals` or `NotEquals`, the ARN must be in the
195
+ # following format:
196
+ #
197
+ # * `arn:partition:s3-outposts:region:>account_ID:object_path`
198
+ #
199
+ # ^
200
+ #
201
+ # When `resources.type` equals `AWS::ManagedBlockchain::Node`, and
202
+ # the operator is set to `Equals` or `NotEquals`, the ARN must be in
203
+ # the following format:
204
+ #
205
+ # * `arn:partition:managedblockchain:region:account_ID:nodes/node_ID`
206
+ #
207
+ # ^
208
+ #
209
+ # When `resources.type` equals `AWS::S3ObjectLambda::AccessPoint`,
210
+ # and the operator is set to `Equals` or `NotEquals`, the ARN must
211
+ # be in the following format:
212
+ #
213
+ # * `arn:partition:s3-object-lambda:region:account_ID:accesspoint/access_point_name`
214
+ #
215
+ # ^
102
216
  # @return [String]
103
217
  #
104
218
  # @!attribute [rw] equals
219
+ # An operator that includes events that match the exact value of the
220
+ # event record field specified as the value of `Field`. This is the
221
+ # only valid operator that you can use with the `readOnly`,
222
+ # `eventCategory`, and `resources.type` fields.
105
223
  # @return [Array<String>]
106
224
  #
107
225
  # @!attribute [rw] starts_with
226
+ # An operator that includes events that match the first few characters
227
+ # of the event record field specified as the value of `Field`.
108
228
  # @return [Array<String>]
109
229
  #
110
230
  # @!attribute [rw] ends_with
231
+ # An operator that includes events that match the last few characters
232
+ # of the event record field specified as the value of `Field`.
111
233
  # @return [Array<String>]
112
234
  #
113
235
  # @!attribute [rw] not_equals
236
+ # An operator that excludes events that match the exact value of the
237
+ # event record field specified as the value of `Field`.
114
238
  # @return [Array<String>]
115
239
  #
116
240
  # @!attribute [rw] not_starts_with
241
+ # An operator that excludes events that match the first few characters
242
+ # of the event record field specified as the value of `Field`.
117
243
  # @return [Array<String>]
118
244
  #
119
245
  # @!attribute [rw] not_ends_with
246
+ # An operator that excludes events that match the last few characters
247
+ # of the event record field specified as the value of `Field`.
120
248
  # @return [Array<String>]
121
249
  #
122
250
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AdvancedFieldSelector AWS API Documentation
@@ -156,12 +284,31 @@ module Aws::CloudTrail
156
284
  #
157
285
  class CloudTrailAccessNotEnabledException < Aws::EmptyStructure; end
158
286
 
287
+ # This exception is thrown when a call results in the
288
+ # `InvalidClientTokenId` error code. This can occur when you are
289
+ # creating or updating a trail to send notifications to an Amazon SNS
290
+ # topic that is in a suspended AWS account.
291
+ #
292
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudTrailInvalidClientTokenIdException AWS API Documentation
293
+ #
294
+ class CloudTrailInvalidClientTokenIdException < Aws::EmptyStructure; end
295
+
159
296
  # Cannot set a CloudWatch Logs delivery for this region.
160
297
  #
161
298
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/CloudWatchLogsDeliveryUnavailableException AWS API Documentation
162
299
  #
163
300
  class CloudWatchLogsDeliveryUnavailableException < Aws::EmptyStructure; end
164
301
 
302
+ # This exception is thrown when the specified resource is not ready for
303
+ # an operation. This can occur when you try to run an operation on a
304
+ # trail before CloudTrail has time to fully load the trail. If this
305
+ # exception occurs, wait a few minutes, and then try the operation
306
+ # again.
307
+ #
308
+ # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ConflictException AWS API Documentation
309
+ #
310
+ class ConflictException < Aws::EmptyStructure; end
311
+
165
312
  # Specifies the settings for each trail.
166
313
  #
167
314
  # @note When making an API call, you may pass CreateTrailRequest
@@ -414,16 +561,21 @@ module Aws::CloudTrail
414
561
  include Aws::Structure
415
562
  end
416
563
 
417
- # The Amazon S3 buckets or AWS Lambda functions that you specify in your
418
- # event selectors for your trail to log data events. Data events provide
419
- # information about the resource operations performed on or within a
420
- # resource itself. These are also known as data plane operations. You
421
- # can specify up to 250 data resources for a trail.
