aws-sdk-cloudtrail 1.85.0 → 1.92.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +35 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-cloudtrail/client.rb +114 -47
- data/lib/aws-sdk-cloudtrail/client_api.rb +1 -0
- data/lib/aws-sdk-cloudtrail/endpoints.rb +49 -196
- data/lib/aws-sdk-cloudtrail/plugins/endpoints.rb +18 -6
- data/lib/aws-sdk-cloudtrail/types.rb +207 -565
- data/lib/aws-sdk-cloudtrail.rb +15 -11
- data/sig/client.rbs +2 -0
- data/sig/resource.rbs +2 -0
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 7274c5f7fb833a4db6a9c64caf184e2bed45a9f5c883c1685c81b7e222a4a75b
|
4
|
+
data.tar.gz: f1dc30a16abbb7eaf4ea8252f127c889e940d4676b75d917219308d5f01e72cc
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ba12fe4b6290b74ab29e1f15b0c3884e753e5ccde56ebf7f933cd76648b8213d128a1a41e68d72e2b481b8280e22849322381790a92835459039a12840492309
|
7
|
+
data.tar.gz: ad2f1b0307963c4099f3e7702bc749621c665870539f91f6d785c6352e0ac1e1cd031b736630e2a00b8e793e2a36a39886abe9623caaca4cfe5ca51c9fa12f9d
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,41 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.92.0 (2024-09-25)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Doc-only update for CloudTrail network activity events release (in preview)
|
8
|
+
|
9
|
+
1.91.0 (2024-09-24)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
13
|
+
|
14
|
+
1.90.0 (2024-09-23)
|
15
|
+
------------------
|
16
|
+
|
17
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
18
|
+
|
19
|
+
1.89.0 (2024-09-20)
|
20
|
+
------------------
|
21
|
+
|
22
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
23
|
+
|
24
|
+
1.88.0 (2024-09-11)
|
25
|
+
------------------
|
26
|
+
|
27
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
28
|
+
|
29
|
+
1.87.0 (2024-09-10)
|
30
|
+
------------------
|
31
|
+
|
32
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
33
|
+
|
34
|
+
1.86.0 (2024-09-03)
|
35
|
+
------------------
|
36
|
+
|
37
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
38
|
+
|
4
39
|
1.85.0 (2024-07-02)
|
5
40
|
------------------
|
6
41
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.92.0
|
@@ -32,11 +32,10 @@ require 'aws-sdk-core/plugins/checksum_algorithm.rb'
|
|
32
32
|
require 'aws-sdk-core/plugins/request_compression.rb'
|
33
33
|
require 'aws-sdk-core/plugins/defaults_mode.rb'
|
34
34
|
require 'aws-sdk-core/plugins/recursion_detection.rb'
|
35
|
+
require 'aws-sdk-core/plugins/telemetry.rb'
|
35
36
|
require 'aws-sdk-core/plugins/sign.rb'
|
36
37
|
require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
|
37
38
|
|
38
|
-
Aws::Plugins::GlobalConfiguration.add_identifier(:cloudtrail)
|
39
|
-
|
40
39
|
module Aws::CloudTrail
|
41
40
|
# An API client for CloudTrail. To construct a client, you need to configure a `:region` and `:credentials`.
|
42
41
|
#
|
@@ -83,6 +82,7 @@ module Aws::CloudTrail
|
|
83
82
|
add_plugin(Aws::Plugins::RequestCompression)
|
84
83
|
add_plugin(Aws::Plugins::DefaultsMode)
|
85
84
|
add_plugin(Aws::Plugins::RecursionDetection)
|
85
|
+
add_plugin(Aws::Plugins::Telemetry)
|
86
86
|
add_plugin(Aws::Plugins::Sign)
|
87
87
|
add_plugin(Aws::Plugins::Protocols::JsonRpc)
|
88
88
|
add_plugin(Aws::CloudTrail::Plugins::Endpoints)
