@aws-cdk/mixins-preview 2.241.0-alpha.0 → 2.242.0-alpha.0

package/lib/services/aws-kms/events.generated.d.ts

@@ -1,6 +1,381 @@
 import * as cdk from "aws-cdk-lib/core";
 import * as service from "aws-cdk-lib/aws-kms";
 import * as events from "aws-cdk-lib/aws-events";
+/**
+ * EventBridge event pattern for aws.kms@AWSAPICallViaCloudTrail
+ */
+export declare class AWSAPICallViaCloudTrail {
+    /**
+     * EventBridge event pattern for AWS API Call via CloudTrail
+     */
+    static awsAPICallViaCloudTrailPattern(options?: AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps): events.EventPattern;
+}
+export declare namespace AWSAPICallViaCloudTrail {
+    /**
+     * Props type for aws.kms@AWSAPICallViaCloudTrail event
+     */
+    interface AWSAPICallViaCloudTrailProps {
+        /**
+         * requestParameters property
+         *
+         * Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly requestParameters?: AWSAPICallViaCloudTrail.RequestParameters;
+        /**
+         * userIdentity property
+         *
+         * Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly userIdentity?: AWSAPICallViaCloudTrail.UserIdentity;
+        /**
+         * eventID property
+         *
+         * Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventId?: Array<string>;
+        /**
+         * awsRegion property
+         *
+         * Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly awsRegion?: Array<string>;
+        /**
+         * eventVersion property
+         *
+         * Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventVersion?: Array<string>;
+        /**
+         * responseElements property
+         *
+         * Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly responseElements?: Array<string>;
+        /**
+         * sourceIPAddress property
+         *
+         * Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly sourceIpAddress?: Array<string>;
+        /**
+         * eventSource property
+         *
+         * Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventSource?: Array<string>;
+        /**
+         * resources property
+         *
+         * Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly resources?: Array<AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem>;
+        /**
+         * userAgent property
+         *
+         * Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly userAgent?: Array<string>;
+        /**
+         * readOnly property
+         *
+         * Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly readOnly?: Array<string>;
+        /**
+         * eventType property
+         *
+         * Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventType?: Array<string>;
+        /**
+         * requestID property
+         *
+         * Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly requestId?: Array<string>;
+        /**
+         * eventTime property
+         *
+         * Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventTime?: Array<string>;
+        /**
+         * eventName property
+         *
+         * Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly eventName?: Array<string>;
+        /**
+         * EventBridge event metadata
+         *
+         * @default - -
+         */
+        readonly eventMetadata?: cdk.AWSEventMetadataProps;
+    }
+    /**
+     * Type definition for RequestParameters
+     *
+     * @struct
+     */
+    interface RequestParameters {
+        /**
+         * encryptionContext property
+         *
+         * Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly encryptionContext?: AWSAPICallViaCloudTrail.EncryptionContext;
+        /**
+         * keyId property
+         *
+         * Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Filter with the Key reference
+         */
+        readonly keyId?: Array<string>;
+        /**
+         * keySpec property
+         *
+         * Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly keySpec?: Array<string>;
+    }
+    /**
+     * Type definition for EncryptionContext
+     *
+     * @struct
+     */
+    interface EncryptionContext {
+        /**
+         * aws:s3:arn property
+         *
+         * Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly awsS3Arn?: Array<string>;
+    }
+    /**
+     * Type definition for UserIdentity
+     *
+     * @struct
+     */
+    interface UserIdentity {
+        /**
+         * sessionContext property
+         *
+         * Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly sessionContext?: AWSAPICallViaCloudTrail.SessionContext;
+        /**
+         * accessKeyId property
+         *
+         * Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly accessKeyId?: Array<string>;
+        /**
+         * accountId property
+         *
+         * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly accountId?: Array<string>;
+        /**
+         * principalId property
+         *
+         * Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly principalId?: Array<string>;
+        /**
+         * type property
+         *
+         * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly type?: Array<string>;
+        /**
+         * arn property
+         *
+         * Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly arn?: Array<string>;
+        /**
+         * invokedBy property
+         *
+         * Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly invokedBy?: Array<string>;
+    }
+    /**
+     * Type definition for SessionContext
+     *
+     * @struct
+     */
+    interface SessionContext {
+        /**
+         * sessionIssuer property
+         *
+         * Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly sessionIssuer?: AWSAPICallViaCloudTrail.SessionIssuer;
+        /**
+         * attributes property
+         *
+         * Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly attributes?: AWSAPICallViaCloudTrail.Attributes;
+    }
+    /**
+     * Type definition for SessionIssuer
+     *
+     * @struct
+     */
+    interface SessionIssuer {
+        /**
+         * accountId property
+         *
+         * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly accountId?: Array<string>;
+        /**
+         * principalId property
+         *
+         * Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly principalId?: Array<string>;
+        /**
+         * type property
+         *
+         * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly type?: Array<string>;
