aws-sdk-cloudtrail 1.50.0 → 1.52.0

data/lib/aws-sdk-cloudtrail/types.rb

@@ -10,6 +10,13 @@
 module Aws::CloudTrail
   module Types
 
+    # This exception is thrown when you start a new import and a previous
+    # import is still in progress.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/AccountHasOngoingImportException AWS API Documentation
+    #
+    class AccountHasOngoingImportException < Aws::EmptyStructure; end
+
     # Specifies the tags to add to a trail or event data store.
     #
     # @note When making an API call, you may pass AddTagsRequest
@@ -366,7 +373,7 @@ module Aws::CloudTrail
     # Contains information about a returned CloudTrail channel.
     #
     # @!attribute [rw] channel_arn
-    #   The Amazon Resource Name (ARN) of the channel.
+    #   The Amazon Resource Name (ARN) of a channel.
     #   @return [String]
     #
     # @!attribute [rw] name
@@ -386,8 +393,8 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
-    # The specified channel ARN is not valid or does not map to a channel in
-    # your account.
+    # This exception is thrown when the specified value of `ChannelARN` is
+    # not valid.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ChannelARNInvalidException AWS API Documentation
     #
@@ -713,7 +720,7 @@ module Aws::CloudTrail
     #
     # @!attribute [rw] kms_key_id
     #   Specifies the KMS key ID to use to encrypt the logs delivered by
-    #   CloudTrail. The value can be an alias name prefixed by "alias/", a
+    #   CloudTrail. The value can be an alias name prefixed by `alias/`, a
     #   fully specified ARN to an alias, a fully specified ARN to a key, or
     #   a globally unique identifier.
     #
@@ -723,13 +730,13 @@ module Aws::CloudTrail
     #
     #   Examples:
     #
-    #   * alias/MyAliasName
+    #   * `alias/MyAliasName`
     #
-    #   * arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
+    #   * `arn:aws:kms:us-east-2:123456789012:alias/MyAliasName`
     #
-    #   * arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
+    #   * `arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012`
     #
-    #   * 12345678-1234-1234-1234-123456789012
+    #   * `12345678-1234-1234-1234-123456789012`
     #
     #
     #
@@ -832,7 +839,7 @@ module Aws::CloudTrail
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   Specifies the KMS key ID that encrypts the logs delivered by
+    #   Specifies the KMS key ID that encrypts the events delivered by
     #   CloudTrail. The value is a fully specified ARN to a KMS key in the
     #   following format.
     #
@@ -938,7 +945,7 @@ module Aws::CloudTrail
     #
     #   * `AWS::DynamoDB::Table`
     #
-    #   The following resource types are also availble through *advanced*
+    #   The following resource types are also available through *advanced*
     #   event selectors. Basic event selector resource types are valid in
     #   advanced event selectors, but advanced event selector resource types
     #   are not valid in basic event selectors. For more information, see
@@ -964,8 +971,7 @@ module Aws::CloudTrail
     #   strings for the specified objects.
     #
     #   * To log data events for all objects in all S3 buckets in your
-    #     Amazon Web Services account, specify the prefix as
-    #     `arn:aws:s3:::`.
+    #     Amazon Web Services account, specify the prefix as `arn:aws:s3`.
     #
     #     <note markdown="1"> This also enables logging of data event activity performed by any
     #     user or role in your Amazon Web Services account, even if that
@@ -1123,6 +1129,15 @@ module Aws::CloudTrail
     #   The error message returned if a query failed.
     #   @return [String]
     #
+    # @!attribute [rw] delivery_s3_uri
+    #   The URI for the S3 bucket where CloudTrail delivered query results,
+    #   if applicable.
