aws-sdk-cloudtrail 1.35.0 → 1.39.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 23ba65a9162518884fe4096ec24c92e1305afa7211720af773fde28f00ee490f
4
- data.tar.gz: a05fbbdc5c02421f1d9fc324d5897b1587b8f1bc834407381ad9d3c20006d358
3
+ metadata.gz: f5c656b7e96bf3ec90fbef8163d3eb493e201aba6d79e6aa8878421775e8724d
4
+ data.tar.gz: 2ce299b6b65c8091b5a2e3eece9ac36c3a1b77b91c386566e2ed99ed52bc0f3b
5
5
  SHA512:
6
- metadata.gz: 2a62b47f50bf25b8b1f994df2b7e561ef06dfe4013e8acba896cb56ce9ec250dea6f0c7201137aa94c8573b1fa98a4b14044db91b8d03b5b47e46a0a8789013b
7
- data.tar.gz: 8c77c872ed2d10bea6f402b25f5638c74076ef87bba2b24390453e8e15bb1c4c9e2f0d54f1696a88efea0abe99d0f637a325c7fc5d800a86d77a535d2370ace3
6
+ metadata.gz: 32a4f46d96e16b4cf61545e68099868699be0b8722d027b63fae433b08ce6dab80aa5455f57e4d9cf0fe76e35ce55c4f7fedef6bfe86dfaa0b3609db462ae54a
7
+ data.tar.gz: 4cf145c34f04bce877bed196594c1872709f9f734e46fbac6b318b046075de22994d8a7efc660abe7b420ef50a144610201896a709b7ba7e6b03f6c0f7a1e4dc
data/CHANGELOG.md CHANGED
@@ -1,6 +1,26 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.39.0 (2021-10-18)
5
+ ------------------
6
+
7
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
8
+
9
+ 1.38.0 (2021-09-01)
10
+ ------------------
11
+
12
+ * Feature - Documentation updates for CloudTrail
13
+
14
+ 1.37.0 (2021-07-30)
15
+ ------------------
16
+
17
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
18
+
19
+ 1.36.0 (2021-07-28)
20
+ ------------------
21
+
22
+ * Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
23
+
4
24
  1.35.0 (2021-06-04)
5
25
  ------------------
6
26
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.35.0
1
+ 1.39.0
@@ -342,9 +342,9 @@ module Aws::CloudTrail
342
342
  # tag key. Tag key names must be unique for a trail; you cannot have two
343
343
  # keys with the same name but different values. If you specify a key
344
344
  # without a value, the tag will be created with the specified key and a
345
- # value of null. You can tag a trail that applies to all AWS Regions
346
- # only from the Region in which the trail was created (also known as its
347
- # home region).
345
+ # value of null. You can tag a trail that applies to all Amazon Web
346
+ # Services Regions only from the Region in which the trail was created
347
+ # (also known as its home region).
348
348
  #
349
349
  # @option params [required, String] :resource_id
350
350
  # Specifies the ARN of the trail to which one or more tags will be
@@ -353,7 +353,7 @@ module Aws::CloudTrail
353
353
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
354
354
  #
355
355
  # @option params [Array<Types::Tag>] :tags_list
356
- # Contains a list of CloudTrail tags, up to a limit of 50
356
+ # Contains a list of tags, up to a limit of 50
357
357
  #
358
358
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
359
359
  #
@@ -393,7 +393,7 @@ module Aws::CloudTrail
393
393
  # * Be between 3 and 128 characters
394
394
  #
395
395
  # * Have no adjacent periods, underscores or dashes. Names like
396
- # `my-_namespace` and `my--namespace` are invalid.
396
+ # `my-_namespace` and `my--namespace` are not valid.
397
397
  #
398
398
  # * Not be in IP address format (for example, 192.168.5.4)
399
399
  #
@@ -434,7 +434,7 @@ module Aws::CloudTrail
434
434
  # default is false.
435
435
  #
436
436
  # <note markdown="1"> When you disable log file integrity validation, the chain of digest
437
- # files is broken after one hour. CloudTrail will not create digest
437
+ # files is broken after one hour. CloudTrail does not create digest
438
438
  # files for log files that were delivered during a period in which log
439
439
  # file integrity validation was disabled. For example, if you enable log
440
440
  # file integrity validation at noon on January 1, disable it at noon on
@@ -449,7 +449,7 @@ module Aws::CloudTrail
449
449
  # Specifies a log group name using an Amazon Resource Name (ARN), a
450
450
  # unique identifier that represents the log group to which CloudTrail
451
451
  # logs will be delivered. Not required unless you specify
452
- # CloudWatchLogsRoleArn.
