aws-sdk-cloudtrail 1.85.0 → 1.92.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +35 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-cloudtrail/client.rb +114 -47
- data/lib/aws-sdk-cloudtrail/client_api.rb +1 -0
- data/lib/aws-sdk-cloudtrail/endpoints.rb +49 -196
- data/lib/aws-sdk-cloudtrail/plugins/endpoints.rb +18 -6
- data/lib/aws-sdk-cloudtrail/types.rb +207 -565
- data/lib/aws-sdk-cloudtrail.rb +15 -11
- data/sig/client.rbs +2 -0
- data/sig/resource.rbs +2 -0
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 7274c5f7fb833a4db6a9c64caf184e2bed45a9f5c883c1685c81b7e222a4a75b
|
4
|
+
data.tar.gz: f1dc30a16abbb7eaf4ea8252f127c889e940d4676b75d917219308d5f01e72cc
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ba12fe4b6290b74ab29e1f15b0c3884e753e5ccde56ebf7f933cd76648b8213d128a1a41e68d72e2b481b8280e22849322381790a92835459039a12840492309
|
7
|
+
data.tar.gz: ad2f1b0307963c4099f3e7702bc749621c665870539f91f6d785c6352e0ac1e1cd031b736630e2a00b8e793e2a36a39886abe9623caaca4cfe5ca51c9fa12f9d
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,41 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.92.0 (2024-09-25)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Doc-only update for CloudTrail network activity events release (in preview)
|
8
|
+
|
9
|
+
1.91.0 (2024-09-24)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
13
|
+
|
14
|
+
1.90.0 (2024-09-23)
|
15
|
+
------------------
|
16
|
+
|
17
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
18
|
+
|
19
|
+
1.89.0 (2024-09-20)
|
20
|
+
------------------
|
21
|
+
|
22
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
23
|
+
|
24
|
+
1.88.0 (2024-09-11)
|
25
|
+
------------------
|
26
|
+
|
27
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
28
|
+
|
29
|
+
1.87.0 (2024-09-10)
|
30
|
+
------------------
|
31
|
+
|
32
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
33
|
+
|
34
|
+
1.86.0 (2024-09-03)
|
35
|
+
------------------
|
36
|
+
|
37
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
38
|
+
|
4
39
|
1.85.0 (2024-07-02)
|
5
40
|
------------------
|
6
41
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.92.0
|
@@ -32,11 +32,10 @@ require 'aws-sdk-core/plugins/checksum_algorithm.rb'
|
|
32
32
|
require 'aws-sdk-core/plugins/request_compression.rb'
|
33
33
|
require 'aws-sdk-core/plugins/defaults_mode.rb'
|
34
34
|
require 'aws-sdk-core/plugins/recursion_detection.rb'
|
35
|
+
require 'aws-sdk-core/plugins/telemetry.rb'
|
35
36
|
require 'aws-sdk-core/plugins/sign.rb'
|
36
37
|
require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
|
37
38
|
|
38
|
-
Aws::Plugins::GlobalConfiguration.add_identifier(:cloudtrail)
|
39
|
-
|
40
39
|
module Aws::CloudTrail
|
41
40
|
# An API client for CloudTrail. To construct a client, you need to configure a `:region` and `:credentials`.
|
42
41
|
#
|
@@ -83,6 +82,7 @@ module Aws::CloudTrail
|
|
83
82
|
add_plugin(Aws::Plugins::RequestCompression)
|
84
83
|
add_plugin(Aws::Plugins::DefaultsMode)
|
85
84
|
add_plugin(Aws::Plugins::RecursionDetection)
|
85
|
+
add_plugin(Aws::Plugins::Telemetry)
|
86
86
|
add_plugin(Aws::Plugins::Sign)
|
87
87
|
add_plugin(Aws::Plugins::Protocols::JsonRpc)
|
88
88
|
add_plugin(Aws::CloudTrail::Plugins::Endpoints)