+    #   @return [String]
+    #
+    # @!attribute [rw] delivery_status
+    #   The delivery status.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/DescribeQueryResponse AWS API Documentation
     #
     class DescribeQueryResponse < Struct.new(
@@ -1130,7 +1145,9 @@ module Aws::CloudTrail
       :query_string,
       :query_status,
       :query_statistics,
-      :error_message)
+      :error_message,
+      :delivery_s3_uri,
+      :delivery_status)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1212,13 +1229,13 @@ module Aws::CloudTrail
     # events.
     #
     # @!attribute [rw] type
-    #   The type of service. For service-linked channels, the value is
-    #   `AWS_SERVICE`.
+    #   The type of destination for events arriving from a channel. For
+    #   service-linked channels, the value is `AWS_SERVICE`.
     #   @return [String]
     #
     # @!attribute [rw] location
-    #   The location of the service. For service-linked channels, this is
-    #   the name of the Amazon Web Services service.
+    #   For service-linked channels, the value is the name of the Amazon Web
+    #   Services service.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/Destination AWS API Documentation
@@ -1378,6 +1395,13 @@ module Aws::CloudTrail
     #
     class EventDataStoreAlreadyExistsException < Aws::EmptyStructure; end
 
+    # This exception is thrown when you try to update or delete an event
+    # data store that currently has an import in progress.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/EventDataStoreHasOngoingImportException AWS API Documentation
+    #
+    class EventDataStoreHasOngoingImportException < Aws::EmptyStructure; end
+
     # Your account has used the maximum number of event data stores.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/EventDataStoreMaxLimitExceededException AWS API Documentation
@@ -1451,7 +1475,7 @@ module Aws::CloudTrail
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html#logging-management-events
+    #   [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html
     #   [2]: http://aws.amazon.com/cloudtrail/pricing/
     #   @return [Boolean]
     #
@@ -1468,7 +1492,7 @@ module Aws::CloudTrail
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html#logging-data-events
+    #   [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
     #   [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
     #   @return [Array<Types::DataResource>]
     #
@@ -1502,8 +1526,7 @@ module Aws::CloudTrail
     #       }
     #
     # @!attribute [rw] channel
-    #   The Amazon Resource Name (ARN) of the CloudTrail service-linked
-    #   channel.
+    #   The ARN or `UUID` of a channel.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetChannelRequest AWS API Documentation
@@ -1515,32 +1538,30 @@ module Aws::CloudTrail
     end
 
     # @!attribute [rw] channel_arn
-    #   The ARN of the CloudTrail service-linked channel.
+    #   The ARN of an channel returned by a `GetChannel` request.
     #   @return [String]
     #
     # @!attribute [rw] name
-    #   The name of the CloudTrail service-linked channel. For
-    #   service-linked channels, the value is
-    #   `aws-service-channel/service-name/custom-suffix` where
+    #   The name of the CloudTrail channel. For service-linked channels, the
+    #   value is `aws-service-channel/service-name/custom-suffix` where
     #   `service-name` represents the name of the Amazon Web Services
     #   service that created the channel and `custom-suffix` represents the
     #   suffix generated by the Amazon Web Services service.
     #   @return [String]
     #
     # @!attribute [rw] source
-    #   The trail or event data store for the CloudTrail service-linked
-    #   channel.
+    #   The event source for the CloudTrail channel.
     #   @return [String]
     #
     # @!attribute [rw] source_config
     #   Provides information about the advanced event selectors configured
-    #   for the service-linked channel, and whether the service-linked
-    #   channel applies to all regions or one region.
+    #   for the channel, and whether the channel applies to all regions or a
+    #   single region.
     #   @return [Types::SourceConfig]
     #
     # @!attribute [rw] destinations
-    #   The Amazon Web Services service that created the CloudTrail
-    #   service-linked channel.
+    #   The Amazon Web Services service that created the service-linked
+    #   channel.
     #   @return [Array<Types::Destination>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetChannelResponse AWS API Documentation
@@ -1696,6 +1717,85 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetImportRequest
+    #   data as a hash:
+    #
+    #       {
+    #         import_id: "UUID", # required
+    #       }
+    #
+    # @!attribute [rw] import_id
+    #   The ID for the import.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetImportRequest AWS API Documentation
+    #
+    class GetImportRequest < Struct.new(
+      :import_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] import_id
+    #   The ID of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] destinations
+    #   The ARN of the destination event data store.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] import_source
+    #   The source S3 bucket.