452
+ # `CloudWatchLogsRoleArn`.
453
453
  #
454
454
  # @option params [String] :cloud_watch_logs_role_arn
455
455
  # Specifies the role for the CloudWatch Logs endpoint to assume to write
@@ -461,6 +461,10 @@ module Aws::CloudTrail
461
461
  # fully specified ARN to an alias, a fully specified ARN to a key, or a
462
462
  # globally unique identifier.
463
463
  #
464
+ # CloudTrail also supports KMS multi-Region keys. For more information
465
+ # about multi-Region keys, see [Using multi-Region keys][1] in the *Key
466
+ # Management Service Developer Guide*.
467
+ #
464
468
  # Examples:
465
469
  #
466
470
  # * alias/MyAliasName
@@ -471,12 +475,16 @@ module Aws::CloudTrail
471
475
  #
472
476
  # * 12345678-1234-1234-1234-123456789012
473
477
  #
478
+ #
479
+ #
480
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html
481
+ #
474
482
  # @option params [Boolean] :is_organization_trail
475
483
  # Specifies whether the trail is created for all accounts in an
476
- # organization in AWS Organizations, or only for the current AWS
477
- # account. The default is false, and cannot be true unless the call is
478
- # made on behalf of an AWS account that is the master account for an
479
- # organization in AWS Organizations.
484
+ # organization in Organizations, or only for the current Amazon Web
485
+ # Services account. The default is false, and cannot be true unless the
486
+ # call is made on behalf of an Amazon Web Services account that is the
487
+ # management account for an organization in Organizations.
480
488
  #
481
489
  # @option params [Array<Types::Tag>] :tags_list
482
490
  # A list of tags.
@@ -551,7 +559,7 @@ module Aws::CloudTrail
551
559
  #
552
560
  # @option params [required, String] :name
553
561
  # Specifies the name or the CloudTrail ARN of the trail to be deleted.
554
- # The format of a trail ARN is:
562
+ # The following is the format of a trail ARN.
555
563
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
556
564
  #
557
565
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -659,7 +667,7 @@ module Aws::CloudTrail
659
667
  # you are logging data events.
660
668
  #
661
669
  # For more information, see [Logging Data and Management Events for
662
- # Trails ][1] in the *AWS CloudTrail User Guide*.
670
+ # Trails ][1] in the *CloudTrail User Guide*.
663
671
  #
664
672
  #
665
673
  #
@@ -743,7 +751,7 @@ module Aws::CloudTrail
743
751
  # exception `InsightNotEnabledException`
744
752
  #
745
753
  # For more information, see [Logging CloudTrail Insights Events for
746
- # Trails ][1] in the *AWS CloudTrail User Guide*.
754
+ # Trails ][1] in the *CloudTrail User Guide*.
747
755
  #
748
756
  #
749
757
  #
@@ -850,7 +858,7 @@ module Aws::CloudTrail
850
858
  # Specifies the name or the CloudTrail ARN of the trail for which you
851
859
  # are requesting status. To get the status of a shadow trail (a
852
860
  # replication of the trail in another region), you must specify its ARN.
853
- # The format of a trail ARN is:
861
+ # The following is the format of a trail ARN.
854
862
  #
855
863
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
856
864
  #
@@ -914,10 +922,10 @@ module Aws::CloudTrail
914
922
  # to validate digest files that were signed with its corresponding
915
923
  # private key.
916
924
  #
917
- # <note markdown="1"> CloudTrail uses different private/public key pairs per region. Each
918
- # digest file is signed with a private key unique to its region.
919
- # Therefore, when you validate a digest file from a particular region,
920
- # you must look in the same region for its corresponding public key.
925
+ # <note markdown="1"> CloudTrail uses different private and public key pairs per region.
926
+ # Each digest file is signed with a private key unique to its region.
927
+ # When you validate a digest file from a specific region, you must look
928
+ # in the same region for its corresponding public key.