|
@@ -128,13 +128,15 @@ module Aws::CloudTrail
|
|
128
128
|
# locations will be searched for credentials:
|
129
129
|
#
|
130
130
|
# * `Aws.config[:credentials]`
|
131
|
-
# * The `:access_key_id`, `:secret_access_key`,
|
132
|
-
#
|
131
|
+
# * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
|
132
|
+
# `:account_id` options.
|
133
|
+
# * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
|
134
|
+
# ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
|
133
135
|
# * `~/.aws/credentials`
|
134
136
|
# * `~/.aws/config`
|
135
137
|
# * EC2/ECS IMDS instance profile - When used by default, the timeouts
|
136
138
|
# are very aggressive. Construct and pass an instance of
|
137
|
-
# `Aws::
|
139
|
+
# `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
|
138
140
|
# enable retries and extended timeouts. Instance profile credential
|
139
141
|
# fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
|
140
142
|
# to true.
|
@@ -153,6 +155,8 @@ module Aws::CloudTrail
|
|
153
155
|
#
|
154
156
|
# @option options [String] :access_key_id
|
155
157
|
#
|
158
|
+
# @option options [String] :account_id
|
159
|
+
#
|
156
160
|
# @option options [Boolean] :active_endpoint_cache (false)
|
157
161
|
# When set to `true`, a thread polling for endpoints will be running in
|
158
162
|
# the background every 60 secs (default). Defaults to `false`.
|
@@ -337,6 +341,16 @@ module Aws::CloudTrail
|
|
337
341
|
# ** Please note ** When response stubbing is enabled, no HTTP
|
338
342
|
# requests are made, and retries are disabled.
|
339
343
|
#
|
344
|
+
# @option options [Aws::Telemetry::TelemetryProviderBase] :telemetry_provider (Aws::Telemetry::NoOpTelemetryProvider)
|
345
|
+
# Allows you to provide a telemetry provider, which is used to
|
346
|
+
# emit telemetry data. By default, uses `NoOpTelemetryProvider` which
|
347
|
+
# will not record or emit any telemetry data. The SDK supports the
|
348
|
+
# following telemetry providers:
|
349
|
+
#
|
350
|
+
# * OpenTelemetry (OTel) - To use the OTel provider, install and require the
|
351
|
+
# `opentelemetry-sdk` gem and then, pass in an instance of a
|
352
|
+
# `Aws::Telemetry::OTelProvider` for telemetry provider.
|
353
|
+
#
|
340
354
|
# @option options [Aws::TokenProvider] :token_provider
|
341
355
|
# A Bearer Token Provider. This can be an instance of any one of the
|
342
356
|
# following classes:
|
@@ -364,7 +378,9 @@ module Aws::CloudTrail
|
|
364
378
|
# sending the request.
|
365
379
|
#
|
366
380
|
# @option options [Aws::CloudTrail::EndpointProvider] :endpoint_provider
|
367
|
-
# The endpoint provider used to resolve endpoints. Any object that responds to
|
381
|
+
# The endpoint provider used to resolve endpoints. Any object that responds to
|
382
|
+
# `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to
|
383
|
+
# `Aws::CloudTrail::EndpointParameters`.
|
368
384
|
#
|
369
385
|
# @option options [Float] :http_continue_timeout (1)
|
370
386
|
# The number of seconds to wait for a 100-continue response before sending the
|
@@ -420,6 +436,12 @@ module Aws::CloudTrail
|
|
420
436
|
# @option options [String] :ssl_ca_store
|
421
437
|
# Sets the X509::Store to verify peer certificate.
|
422
438
|
#
|
439
|
+
# @option options [OpenSSL::X509::Certificate] :ssl_cert
|
440
|
+
# Sets a client certificate when creating http connections.
|
441
|
+
#
|
442
|
+
# @option options [OpenSSL::PKey] :ssl_key
|
443
|
+
# Sets a client key when creating http connections.
|
444
|
+
#
|
423
445
|
# @option options [Float] :ssl_timeout
|
424
446
|
# Sets the SSL timeout in seconds
|
425
447
|
#
|
@@ -1513,25 +1535,32 @@ module Aws::CloudTrail
|
|
1513
1535
|
# the following:
|
1514
1536
|
#
|
1515
1537
|
# * If your event selector includes read-only events, write-only events,
|
1516
|
-
# or all events. This applies to
|
1517
|
-
# events.
|
1538
|
+
# or all events. This applies to management events, data events, and
|
1539
|
+
# network activity events.
|
1518
1540
|
#
|
1519
1541
|
# * If your event selector includes management events.
|
1520
1542
|
#
|
1543
|
+
# * If your event selector includes network activity events, the event
|
1544
|
+
# sources for which you are logging network activity events.
|
1545
|
+
#
|
1521
1546
|
# * If your event selector includes data events, the resources on which
|
1522
1547
|
# you are logging data events.
|
1523
1548
|
#
|
1524
|
-
# For more information about logging management
|
1525
|
-
# following topics in the *CloudTrail User
|
1549
|
+
# For more information about logging management, data, and network
|
1550
|
+
# activity events, see the following topics in the *CloudTrail User
|
1551
|
+
# Guide*:
|
1526
1552
|
#
|
1527
1553
|
# * [Logging management events][1]
|
1528
1554
|
#
|
1529
1555
|
# * [Logging data events][2]
|
1530
1556
|
#
|
1557
|
+
# * [Logging network activity events][3]
|
1558
|
+
#
|
1531
1559
|
#
|
1532
1560
|
#
|
1533
1561
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html
|
1534
1562
|
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
1563
|
+
# [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
1535
1564
|
#
|
1536
1565
|
# @option params [required, String] :trail_name
|
1537
1566
|
# Specifies the name of the trail or trail ARN. If you specify a trail
|
@@ -2606,16 +2635,33 @@ module Aws::CloudTrail
|
|
2606
2635
|
req.send_request(options)