+    #   @return [Types::ImportSource]
+    #
+    # @!attribute [rw] start_event_time
+    #   Used with `EndEventTime` to bound a `StartImport` request, and limit
+    #   imported trail events to only those events logged within a specified
+    #   time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_event_time
+    #   Used with `StartEventTime` to bound a `StartImport` request, and
+    #   limit imported trail events to only those events logged within a
+    #   specified time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] import_status
+    #   The status of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_timestamp
+    #   The timestamp of the import's creation.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_timestamp
+    #   The timestamp of when the import was updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] import_statistics
+    #   Provides statistics for the import. CloudTrail does not update
+    #   import statistics in real-time. Returned values for parameters such
+    #   as `EventsCompleted` may be lower than the actual value, because
+    #   CloudTrail updates statistics incrementally over the course of the
+    #   import.
+    #   @return [Types::ImportStatistics]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/GetImportResponse AWS API Documentation
+    #
+    class GetImportResponse < Struct.new(
+      :import_id,
+      :destinations,
+      :import_source,
+      :start_event_time,
+      :end_event_time,
+      :import_status,
+      :created_timestamp,
+      :updated_timestamp,
+      :import_statistics)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetInsightSelectorsRequest
     #   data as a hash:
     #
@@ -2021,6 +2121,144 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # Provides information about an import failure.
+    #
+    # @!attribute [rw] location
+    #   The location of the failure in the S3 bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] error_type
+    #   The type of import error.
+    #   @return [String]
+    #
+    # @!attribute [rw] error_message
+    #   Provides the reason the import failed.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_time
+    #   When the import was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ImportFailureListItem AWS API Documentation
+    #
+    class ImportFailureListItem < Struct.new(
+      :location,
+      :status,
+      :error_type,
+      :error_message,
+      :last_updated_time)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The specified import was not found.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ImportNotFoundException AWS API Documentation
+    #
+    class ImportNotFoundException < Aws::EmptyStructure; end
+
+    # The import source.
+    #
+    # @note When making an API call, you may pass ImportSource
+    #   data as a hash:
+    #
+    #       {
+    #         s3: { # required
+    #           s3_location_uri: "String", # required
+    #           s3_bucket_region: "String", # required
+    #           s3_bucket_access_role_arn: "String", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] s3
+    #   The source S3 bucket.
+    #   @return [Types::S3ImportSource]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ImportSource AWS API Documentation
+    #
+    class ImportSource < Struct.new(
+      :s3)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides statistics for the specified `ImportID`. CloudTrail does not
+    # update import statistics in real-time. Returned values for parameters
+    # such as `EventsCompleted` may be lower than the actual value, because
+    # CloudTrail updates statistics incrementally over the course of the
+    # import.
+    #
+    # @!attribute [rw] prefixes_found
+    #   The number of S3 prefixes found for the import.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] prefixes_completed
+    #   The number of S3 prefixes that completed import.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] files_completed
+    #   The number of log files that completed import.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] events_completed
+    #   The number of trail events imported into the event data store.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] failed_entries
+    #   The number of failed entries.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ImportStatistics AWS API Documentation
+    #
+    class ImportStatistics < Struct.new(
+      :prefixes_found,
+      :prefixes_completed,
+      :files_completed,
+      :events_completed,
+      :failed_entries)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains information about an import that was returned by a lookup
+    # request.
+    #
+    # @!attribute [rw] import_id
+    #   The ID of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] import_status
+    #   The status of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] destinations
+    #   The ARN of the destination event data store.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] created_timestamp
+    #   The timestamp of the import's creation.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_timestamp
+    #   The timestamp of the import's last update.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ImportsListItem AWS API Documentation
+    #
+    class ImportsListItem < Struct.new(
+      :import_id,
+      :import_status,
+      :destinations,
+      :created_timestamp,
+      :updated_timestamp)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The event data store is inactive.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InactiveEventDataStoreException AWS API Documentation
@@ -2075,7 +2313,7 @@ module Aws::CloudTrail
     class InsufficientDependencyServiceAccessPermissionException < Aws::EmptyStructure; end
 
     # This exception is thrown when the policy on the S3 bucket or KMS key
-    # is not sufficient.