|
@@ -128,13 +128,15 @@ module Aws::CloudTrail
|
|
128
128
|
# locations will be searched for credentials:
|
129
129
|
#
|
130
130
|
# * `Aws.config[:credentials]`
|
131
|
-
# * The `:access_key_id`, `:secret_access_key`,
|
132
|
-
#
|
131
|
+
# * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
|
132
|
+
# `:account_id` options.
|
133
|
+
# * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
|
134
|
+
# ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
|
133
135
|
# * `~/.aws/credentials`
|
134
136
|
# * `~/.aws/config`
|
135
137
|
# * EC2/ECS IMDS instance profile - When used by default, the timeouts
|
136
138
|
# are very aggressive. Construct and pass an instance of
|
137
|
-
# `Aws::
|
139
|
+
# `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
|
138
140
|
# enable retries and extended timeouts. Instance profile credential
|
139
141
|
# fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
|
140
142
|
# to true.
|
@@ -153,6 +155,8 @@ module Aws::CloudTrail
|
|
153
155
|
#
|
154
156
|
# @option options [String] :access_key_id
|
155
157
|
#
|
158
|
+
# @option options [String] :account_id
|
159
|
+
#
|
156
160
|
# @option options [Boolean] :active_endpoint_cache (false)
|
157
161
|
# When set to `true`, a thread polling for endpoints will be running in
|
158
162
|
# the background every 60 secs (default). Defaults to `false`.
|
@@ -337,6 +341,16 @@ module Aws::CloudTrail
|
|
337
341
|
# ** Please note ** When response stubbing is enabled, no HTTP
|
338
342
|
# requests are made, and retries are disabled.
|
339
343
|
#
|
344
|
+
# @option options [Aws::Telemetry::TelemetryProviderBase] :telemetry_provider (Aws::Telemetry::NoOpTelemetryProvider)
|
345
|
+
# Allows you to provide a telemetry provider, which is used to
|
346
|
+
# emit telemetry data. By default, uses `NoOpTelemetryProvider` which
|
347
|
+
# will not record or emit any telemetry data. The SDK supports the
|
348
|
+
# following telemetry providers:
|
349
|
+
#
|
350
|
+
# * OpenTelemetry (OTel) - To use the OTel provider, install and require the
|
351
|
+
# `opentelemetry-sdk` gem and then, pass in an instance of a
|
352
|
+
# `Aws::Telemetry::OTelProvider` for telemetry provider.
|
353
|
+
#
|
340
354
|
# @option options [Aws::TokenProvider] :token_provider
|
341
355
|
# A Bearer Token Provider. This can be an instance of any one of the
|
342
356
|
# following classes:
|
@@ -364,7 +378,9 @@ module Aws::CloudTrail
|
|
364
378
|
# sending the request.
|
365
379
|
#
|
366
380
|
# @option options [Aws::CloudTrail::EndpointProvider] :endpoint_provider
|
367
|
-
# The endpoint provider used to resolve endpoints. Any object that responds to
|
381
|
+
# The endpoint provider used to resolve endpoints. Any object that responds to
|
382
|
+
# `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to
|
383
|
+
# `Aws::CloudTrail::EndpointParameters`.
|
368
384
|
#
|
369
385
|
# @option options [Float] :http_continue_timeout (1)
|
370
386
|
# The number of seconds to wait for a 100-continue response before sending the
|
@@ -420,6 +436,12 @@ module Aws::CloudTrail
|
|
420
436
|
# @option options [String] :ssl_ca_store
|
421
437
|
# Sets the X509::Store to verify peer certificate.
|
422
438
|
#
|
439
|
+
# @option options [OpenSSL::X509::Certificate] :ssl_cert
|
440
|
+
# Sets a client certificate when creating http connections.
|
441
|
+
#
|
442
|
+
# @option options [OpenSSL::PKey] :ssl_key
|
443
|
+
# Sets a client key when creating http connections.
|
444
|
+
#
|
423
445
|
# @option options [Float] :ssl_timeout
|
424
446
|
# Sets the SSL timeout in seconds
|
425
447
|
#
|
@@ -1513,25 +1535,32 @@ module Aws::CloudTrail
|
|
1513
1535
|
# the following:
|
1514
1536
|
#
|
1515
1537
|
# * If your event selector includes read-only events, write-only events,
|
1516
|
-
# or all events. This applies to
|
1517
|
-
# events.
|
1538
|
+
# or all events. This applies to management events, data events, and
|
1539
|
+
# network activity events.
|
1518
1540
|
#
|
1519
1541
|
# * If your event selector includes management events.
|
1520
1542
|
#
|
1543
|
+
# * If your event selector includes network activity events, the event
|
1544
|
+
# sources for which you are logging network activity events.
|
1545
|
+
#
|
1521
1546
|
# * If your event selector includes data events, the resources on which
|
1522
1547
|
# you are logging data events.
|
1523
1548
|
#
|
1524
|
-
# For more information about logging management
|
1525
|
-
# following topics in the *CloudTrail User
|
1549
|
+
# For more information about logging management, data, and network
|
1550
|
+
# activity events, see the following topics in the *CloudTrail User
|
1551
|
+
# Guide*:
|
1526
1552
|
#
|
1527
1553
|
# * [Logging management events][1]
|
1528
1554
|
#
|
1529
1555
|
# * [Logging data events][2]
|
1530
1556
|
#
|
1557
|
+
# * [Logging network activity events][3]
|
1558
|
+
#
|
1531
1559
|
#
|
1532
1560
|
#
|
1533
1561
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html
|
1534
1562
|
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
1563
|
+
# [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
1535
1564
|
#
|
1536
1565
|
# @option params [required, String] :trail_name
|
1537
1566
|
# Specifies the name of the trail or trail ARN. If you specify a trail
|
@@ -2606,16 +2635,33 @@ module Aws::CloudTrail
|
|
2606
2635
|
req.send_request(options)