|
2607
2636
|
end
|
2608
2637
|
|
2609
|
-
# Configures
|
2610
|
-
#
|
2611
|
-
#
|
2612
|
-
#
|
2613
|
-
#
|
2614
|
-
#
|
2615
|
-
#
|
2616
|
-
#
|
2617
|
-
#
|
2618
|
-
# events
|
2638
|
+
# Configures event selectors (also referred to as *basic event
|
2639
|
+
# selectors*) or advanced event selectors for your trail. You can use
|
2640
|
+
# either `AdvancedEventSelectors` or `EventSelectors`, but not both. If
|
2641
|
+
# you apply `AdvancedEventSelectors` to a trail, any existing
|
2642
|
+
# `EventSelectors` are overwritten.
|
2643
|
+
#
|
2644
|
+
# You can use `AdvancedEventSelectors` to log management events, data
|
2645
|
+
# events for all resource types, and network activity events.
|
2646
|
+
#
|
2647
|
+
# You can use `EventSelectors` to log management events and data events
|
2648
|
+
# for the following resource types:
|
2649
|
+
#
|
2650
|
+
# * `AWS::DynamoDB::Table`
|
2651
|
+
#
|
2652
|
+
# * `AWS::Lambda::Function`
|
2653
|
+
#
|
2654
|
+
# * `AWS::S3::Object`
|
2655
|
+
#
|
2656
|
+
# You can't use `EventSelectors` to log network activity events.
|
2657
|
+
#
|
2658
|
+
# If you want your trail to log Insights events, be sure the event
|
2659
|
+
# selector or advanced event selector enables logging of the Insights
|
2660
|
+
# event types you want configured for your trail. For more information
|
2661
|
+
# about logging Insights events, see [Logging Insights events][1] in the
|
2662
|
+
# *CloudTrail User Guide*. By default, trails created without specific
|
2663
|
+
# event selectors are configured to log all read and write management
|
2664
|
+
# events, and no data events or network activity events.
|
2619
2665
|
#
|
2620
2666
|
# When an event occurs in your account, CloudTrail evaluates the event
|
2621
2667
|
# selectors or advanced event selectors in all trails. For each trail,
|
@@ -2626,7 +2672,7 @@ module Aws::CloudTrail
|
|
2626
2672
|
# Example
|
2627
2673
|
#
|
2628
2674
|
# 1. You create an event selector for a trail and specify that you want
|
2629
|
-
# write-only events.
|
2675
|
+
# to log write-only events.
|
2630
2676
|
#
|
2631
2677
|
# 2. The EC2 `GetConsoleOutput` and `RunInstances` API operations occur
|
2632
2678
|
# in your account.
|
@@ -2644,25 +2690,22 @@ module Aws::CloudTrail
|
|
2644
2690
|
# which the trail was created; otherwise, an
|
2645
2691
|
# `InvalidHomeRegionException` exception is thrown.
|
2646
2692
|
#
|
2647
|
-
# You can configure up to five event selectors for each trail.
|
2648
|
-
# information, see [Logging management events][2], [Logging data
|
2649
|
-
# events][3], and [Quotas in CloudTrail][4] in the *CloudTrail User
|
2650
|
-
# Guide*.
|
2693
|
+
# You can configure up to five event selectors for each trail.
|
2651
2694
|
#
|
2652
2695
|
# You can add advanced event selectors, and conditions for your advanced
|
2653
2696
|
# event selectors, up to a maximum of 500 values for all conditions and
|
2654
|
-
# selectors on a trail.
|
2655
|
-
#
|
2656
|
-
#
|
2657
|
-
#
|
2658
|
-
# events][3] in the *CloudTrail User Guide*.
|
2697
|
+
# selectors on a trail. For more information, see [Logging management
|