+    # does not have sufficient permissions for the operation.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InsufficientEncryptionPolicyException AWS API Documentation
     #
@@ -2128,6 +2366,13 @@ module Aws::CloudTrail
     #
     class InvalidEventCategoryException < Aws::EmptyStructure; end
 
+    # This exception is thrown when event categories of specified event data
+    # stores are not valid.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidEventDataStoreCategoryException AWS API Documentation
+    #
+    class InvalidEventDataStoreCategoryException < Aws::EmptyStructure; end
+
     # The event data store is not in a status that supports the operation.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidEventDataStoreStatusException AWS API Documentation
@@ -2171,6 +2416,13 @@ module Aws::CloudTrail
     #
     class InvalidHomeRegionException < Aws::EmptyStructure; end
 
+    # This exception is thrown when the provided source S3 bucket is not
+    # valid for import.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/InvalidImportSourceException AWS API Documentation
+    #
+    class InvalidImportSourceException < Aws::EmptyStructure; end
+
     # The formatting or syntax of the `InsightSelectors` JSON statement in
     # your `PutInsightSelectors` or `GetInsightSelectors` request is not
     # valid, or the specified insight type in the `InsightSelectors`
@@ -2334,7 +2586,12 @@ module Aws::CloudTrail
     #   @return [Integer]
     #
     # @!attribute [rw] next_token
-    #   A token you can use to get the next page of results.
+    #   The token to use to get the next page of results after a previous
+    #   API call. This token must be passed in with the same parameters that
+    #   were specified in the original call. For example, if the original
+    #   call specified an AttributeKey of 'Username' with a value of
+    #   'root', the call with NextToken should include those same
+    #   parameters.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListChannelsRequest AWS API Documentation
@@ -2347,11 +2604,12 @@ module Aws::CloudTrail
     end
 
     # @!attribute [rw] channels
-    #   The list of CloudTrail channels.
+    #   The list of channels in the account.
     #   @return [Array<Types::Channel>]
     #
     # @!attribute [rw] next_token
-    #   A token used to get the next page of results.
+    #   The token to use to get the next page of results after a previous
+    #   API call.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListChannelsResponse AWS API Documentation
@@ -2407,6 +2665,108 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListImportFailuresRequest
+    #   data as a hash:
+    #
+    #       {
+    #         import_id: "UUID", # required
+    #         max_results: 1,
+    #         next_token: "PaginationToken",
+    #       }
+    #
+    # @!attribute [rw] import_id
+    #   The ID of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of failures to display on a single page.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   A token you can use to get the next page of import failures.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListImportFailuresRequest AWS API Documentation
+    #
+    class ListImportFailuresRequest < Struct.new(
+      :import_id,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] failures
+    #   Contains information about the import failures.
+    #   @return [Array<Types::ImportFailureListItem>]
+    #
+    # @!attribute [rw] next_token
+    #   A token you can use to get the next page of results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListImportFailuresResponse AWS API Documentation
+    #
+    class ListImportFailuresResponse < Struct.new(
+      :failures,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListImportsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         max_results: 1,
+    #         destination: "EventDataStoreArn",
+    #         import_status: "INITIALIZING", # accepts INITIALIZING, IN_PROGRESS, FAILED, STOPPED, COMPLETED
+    #         next_token: "PaginationToken",
+    #       }
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of imports to display on a single page.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] destination
+    #   The ARN of the destination event data store.
+    #   @return [String]
+    #
+    # @!attribute [rw] import_status
+    #   The status of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   A token you can use to get the next page of import results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListImportsRequest AWS API Documentation
+    #
+    class ListImportsRequest < Struct.new(
+      :max_results,
+      :destination,
+      :import_status,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] imports
+    #   The list of returned imports.