|
2607
2636
|
end
|
2608
2637
|
|
2609
|
-
# Configures
|
2610
|
-
#
|
2611
|
-
#
|
2612
|
-
#
|
2613
|
-
#
|
2614
|
-
#
|
2615
|
-
#
|
2616
|
-
#
|
2617
|
-
#
|
2618
|
-
# events
|
2638
|
+
# Configures event selectors (also referred to as *basic event
|
2639
|
+
# selectors*) or advanced event selectors for your trail. You can use
|
2640
|
+
# either `AdvancedEventSelectors` or `EventSelectors`, but not both. If
|
2641
|
+
# you apply `AdvancedEventSelectors` to a trail, any existing
|
2642
|
+
# `EventSelectors` are overwritten.
|
2643
|
+
#
|
2644
|
+
# You can use `AdvancedEventSelectors` to log management events, data
|
2645
|
+
# events for all resource types, and network activity events.
|
2646
|
+
#
|
2647
|
+
# You can use `EventSelectors` to log management events and data events
|
2648
|
+
# for the following resource types:
|
2649
|
+
#
|
2650
|
+
# * `AWS::DynamoDB::Table`
|
2651
|
+
#
|
2652
|
+
# * `AWS::Lambda::Function`
|
2653
|
+
#
|
2654
|
+
# * `AWS::S3::Object`
|
2655
|
+
#
|
2656
|
+
# You can't use `EventSelectors` to log network activity events.
|
2657
|
+
#
|
2658
|
+
# If you want your trail to log Insights events, be sure the event
|
2659
|
+
# selector or advanced event selector enables logging of the Insights
|
2660
|
+
# event types you want configured for your trail. For more information
|
2661
|
+
# about logging Insights events, see [Logging Insights events][1] in the
|
2662
|
+
# *CloudTrail User Guide*. By default, trails created without specific
|
2663
|
+
# event selectors are configured to log all read and write management
|
2664
|
+
# events, and no data events or network activity events.
|
2619
2665
|
#
|
2620
2666
|
# When an event occurs in your account, CloudTrail evaluates the event
|
2621
2667
|
# selectors or advanced event selectors in all trails. For each trail,
|
@@ -2626,7 +2672,7 @@ module Aws::CloudTrail
|
|
2626
2672
|
# Example
|
2627
2673
|
#
|
2628
2674
|
# 1. You create an event selector for a trail and specify that you want
|
2629
|
-
# write-only events.
|
2675
|
+
# to log write-only events.
|
2630
2676
|
#
|
2631
2677
|
# 2. The EC2 `GetConsoleOutput` and `RunInstances` API operations occur
|
2632
2678
|
# in your account.
|
@@ -2644,25 +2690,22 @@ module Aws::CloudTrail
|
|
2644
2690
|
# which the trail was created; otherwise, an
|
2645
2691
|
# `InvalidHomeRegionException` exception is thrown.
|
2646
2692
|
#
|
2647
|
-
# You can configure up to five event selectors for each trail.
|
2648
|
-
# information, see [Logging management events][2], [Logging data
|
2649
|
-
# events][3], and [Quotas in CloudTrail][4] in the *CloudTrail User
|
2650
|
-
# Guide*.
|
2693
|
+
# You can configure up to five event selectors for each trail.
|
2651
2694
|
#
|
2652
2695
|
# You can add advanced event selectors, and conditions for your advanced
|
2653
2696
|
# event selectors, up to a maximum of 500 values for all conditions and
|
2654
|
-
# selectors on a trail.
|
2655
|
-
#
|
2656
|
-
#
|
2657
|
-
#
|
2658
|
-
# events][3] in the *CloudTrail User Guide*.
|
2697
|
+
# selectors on a trail. For more information, see [Logging management
|