921
929
  #
922
930
  # </note>
923
931
  #
@@ -971,7 +979,7 @@ module Aws::CloudTrail
971
979
  #
972
980
  # @option params [required, Array<String>] :resource_id_list
973
981
  # Specifies a list of trail ARNs whose tags will be listed. The list has
974
- # a limit of 20 ARNs. The format of a trail ARN is:
982
+ # a limit of 20 ARNs. The following is the format of a trail ARN.
975
983
  #
976
984
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
977
985
  #
@@ -1054,7 +1062,7 @@ module Aws::CloudTrail
1054
1062
  # in a region within the last 90 days. Lookup supports the following
1055
1063
  # attributes for management events:
1056
1064
  #
1057
- # * AWS access key
1065
+ # * Amazon Web Services access key
1058
1066
  #
1059
1067
  # * Event ID
1060
1068
  #
@@ -1204,7 +1212,7 @@ module Aws::CloudTrail
1204
1212
  #
1205
1213
  # You can configure up to five event selectors for each trail. For more
1206
1214
  # information, see [Logging data and management events for trails ][1]
1207
- # and [Quotas in AWS CloudTrail][2] in the *AWS CloudTrail User Guide*.
1215
+ # and [Quotas in CloudTrail][2] in the *CloudTrail User Guide*.
1208
1216
  #
1209
1217
  # You can add advanced event selectors, and conditions for your advanced
1210
1218
  # event selectors, up to a maximum of 500 values for all conditions and
@@ -1212,7 +1220,7 @@ module Aws::CloudTrail
1212
1220
  # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1213
1221
  # to a trail, any existing `EventSelectors` are overwritten. For more
1214
1222
  # information about advanced event selectors, see [Logging data events
1215
- # for trails][3] in the *AWS CloudTrail User Guide*.
1223
+ # for trails][3] in the *CloudTrail User Guide*.
1216
1224
  #
1217
1225
  #
1218
1226
  #
@@ -1232,11 +1240,11 @@ module Aws::CloudTrail
1232
1240
  # * Be between 3 and 128 characters
1233
1241
  #
1234
1242
  # * Have no adjacent periods, underscores or dashes. Names like
1235
- # `my-_namespace` and `my--namespace` are invalid.
1243
+ # `my-_namespace` and `my--namespace` are not valid.
1236
1244
  #
1237
1245
  # * Not be in IP address format (for example, 192.168.5.4)
1238
1246
  #
1239
- # If you specify a trail ARN, it must be in the format:
1247
+ # If you specify a trail ARN, it must be in the following format.
1240
1248
  #
1241
1249
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
1242
1250
  #
@@ -1255,7 +1263,7 @@ module Aws::CloudTrail
1255
1263
  # `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
1256
1264
  # to a trail, any existing `EventSelectors` are overwritten. For more
1257
1265
  # information about advanced event selectors, see [Logging data events
1258
- # for trails][1] in the *AWS CloudTrail User Guide*.
1266
+ # for trails][1] in the *CloudTrail User Guide*.
1259
1267
  #
1260
1268
  #
1261
1269
  #
@@ -1343,17 +1351,17 @@ module Aws::CloudTrail
1343
1351
  # Lets you enable Insights event logging by specifying the Insights
1344
1352
  # selectors that you want to enable on an existing trail. You also use
1345
1353
  # `PutInsightSelectors` to turn off Insights event logging, by passing
1346
- # an empty list of insight types. In this release, only
1347
- # `ApiCallRateInsight` is supported as an Insights selector.
1354
+ # an empty list of insight types. The valid Insights event type in this
1355
+ # release is `ApiCallRateInsight`.
1348
1356
  #
1349
1357
  # @option params [required, String] :trail_name
1350
1358
  # The name of the CloudTrail trail for which you want to change or add
1351
1359
  # Insights selectors.
1352
1360
  #
1353
1361
  # @option params [required, Array<Types::InsightSelector>] :insight_selectors
1354
- # A JSON string that contains the insight types you want to log on a
1355
- # trail. In this release, only `ApiCallRateInsight` is supported as an
1356
- # insight type.
1362
+ # A JSON string that contains the Insights types that you want to log on
1363
+ # a trail. The valid Insights type in this release is
1364
+ # `ApiCallRateInsight`.