+    #   @return [Array<Types::ImportsListItem>]
+    #
+    # @!attribute [rw] next_token
+    #   A token you can use to get the next page of import results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/ListImportsResponse AWS API Documentation
+    #
+    class ListImportsResponse < Struct.new(
+      :imports,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Requests the public keys for a specified time range.
     #
     # @note When making an API call, you may pass ListPublicKeysRequest
@@ -3303,16 +3663,48 @@ module Aws::CloudTrail
     #
     class S3BucketDoesNotExistException < Aws::EmptyStructure; end
 
-    # Contains configuration information about the service-linked channel.
+    # The settings for the source S3 bucket.
+    #
+    # @note When making an API call, you may pass S3ImportSource
+    #   data as a hash:
+    #
+    #       {
+    #         s3_location_uri: "String", # required
+    #         s3_bucket_region: "String", # required
+    #         s3_bucket_access_role_arn: "String", # required
+    #       }
+    #
+    # @!attribute [rw] s3_location_uri
+    #   The URI for the source S3 bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_region
+    #   The region associated with the source S3 bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_bucket_access_role_arn
+    #   The IAM ARN role used to access the source S3 bucket.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/S3ImportSource AWS API Documentation
+    #
+    class S3ImportSource < Struct.new(
+      :s3_location_uri,
+      :s3_bucket_region,
+      :s3_bucket_access_role_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains configuration information about the channel.
     #
     # @!attribute [rw] apply_to_all_regions
-    #   Specifies whether the service-linked channel applies to one region
-    #   or all regions.
+    #   Specifies whether the channel applies to a single region or to all
+    #   regions.
     #   @return [Boolean]
     #
     # @!attribute [rw] advanced_event_selectors
-    #   The advanced event selectors configured for the service-linked
-    #   channel.
+    #   The advanced event selectors that are configured for the channel.
     #   @return [Array<Types::AdvancedEventSelector>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/SourceConfig AWS API Documentation
@@ -3324,6 +3716,121 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass StartImportRequest
+    #   data as a hash:
+    #
+    #       {
+    #         destinations: ["EventDataStoreArn"],
+    #         import_source: {
+    #           s3: { # required
+    #             s3_location_uri: "String", # required
+    #             s3_bucket_region: "String", # required
+    #             s3_bucket_access_role_arn: "String", # required
+    #           },
+    #         },
+    #         start_event_time: Time.now,
+    #         end_event_time: Time.now,
+    #         import_id: "UUID",
+    #       }
+    #
+    # @!attribute [rw] destinations
+    #   The ARN of the destination event data store. Use this parameter for
+    #   a new import.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] import_source
+    #   The source S3 bucket for the import. Use this parameter for a new
+    #   import.
+    #   @return [Types::ImportSource]
+    #
+    # @!attribute [rw] start_event_time
+    #   Use with `EndEventTime` to bound a `StartImport` request, and limit
+    #   imported trail events to only those events logged within a specified
+    #   time period. When you specify a time range, CloudTrail checks the
+    #   prefix and log file names to verify the names contain a date between
+    #   the specified `StartEventTime` and `EndEventTime` before attempting
+    #   to import events.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_event_time
+    #   Use with `StartEventTime` to bound a `StartImport` request, and
+    #   limit imported trail events to only those events logged within a
+    #   specified time period. When you specify a time range, CloudTrail
+    #   checks the prefix and log file names to verify the names contain a
+    #   date between the specified `StartEventTime` and `EndEventTime`
+    #   before attempting to import events.
+    #   @return [Time]
+    #
+    # @!attribute [rw] import_id
+    #   The ID of the import. Use this parameter when you are retrying an
+    #   import.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/StartImportRequest AWS API Documentation
+    #
+    class StartImportRequest < Struct.new(
+      :destinations,
+      :import_source,
+      :start_event_time,
+      :end_event_time,
+      :import_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] import_id
+    #   The ID of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] destinations
+    #   The ARN of the destination event data store.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] import_source
+    #   The source S3 bucket for the import.