2698
|
+
# events][2], [Logging data events][3], [Logging network activity
|
2699
|
+
# events][4], and [Quotas in CloudTrail][5] in the *CloudTrail User
|
2700
|
+
# Guide*.
|
2659
2701
|
#
|
2660
2702
|
#
|
2661
2703
|
#
|
2662
2704
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html
|
2663
2705
|
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html
|
2664
2706
|
# [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
2665
|
-
# [4]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/
|
2707
|
+
# [4]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
2708
|
+
# [5]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
|
2666
2709
|
#
|
2667
2710
|
# @option params [required, String] :trail_name
|
2668
2711
|
# Specifies the name of the trail or trail ARN. If you specify a trail
|
@@ -2685,25 +2728,42 @@ module Aws::CloudTrail
|
|
2685
2728
|
# `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
|
2686
2729
|
#
|
2687
2730
|
# @option params [Array<Types::EventSelector>] :event_selectors
|
2688
|
-
# Specifies the settings for your event selectors. You can
|
2689
|
-
# to
|
2690
|
-
#
|
2691
|
-
#
|
2692
|
-
#
|
2731
|
+
# Specifies the settings for your event selectors. You can use event
|
2732
|
+
# selectors to log management events and data events for the following
|
2733
|
+
# resource types:
|
2734
|
+
#
|
2735
|
+
# * `AWS::DynamoDB::Table`
|
2736
|
+
#
|
2737
|
+
# * `AWS::Lambda::Function`
|
2738
|
+
#
|
2739
|
+
# * `AWS::S3::Object`
|
2740
|
+
#
|
2741
|
+
# You can't use event selectors to log network activity events.
|
2742
|
+
#
|
2743
|
+
# You can configure up to five event selectors for a trail. You can use
|
2744
|
+
# either `EventSelectors` or `AdvancedEventSelectors` in a
|
2745
|
+
# `PutEventSelectors` request, but not both. If you apply
|
2746
|
+
# `EventSelectors` to a trail, any existing `AdvancedEventSelectors` are
|
2747
|
+
# overwritten.
|
2693
2748
|
#
|
2694
2749
|
# @option params [Array<Types::AdvancedEventSelector>] :advanced_event_selectors
|
2695
|
-
# Specifies the settings for advanced event selectors. You can
|
2696
|
-
# advanced event selectors,
|
2697
|
-
#
|
2750
|
+
# Specifies the settings for advanced event selectors. You can use
|
2751
|
+
# advanced event selectors to log management events, data events for all
|
2752
|
+
# resource types, and network activity events.
|
2753
|
+
#
|
2754
|
+
# You can add advanced event selectors, and conditions for your advanced
|
2755
|
+
# event selectors, up to a maximum of 500 values for all conditions and
|
2698
2756
|
# selectors on a trail. You can use either `AdvancedEventSelectors` or
|
2699
2757
|
# `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
|
2700
2758
|
# to a trail, any existing `EventSelectors` are overwritten. For more
|
2701
2759
|
# information about advanced event selectors, see [Logging data
|
2702
|
-
# events][1] in the *CloudTrail
|
2760
|
+
# events][1] and [Logging network activity events][2] in the *CloudTrail
|
2761
|
+
# User Guide*.
|
2703
2762
|
#
|
2704
2763
|
#
|
2705
2764
|
#
|
2706
2765