564
+ # The Amazon S3 buckets, AWS Lambda functions, or Amazon DynamoDB tables
565
+ # that you specify in your event selectors for your trail to log data
566
+ # events. Data events provide information about the resource operations
567
+ # performed on or within a resource itself. These are also known as data
568
+ # plane operations. You can specify up to 250 data resources for a
569
+ # trail.
422
570
  #
423
571
  # <note markdown="1"> The total number of allowed data resources is 250. This number can be
424
572
  # distributed between 1 and 5 event selectors, but the total cannot
425
573
  # exceed 250 across all selectors.
426
574
  #
575
+ # If you are using advanced event selectors, the maximum total number of
576
+ # values for all conditions, across all advanced event selectors for the
577
+ # trail, is 500.
578
+ #
427
579
  # </note>
428
580
  #
429
581
  # The following example demonstrates how logging works when you
@@ -476,7 +628,13 @@ module Aws::CloudTrail
476
628
  #
477
629
  # @!attribute [rw] type
478
630
  # The resource type in which you want to log data events. You can
479
- # specify `AWS::S3::Object` or `AWS::Lambda::Function` resources.
631
+ # specify `AWS::S3::Object`, `AWS::Lambda::Function`, or
632
+ # `AWS::DynamoDB::Table` resources.
633
+ #
634
+ # The `AWS::S3Outposts::Object`, `AWS::ManagedBlockchain::Node`, and
635
+ # `AWS::S3ObjectLambda::AccessPoint` resource types are not valid in
636
+ # basic event selectors. To log data events on these resource types,
637
+ # use advanced event selectors.
480
638
  # @return [String]
481
639
  #
482
640
  # @!attribute [rw] values
@@ -502,8 +660,8 @@ module Aws::CloudTrail
502
660
  # trail logs data events for objects in this S3 bucket that match
503
661
  # the prefix.
504
662
  #
505
- # * To log data events for all functions in your AWS account, specify
506
- # the prefix as `arn:aws:lambda`.
663
+ # * To log data events for all Lambda functions in your AWS account,
664
+ # specify the prefix as `arn:aws:lambda`.
507
665
  #
508
666
  # <note markdown="1"> This will also enable logging of `Invoke` activity performed by
509
667
  # any user or role in your AWS account, even if that activity is
@@ -523,6 +681,9 @@ module Aws::CloudTrail
523
681
  # *arn:aws:lambda:us-west-2:111111111111:function:helloworld2*.
524
682
  #
525
683
  # </note>
684
+ #
685
+ # * To log data events for all DynamoDB tables in your AWS account,
686
+ # specify the prefix as `arn:aws:dynamodb`.
526
687
  # @return [Array<String>]
527
688
  #
528
689
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/DataResource AWS API Documentation
@@ -707,6 +868,9 @@ module Aws::CloudTrail
707
868
  #
708
869
  # You can configure up to five event selectors for a trail.
709
870
  #
871
+ # You cannot apply both event selectors and advanced event selectors to
872
+ # a trail.
873
+ #
710
874
  # @note When making an API call, you may pass EventSelector
711
875
  # data as a hash:
712
876
  #
@@ -753,11 +917,11 @@ module Aws::CloudTrail
753
917
  #
754
918
  # @!attribute [rw] data_resources
755
919
  # CloudTrail supports data event logging for Amazon S3 objects and AWS
756
- # Lambda functions. You can specify up to 250 resources for an
757
- # individual event selector, but the total number of data resources
758
- # cannot exceed 250 across all event selectors in a trail. This limit
759
- # does not apply if you configure resource logging for all data
760
- # events.
920
+ # Lambda functions with basic event selectors. You can specify up to
921
+ # 250 resources for an individual event selector, but the total number
922
+ # of data resources cannot exceed 250 across all event selectors in a
923
+ # trail. This limit does not apply if you configure resource logging
924
+ # for all data events.