2698
|
+
# events][2], [Logging data events][3], [Logging network activity
|
2699
|
+
# events][4], and [Quotas in CloudTrail][5] in the *CloudTrail User
|
2700
|
+
# Guide*.
|
2659
2701
|
#
|
2660
2702
|
#
|
2661
2703
|
#
|
2662
2704
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html
|
2663
2705
|
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html
|
2664
2706
|
# [3]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
2665
|
-
# [4]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/
|
2707
|
+
# [4]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
2708
|
+
# [5]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html
|
2666
2709
|
#
|
2667
2710
|
# @option params [required, String] :trail_name
|
2668
2711
|
# Specifies the name of the trail or trail ARN. If you specify a trail
|
@@ -2685,25 +2728,42 @@ module Aws::CloudTrail
|
|
2685
2728
|
# `arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail`
|
2686
2729
|
#
|
2687
2730
|
# @option params [Array<Types::EventSelector>] :event_selectors
|
2688
|
-
# Specifies the settings for your event selectors. You can
|
2689
|
-
# to
|
2690
|
-
#
|
2691
|
-
#
|
2692
|
-
#
|
2731
|
+
# Specifies the settings for your event selectors. You can use event
|
2732
|
+
# selectors to log management events and data events for the following
|
2733
|
+
# resource types:
|
2734
|
+
#
|
2735
|
+
# * `AWS::DynamoDB::Table`
|
2736
|
+
#
|
2737
|
+
# * `AWS::Lambda::Function`
|
2738
|
+
#
|
2739
|
+
# * `AWS::S3::Object`
|
2740
|
+
#
|
2741
|
+
# You can't use event selectors to log network activity events.
|
2742
|
+
#
|
2743
|
+
# You can configure up to five event selectors for a trail. You can use
|
2744
|
+
# either `EventSelectors` or `AdvancedEventSelectors` in a
|
2745
|
+
# `PutEventSelectors` request, but not both. If you apply
|
2746
|
+
# `EventSelectors` to a trail, any existing `AdvancedEventSelectors` are
|
2747
|
+
# overwritten.
|
2693
2748
|
#
|
2694
2749
|
# @option params [Array<Types::AdvancedEventSelector>] :advanced_event_selectors
|
2695
|
-
# Specifies the settings for advanced event selectors. You can
|
2696
|
-
# advanced event selectors,
|
2697
|
-
#
|
2750
|
+
# Specifies the settings for advanced event selectors. You can use
|
2751
|
+
# advanced event selectors to log management events, data events for all
|
2752
|
+
# resource types, and network activity events.
|
2753
|
+
#
|
2754
|
+
# You can add advanced event selectors, and conditions for your advanced
|
2755
|
+
# event selectors, up to a maximum of 500 values for all conditions and
|
2698
2756
|
# selectors on a trail. You can use either `AdvancedEventSelectors` or
|
2699
2757
|
# `EventSelectors`, but not both. If you apply `AdvancedEventSelectors`
|
2700
2758
|
# to a trail, any existing `EventSelectors` are overwritten. For more
|
2701
2759
|
# information about advanced event selectors, see [Logging data
|
2702
|
-
# events][1] in the *CloudTrail
|
2760
|
+
# events][1] and [Logging network activity events][2] in the *CloudTrail
|
2761
|
+
# User Guide*.
|
2703
2762
|
#
|
2704
2763
|
#
|
2705
2764
|
#
|
2706
2765
|