1357
1365
  #
1358
1366
  # @return [Types::PutInsightSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1359
1367
  #
@@ -1420,15 +1428,17 @@ module Aws::CloudTrail
1420
1428
  req.send_request(options)
1421
1429
  end
1422
1430
 
1423
- # Starts the recording of AWS API calls and log file delivery for a
1424
- # trail. For a trail that is enabled in all regions, this operation must
1425
- # be called from the region in which the trail was created. This
1426
- # operation cannot be called on the shadow trails (replicated trails in
1427
- # other regions) of a trail that is enabled in all regions.
1431
+ # Starts the recording of Amazon Web Services API calls and log file
1432
+ # delivery for a trail. For a trail that is enabled in all regions, this
1433
+ # operation must be called from the region in which the trail was
1434
+ # created. This operation cannot be called on the shadow trails
1435
+ # (replicated trails in other regions) of a trail that is enabled in all
1436
+ # regions.
1428
1437
  #
1429
1438
  # @option params [required, String] :name
1430
1439
  # Specifies the name or the CloudTrail ARN of the trail for which
1431
- # CloudTrail logs AWS API calls. The format of a trail ARN is:
1440
+ # CloudTrail logs Amazon Web Services API calls. The following is the
1441
+ # format of a trail ARN.
1432
1442
  #
1433
1443
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
1434
1444
  #
@@ -1449,19 +1459,20 @@ module Aws::CloudTrail
1449
1459
  req.send_request(options)
1450
1460
  end
1451
1461
 
1452
- # Suspends the recording of AWS API calls and log file delivery for the
1453
- # specified trail. Under most circumstances, there is no need to use
1454
- # this action. You can update a trail without stopping it first. This
1455
- # action is the only way to stop recording. For a trail enabled in all
1456
- # regions, this operation must be called from the region in which the
1457
- # trail was created, or an `InvalidHomeRegionException` will occur. This
1458
- # operation cannot be called on the shadow trails (replicated trails in
1459
- # other regions) of a trail enabled in all regions.
1462
+ # Suspends the recording of Amazon Web Services API calls and log file
1463
+ # delivery for the specified trail. Under most circumstances, there is
1464
+ # no need to use this action. You can update a trail without stopping it
1465
+ # first. This action is the only way to stop recording. For a trail
1466
+ # enabled in all regions, this operation must be called from the region
1467
+ # in which the trail was created, or an `InvalidHomeRegionException`
1468
+ # will occur. This operation cannot be called on the shadow trails
1469
+ # (replicated trails in other regions) of a trail enabled in all
1470
+ # regions.
1460
1471
  #
1461
1472
  # @option params [required, String] :name
1462
1473
  # Specifies the name or the CloudTrail ARN of the trail for which
1463
- # CloudTrail will stop logging AWS API calls. The format of a trail ARN
1464
- # is:
1474
+ # CloudTrail will stop logging Amazon Web Services API calls. The
1475
+ # following is the format of a trail ARN.
1465
1476
  #
1466
1477
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
1467
1478
  #
@@ -1482,13 +1493,13 @@ module Aws::CloudTrail
1482
1493
  req.send_request(options)
1483
1494
  end
1484
1495
 
1485
- # Updates the settings that specify delivery of log files. Changes to a
1486
- # trail do not require stopping the CloudTrail service. Use this action
1487
- # to designate an existing bucket for log delivery. If the existing
1488
- # bucket has previously been a target for CloudTrail log files, an IAM
1489
- # policy exists for the bucket. `UpdateTrail` must be called from the
1490
- # region in which the trail was created; otherwise, an
1491
- # `InvalidHomeRegionException` is thrown.
1496
+ # Updates trail settings that control what events you are logging, and
1497
+ # how to handle log files. Changes to a trail do not require stopping
1498
+ # the CloudTrail service. Use this action to designate an existing
1499
+ # bucket for log delivery. If the existing bucket has previously been a
1500
+ # target for CloudTrail log files, an IAM policy exists for the bucket.
1501
+ # `UpdateTrail` must be called from the region in which the trail was
1502
+ # created; otherwise, an `InvalidHomeRegionException` is thrown.
1492
1503
  #
1493
1504
  # @option params [required, String] :name
1494
1505
  # Specifies the name of the trail or trail ARN. If `Name` is a trail
@@ -1502,11 +1513,11 @@ module Aws::CloudTrail
1502
1513
  # * Be between 3 and 128 characters
1503
1514
  #
1504
1515
  # * Have no adjacent periods, underscores or dashes. Names like
1505
- # `my-_namespace` and `my--namespace` are invalid.