761
925
  #
762
926
  # For more information, see [Data Events][1] and [Limits in AWS
763
927
  # CloudTrail][2] in the *AWS CloudTrail User Guide*.
@@ -833,6 +997,7 @@ module Aws::CloudTrail
833
997
  # @return [Array<Types::EventSelector>]
834
998
  #
835
999
  # @!attribute [rw] advanced_event_selectors
1000
+ # The advanced event selectors that are configured for the trail.
836
1001
  # @return [Array<Types::AdvancedEventSelector>]
837
1002
  #
838
1003
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetEventSelectorsResponse AWS API Documentation
@@ -1185,11 +1350,14 @@ module Aws::CloudTrail
1185
1350
  class InvalidEventCategoryException < Aws::EmptyStructure; end
1186
1351
 
1187
1352
  # This exception is thrown when the `PutEventSelectors` operation is
1188
- # called with a number of event selectors or data resources that is not
1189
- # valid. The combination of event selectors and data resources is not
1190
- # valid. A trail can have up to 5 event selectors. A trail is limited to
1191
- # 250 data resources. These data resources can be distributed across
1192
- # event selectors, but the overall total cannot exceed 250.
1353
+ # called with a number of event selectors, advanced event selectors, or
1354
+ # data resources that is not valid. The combination of event selectors
1355
+ # or advanced event selectors and data resources is not valid. A trail
1356
+ # can have up to 5 event selectors. If a trail uses advanced event
1357
+ # selectors, a maximum of 500 total values for all conditions in all
1358
+ # advanced event selectors is allowed. A trail is limited to 250 data
1359
+ # resources. These data resources can be distributed across event
1360
+ # selectors, but the overall total cannot exceed 250.
1193
1361
  #
1194
1362
  # You can:
1195
1363
  #
@@ -1201,6 +1369,9 @@ module Aws::CloudTrail
1201
1369
  # allowed only if the total number of data resources does not exceed
1202
1370
  # 250 across all event selectors for a trail.
1203
1371
  #
1372
+ # * Specify up to 500 values for all conditions in all advanced event
1373
+ # selectors for a trail.
1374
+ #
1204
1375
  # * Specify a valid value for a parameter. For example, specifying the
1205
1376
  # `ReadWriteType` parameter with a value of `read-only` is invalid.
1206
1377
  #
@@ -1331,10 +1502,10 @@ module Aws::CloudTrail
1331
1502
  #
1332
1503
  class KmsKeyDisabledException < Aws::EmptyStructure; end
1333
1504
 
1334
- # This exception is thrown when the KMS key does not exist, when the S3
1335
- # bucket and the KMS key are not in the same region, or when the KMS key
1336
- # associated with the SNS topic either does not exist or is not in the
1337
- # same region.
1505
+ # This exception is thrown when the AWS KMS key does not exist, when the
1506
+ # S3 bucket and the AWS KMS key are not in the same region, or when the
1507
+ # AWS KMS key associated with the SNS topic either does not exist or is
1508
+ # not in the same region.
1338
1509
  #
1339
1510
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/KmsKeyNotFoundException AWS API Documentation
1340
1511
  #
@@ -1717,7 +1888,7 @@ module Aws::CloudTrail
1717
1888
  # ],
1718
1889
  # advanced_event_selectors: [
1719
1890
  # {
1720
- # name: "SelectorName", # required
1891
+ # name: "SelectorName",
1721
1892
  # field_selectors: [ # required
1722
1893
  # {
1723
1894
  # field: "SelectorField", # required
@@ -1756,10 +1927,27 @@ module Aws::CloudTrail
1756
1927
  #
1757
1928
  # @!attribute [rw] event_selectors
1758
1929
  # Specifies the settings for your event selectors. You can configure
1759
- # up to five event selectors for a trail.
1930
+ # up to five event selectors for a trail. You can use either
1931
+ # `EventSelectors` or `AdvancedEventSelectors` in a
1932
+ # `PutEventSelectors` request, but not both. If you apply
1933
+ # `EventSelectors` to a trail, any existing `AdvancedEventSelectors`
1934
+ # are overwritten.