+    #   @return [Types::ImportSource]
+    #
+    # @!attribute [rw] start_event_time
+    #   Used with `EndEventTime` to bound a `StartImport` request, and limit
+    #   imported trail events to only those events logged within a specified
+    #   time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_event_time
+    #   Used with `StartEventTime` to bound a `StartImport` request, and
+    #   limit imported trail events to only those events logged within a
+    #   specified time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] import_status
+    #   Shows the status of the import after a `StartImport` request. An
+    #   import finishes with a status of `COMPLETED` if there were no
+    #   failures, or `FAILED` if there were failures.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_timestamp
+    #   The timestamp for the import's creation.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_timestamp
+    #   The timestamp of the import's last update, if applicable.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/StartImportResponse AWS API Documentation
+    #
+    class StartImportResponse < Struct.new(
+      :import_id,
+      :destinations,
+      :import_source,
+      :start_event_time,
+      :end_event_time,
+      :import_status,
+      :created_timestamp,
+      :updated_timestamp)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request to CloudTrail to start logging Amazon Web Services API
     # calls for an account.
     #
@@ -3362,16 +3869,23 @@ module Aws::CloudTrail
     #
     #       {
     #         query_statement: "QueryStatement", # required
+    #         delivery_s3_uri: "DeliveryS3Uri",
     #       }
     #
     # @!attribute [rw] query_statement
     #   The SQL code of your query.
     #   @return [String]
     #
+    # @!attribute [rw] delivery_s3_uri
+    #   The URI for the S3 bucket where CloudTrail delivers the query
+    #   results.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/StartQueryRequest AWS API Documentation
     #
     class StartQueryRequest < Struct.new(
-      :query_statement)
+      :query_statement,
+      :delivery_s3_uri)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3388,6 +3902,81 @@ module Aws::CloudTrail
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass StopImportRequest
+    #   data as a hash:
+    #
+    #       {
+    #         import_id: "UUID", # required
+    #       }
+    #
+    # @!attribute [rw] import_id
+    #   The ID of the import.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/StopImportRequest AWS API Documentation
+    #
+    class StopImportRequest < Struct.new(
+      :import_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] import_id
+    #   The ID for the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] import_source
+    #   The source S3 bucket for the import.
+    #   @return [Types::ImportSource]
+    #
+    # @!attribute [rw] destinations
+    #   The ARN of the destination event data store.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] import_status
+    #   The status of the import.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_timestamp
+    #   The timestamp of the import's creation.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_timestamp
+    #   The timestamp of the import's last update.
+    #   @return [Time]
+    #
+    # @!attribute [rw] start_event_time
+    #   Used with `EndEventTime` to bound a `StartImport` request, and limit
+    #   imported trail events to only those events logged within a specified
+    #   time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] end_event_time
+    #   Used with `StartEventTime` to bound a `StartImport` request, and
+    #   limit imported trail events to only those events logged within a
+    #   specified time period.
+    #   @return [Time]
+    #
+    # @!attribute [rw] import_statistics
+    #   Returns information on the stopped import.
+    #   @return [Types::ImportStatistics]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/StopImportResponse AWS API Documentation
+    #
+    class StopImportResponse < Struct.new(
+      :import_id,
+      :import_source,
+      :destinations,
+      :import_status,
+      :created_timestamp,
+      :updated_timestamp,
+      :start_event_time,
+      :end_event_time,
+      :import_statistics)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Passes the request to CloudTrail to stop logging Amazon Web Services
     # API calls for the specified account.
     #
@@ -3667,7 +4256,8 @@ module Aws::CloudTrail
     #
     # @!attribute [rw] advanced_event_selectors
     #   The advanced event selectors used to select events for the event
-    #   data store.
+    #   data store. You can configure up to five advanced event selectors
+    #   for each event data store.
     #   @return [Array<Types::AdvancedEventSelector>]
     #
     # @!attribute [rw] multi_region_enabled