1516
+ # `my-_namespace` and `my--namespace` are not valid.
1506
1517
  #
1507
1518
  # * Not be in IP address format (for example, 192.168.5.4)
1508
1519
  #
1509
- # If `Name` is a trail ARN, it must be in the format:
1520
+ # If `Name` is a trail ARN, it must be in the following format.
1510
1521
  #
1511
1522
  # `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
1512
1523
  #
@@ -1551,7 +1562,7 @@ module Aws::CloudTrail
1551
1562
  # false.
1552
1563
  #
1553
1564
  # <note markdown="1"> When you disable log file integrity validation, the chain of digest
1554
- # files is broken after one hour. CloudTrail will not create digest
1565
+ # files is broken after one hour. CloudTrail does not create digest
1555
1566
  # files for log files that were delivered during a period in which log
1556
1567
  # file integrity validation was disabled. For example, if you enable log
1557
1568
  # file integrity validation at noon on January 1, disable it at noon on
@@ -1565,8 +1576,8 @@ module Aws::CloudTrail
1565
1576
  # @option params [String] :cloud_watch_logs_log_group_arn
1566
1577
  # Specifies a log group name using an Amazon Resource Name (ARN), a
1567
1578
  # unique identifier that represents the log group to which CloudTrail
1568
- # logs will be delivered. Not required unless you specify
1569
- # CloudWatchLogsRoleArn.
1579
+ # logs are delivered. Not required unless you specify
1580
+ # `CloudWatchLogsRoleArn`.
1570
1581
  #
1571
1582
  # @option params [String] :cloud_watch_logs_role_arn
1572
1583
  # Specifies the role for the CloudWatch Logs endpoint to assume to write
@@ -1578,6 +1589,10 @@ module Aws::CloudTrail
1578
1589
  # fully specified ARN to an alias, a fully specified ARN to a key, or a
1579
1590
  # globally unique identifier.
1580
1591
  #
1592
+ # CloudTrail also supports KMS multi-Region keys. For more information
1593
+ # about multi-Region keys, see [Using multi-Region keys][1] in the *Key
1594
+ # Management Service Developer Guide*.
1595
+ #
1581
1596
  # Examples:
1582
1597
  #
1583
1598
  # * alias/MyAliasName
@@ -1588,17 +1603,21 @@ module Aws::CloudTrail
1588
1603
  #
1589
1604
  # * 12345678-1234-1234-1234-123456789012
1590
1605
  #
1606
+ #
1607
+ #
1608
+ # [1]: https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html
1609
+ #
1591
1610
  # @option params [Boolean] :is_organization_trail
1592
1611
  # Specifies whether the trail is applied to all accounts in an
1593
- # organization in AWS Organizations, or only for the current AWS
1594
- # account. The default is false, and cannot be true unless the call is
1595
- # made on behalf of an AWS account that is the master account for an
1596
- # organization in AWS Organizations. If the trail is not an organization
1597
- # trail and this is set to true, the trail will be created in all AWS
1598
- # accounts that belong to the organization. If the trail is an
1599
- # organization trail and this is set to false, the trail will remain in
1600
- # the current AWS account but be deleted from all member accounts in the
1601
- # organization.
1612
+ # organization in Organizations, or only for the current Amazon Web
1613
+ # Services account. The default is false, and cannot be true unless the
1614
+ # call is made on behalf of an Amazon Web Services account that is the
1615
+ # management account for an organization in Organizations. If the trail
1616
+ # is not an organization trail and this is set to `true`, the trail will
1617
+ # be created in all Amazon Web Services accounts that belong to the
1618
+ # organization. If the trail is an organization trail and this is set to
1619
+ # `false`, the trail will remain in the current Amazon Web Services
1620
+ # account but be deleted from all member accounts in the organization.
1602
1621
  #
1603
1622
  # @return [Types::UpdateTrailResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1604
1623
  #
@@ -1670,7 +1689,7 @@ module Aws::CloudTrail
1670
1689
  params: params,
1671
1690
  config: config)
1672
1691
  context[:gem_name] = 'aws-sdk-cloudtrail'
1673
- context[:gem_version] = '1.35.0'
1692
+ context[:gem_version] = '1.39.0'
1674
1693
  Seahorse::Client::Request.new(handlers, context)
1675
1694
  end
1676
1695