1760
1935
  # @return [Array<Types::EventSelector>]
1761
1936
  #
1762
1937
  # @!attribute [rw] advanced_event_selectors
1938
+ # Specifies the settings for advanced event selectors. You can add
1939
+ # advanced event selectors, and conditions for your advanced event
1940
+ # selectors, up to a maximum of 500 values for all conditions and
1941
+ # selectors on a trail. You can use either `AdvancedEventSelectors` or
1942
+ # `EventSelectors`, but not both. If you apply
1943
+ # `AdvancedEventSelectors` to a trail, any existing `EventSelectors`
1944
+ # are overwritten. For more information about advanced event
1945
+ # selectors, see [Logging data events for trails][1] in the *AWS
1946
+ # CloudTrail User Guide*.
1947
+ #
1948
+ #
1949
+ #
1950
+ # [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
1763
1951
  # @return [Array<Types::AdvancedEventSelector>]
1764
1952
  #
1765
1953
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsRequest AWS API Documentation
@@ -1784,6 +1972,7 @@ module Aws::CloudTrail
1784
1972
  # @return [Array<Types::EventSelector>]
1785
1973
  #
1786
1974
  # @!attribute [rw] advanced_event_selectors
1975
+ # Specifies the advanced event selectors configured for your trail.
1787
1976
  # @return [Array<Types::AdvancedEventSelector>]
1788
1977
  #
1789
1978
  # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/PutEventSelectorsResponse AWS API Documentation
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-cloudtrail
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.30.0
4
+ version: 1.35.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-11-24 00:00:00.000000000 Z
11
+ date: 2021-06-04 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
19
19
  version: '3'
20
20
  - - ">="
21
21
  - !ruby/object:Gem::Version
22
- version: 3.109.0
22
+ version: 3.112.0
23
23
  type: :runtime
24
24
  prerelease: false
25
25
  version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
29
29
  version: '3'
30
30
  - - ">="
31
31
  - !ruby/object:Gem::Version
32
- version: 3.109.0
32
+ version: 3.112.0
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: aws-sigv4
35
35
  requirement: !ruby/object:Gem::Requirement
@@ -47,11 +47,14 @@ dependencies:
47
47
  description: Official AWS Ruby gem for AWS CloudTrail (CloudTrail). This gem is part
48
48
  of the AWS SDK for Ruby.
49
49
  email:
50
- - trevrowe@amazon.com
50
+ - aws-dr-rubygems@amazon.com
51
51
  executables: []
52
52
  extensions: []
53
53
  extra_rdoc_files: []
54
54
  files:
55
+ - CHANGELOG.md
56
+ - LICENSE.txt
57
+ - VERSION
55
58
  - lib/aws-sdk-cloudtrail.rb
56
59
  - lib/aws-sdk-cloudtrail/client.rb
57
60
  - lib/aws-sdk-cloudtrail/client_api.rb
@@ -63,8 +66,8 @@ homepage: https://github.com/aws/aws-sdk-ruby
63
66
  licenses:
64
67
  - Apache-2.0
65
68
  metadata:
66
- source_code_uri: https://github.com/aws/aws-sdk-ruby/tree/master/gems/aws-sdk-cloudtrail
67
- changelog_uri: https://github.com/aws/aws-sdk-ruby/tree/master/gems/aws-sdk-cloudtrail/CHANGELOG.md
69
+ source_code_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-sdk-cloudtrail
70
+ changelog_uri: https://github.com/aws/aws-sdk-ruby/tree/version-3/gems/aws-sdk-cloudtrail/CHANGELOG.md
68
71
  post_install_message:
69
72
  rdoc_options: []
70
73
  require_paths:
@@ -80,8 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
80
83
  - !ruby/object:Gem::Version
81
84
  version: '0'
82
85
  requirements: []
83
- rubyforge_project:
84
- rubygems_version: 2.7.6.2
86
+ rubygems_version: 3.1.6
85
87
  signing_key:
86
88
  specification_version: 4
87
89
  summary: AWS SDK for Ruby - CloudTrail