# [1]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html
|
2766
|
+
# [2]: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html
|
2707
2767
|
#
|
2708
2768
|
# @return [Types::PutEventSelectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2709
2769
|
#
|
@@ -3089,7 +3149,8 @@ module Aws::CloudTrail
|
|
3089
3149
|
# Starts the ingestion of live events on an event data store specified
|
3090
3150
|
# as either an ARN or the ID portion of the ARN. To start ingestion, the
|
3091
3151
|
# event data store `Status` must be `STOPPED_INGESTION` and the
|
3092
|
-
# `eventCategory` must be `Management`, `Data`, or
|
3152
|
+
# `eventCategory` must be `Management`, `Data`, `NetworkActivity`, or
|
3153
|
+
# `ConfigurationItem`.
|
3093
3154
|
#
|
3094
3155
|
# @option params [required, String] :event_data_store
|
3095
3156
|
# The ARN (or ID suffix of the ARN) of the event data store for which
|
@@ -3301,7 +3362,8 @@ module Aws::CloudTrail
|
|
3301
3362
|
# Stops the ingestion of live events on an event data store specified as
|
3302
3363
|
# either an ARN or the ID portion of the ARN. To stop ingestion, the
|
3303
3364
|
# event data store `Status` must be `ENABLED` and the `eventCategory`
|
3304
|
-
# must be `Management`, `Data`, or
|
3365
|
+
# must be `Management`, `Data`, `NetworkActivity`, or
|
3366
|
+
# `ConfigurationItem`.
|
3305
3367
|
#
|
3306
3368
|
# @option params [required, String] :event_data_store
|
3307
3369
|
# The ARN (or ID suffix of the ARN) of the event data store for which
|
@@ -3469,9 +3531,9 @@ module Aws::CloudTrail
|
|
3469
3531
|
# `TerminationProtection` is enabled.
|
3470
3532
|
#
|
3471
3533
|
# For event data stores for CloudTrail events, `AdvancedEventSelectors`
|
3472
|
-
# includes or excludes management or
|
3473
|
-
# store. For more information about
|
3474
|
-
# [AdvancedEventSelectors][1].
|
3534
|
+
# includes or excludes management, data, or network activity events in
|
3535
|
+
# your event data store. For more information about
|
3536
|
+
# `AdvancedEventSelectors`, see [AdvancedEventSelectors][1].
|
3475
3537
|
#
|
3476
3538
|
# For event data stores for CloudTrail Insights events, Config
|
3477
3539
|
# configuration items, Audit Manager evidence, or non-Amazon Web
|
@@ -3884,14 +3946,19 @@ module Aws::CloudTrail
|
|
3884
3946
|
# @api private
|
3885
3947
|
def build_request(operation_name, params = {})
|
3886
3948
|
handlers = @handlers.for(operation_name)
|
3949
|
+
tracer = config.telemetry_provider.tracer_provider.tracer(
|
3950
|
+
Aws::Telemetry.module_to_tracer_name('Aws::CloudTrail')
|
3951
|
+
)
|
3887
3952
|
context = Seahorse::Client::RequestContext.new(
|
3888
3953
|
operation_name: operation_name,
|
3889
3954
|
operation: config.api.operation(operation_name),
|
3890
3955
|
client: self,
|
3891
3956
|
params: params,
|
3892
|
-
config: config
|
3957
|
+
config: config,
|
3958
|
+
tracer: tracer
|
3959
|
+
)
|
3893
3960
|
context[:gem_name] = 'aws-sdk-cloudtrail'
|
3894
|
-
context[:gem_version] = '1.
|
3961
|
+
context[:gem_version] = '1.92.0'
|
3895
3962
|
Seahorse::Client::Request.new(handlers, context)
|
3896
3963
|
end
|
3897
3964
|
|