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
2766
|
+
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
2707
2767
|
#
|
2708
2768
|
# @return [Types::PutEventSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2709
2769
|
#
|
@@ -3089,7 +3149,8 @@ module Aws::CloudTrail
|
|
3089
3149
|
# Starts the ingestion of live events on an event data store specified
|
3090
3150
|
# as either an ARN or the ID portion of the ARN. To start ingestion, the
|
3091
3151
|
# event data store `Status` must be `STOPPED_INGESTION` and the
|
3092
|
-
# `eventCategory` must be `Management`, `Data`, or
|
3152
|
+
# `eventCategory` must be `Management`, `Data`, `NetworkActivity`, or
|
3153
|
+
# `ConfigurationItem`.
|
3093
3154
|
#
|
3094
3155
|
# @option params [required, String] :event_data_store
|
3095
3156
|
# The ARN (or ID suffix of the ARN) of the event data store for which
|
@@ -3301,7 +3362,8 @@ module Aws::CloudTrail
|
|
3301
3362
|
# Stops the ingestion of live events on an event data store specified as
|
3302
3363
|
# either an ARN or the ID portion of the ARN. To stop ingestion, the
|
3303
3364
|
# event data store `Status` must be `ENABLED` and the `eventCategory`
|
3304
|
-
# must be `Management`, `Data`, or
|
3365
|
+
# must be `Management`, `Data`, `NetworkActivity`, or
|
3366
|
+
# `ConfigurationItem`.
|
3305
3367
|
#
|
3306
3368
|
# @option params [required, String] :event_data_store
|
3307
3369
|
# The ARN (or ID suffix of the ARN) of the event data store for which
|
@@ -3469,9 +3531,9 @@ module Aws::CloudTrail
|
|
3469
3531
|
# `TerminationProtection` is enabled.
|
3470
3532
|
#
|
3471
3533
|
# For event data stores for CloudTrail events, `AdvancedEventSelectors`
|
3472
|
-
# includes or excludes management or
|
3473
|
-
# store. For more information about
|
3474
|
-
# [AdvancedEventSelectors][1].
|
3534
|
+
# includes or excludes management, data, or network activity events in
|
3535
|
+
# your event data store. For more information about
|
3536
|
+
# `AdvancedEventSelectors`, see [AdvancedEventSelectors][1].
|
3475
3537
|
#
|
3476
3538
|
# For event data stores for CloudTrail Insights events, Config
|
3477
3539
|
# configuration items, Audit Manager evidence, or non-Amazon Web
|
@@ -3884,14 +3946,19 @@ module Aws::CloudTrail
|
|
3884
3946
|
# @api private
|
3885
3947
|
def build_request(operation_name, params = {})
|
3886
3948
|
handlers = @handlers.for(operation_name)
|
3949
|
+
tracer = config.telemetry_provider.tracer_provider.tracer(
|
3950
|
+
Aws::Telemetry.module_to_tracer_name('Aws::CloudTrail')
|
3951
|
+
)
|
3887
3952
|
context = Seahorse::Client::RequestContext.new(
|
3888
3953
|
operation_name: operation_name,
|
3889
3954
|
operation: config.api.operation(operation_name),
|
3890
3955
|
client: self,
|
3891
3956
|
params: params,
|
3892
|
-
config: config
|
3957
|
+
config: config,
|
3958
|
+
tracer: tracer
|
3959
|
+
)
|
3893
3960
|
context[:gem_name] = 'aws-sdk-cloudtrail'
|
3894
|
-
context[:gem_version] = '1.
|
3961
|
+
context[:gem_version] = '1.92.0'
|
3895
3962
|
Seahorse::Client::Request.new(handlers, context)
|
3896
3963
|
end
|
3897
3964
|
|