+        /**
+         * arn property
+         *
+         * Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly arn?: Array<string>;
+        /**
+         * userName property
+         *
+         * Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly userName?: Array<string>;
+    }
+    /**
+     * Type definition for Attributes
+     *
+     * @struct
+     */
+    interface Attributes {
+        /**
+         * mfaAuthenticated property
+         *
+         * Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly mfaAuthenticated?: Array<string>;
+        /**
+         * creationDate property
+         *
+         * Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly creationDate?: Array<string>;
+    }
+    /**
+     * Type definition for AWSAPICallViaCloudTrailItem
+     *
+     * @struct
+     */
+    interface AwsapiCallViaCloudTrailItem {
+        /**
+         * accountId property
+         *
+         * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly accountId?: Array<string>;
+        /**
+         * type property
+         *
+         * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly type?: Array<string>;
+        /**
+         * ARN property
+         *
+         * Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Do not filter on this field
+         */
+        readonly arn?: Array<string>;
+    }
+}
 /**
  * EventBridge event patterns for Key
  */
@@ -17,468 +392,107 @@ export declare class KeyEvents {
     /**
      * EventBridge event pattern for Key AWS API Call via CloudTrail
      */
-    awsAPICallViaCloudTrailPattern(options?: KeyEvents.AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps): events.EventPattern;
+    awsAPICallViaCloudTrailPattern(options?: AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps): events.EventPattern;
     /**
      * EventBridge event pattern for Key KMS CMK Deletion
      */
-    kMSCMKDeletionPattern(options?: KeyEvents.KMSCMKDeletion.KMSCMKDeletionProps): events.EventPattern;
+    kmsCMKDeletionPattern(options?: KMSCMKDeletion.KMSCMKDeletionProps): events.EventPattern;
     /**
      * EventBridge event pattern for Key KMS CMK Rotation
      */
-    kMSCMKRotationPattern(options?: KeyEvents.KMSCMKRotation.KMSCMKRotationProps): events.EventPattern;
+    kmsCMKRotationPattern(options?: KMSCMKRotation.KMSCMKRotationProps): events.EventPattern;
     /**
      * EventBridge event pattern for Key KMS Imported Key Material Expiration
      */
-    kMSImportedKeyMaterialExpirationPattern(options?: KeyEvents.KMSImportedKeyMaterialExpiration.KMSImportedKeyMaterialExpirationProps): events.EventPattern;
+    kmsImportedKeyMaterialExpirationPattern(options?: KMSImportedKeyMaterialExpiration.KMSImportedKeyMaterialExpirationProps): events.EventPattern;
 }
-export declare namespace KeyEvents {
+/**
+ * EventBridge event pattern for aws.kms@KMSCMKDeletion
+ */
+export declare class KMSCMKDeletion {
     /**
-     * aws.kms@AWSAPICallViaCloudTrail event types for Key
+     * EventBridge event pattern for KMS CMK Deletion
      */
-    class AWSAPICallViaCloudTrail {
-    }
-    namespace AWSAPICallViaCloudTrail {
-        /**
-         * Props type for Key aws.kms@AWSAPICallViaCloudTrail event
-         */
-        interface AWSAPICallViaCloudTrailProps {
-            /**
-             * requestParameters property
-             *
-             * Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly requestParameters?: KeyEvents.AWSAPICallViaCloudTrail.RequestParameters;
-            /**
-             * userIdentity property
-             *
-             * Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly userIdentity?: KeyEvents.AWSAPICallViaCloudTrail.UserIdentity;
-            /**
-             * eventID property
-             *
-             * Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventId?: Array<string>;
-            /**
-             * awsRegion property
-             *
-             * Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly awsRegion?: Array<string>;
-            /**
-             * eventVersion property
-             *
-             * Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventVersion?: Array<string>;
-            /**
-             * responseElements property
-             *
-             * Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly responseElements?: Array<string>;
-            /**
-             * sourceIPAddress property
-             *
-             * Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly sourceIpAddress?: Array<string>;
-            /**
-             * eventSource property
-             *
-             * Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventSource?: Array<string>;
-            /**
-             * resources property
-             *
-             * Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly resources?: Array<KeyEvents.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem>;
-            /**
-             * userAgent property
-             *
-             * Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly userAgent?: Array<string>;
-            /**
-             * readOnly property
-             *
-             * Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly readOnly?: Array<string>;
-            /**
-             * eventType property
-             *
-             * Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventType?: Array<string>;
-            /**
-             * requestID property
-             *
-             * Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly requestId?: Array<string>;
-            /**
-             * eventTime property
-             *
-             * Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventTime?: Array<string>;
-            /**
-             * eventName property
-             *
-             * Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly eventName?: Array<string>;
-            /**
-             * EventBridge event metadata
-             *
-             * @default - -
-             */
-            readonly eventMetadata?: cdk.AWSEventMetadataProps;
-        }
-        /**
-         * Type definition for RequestParameters
-         *
-         * @struct
-         */
-        interface RequestParameters {
-            /**
-             * encryptionContext property
-             *
-             * Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly encryptionContext?: KeyEvents.AWSAPICallViaCloudTrail.EncryptionContext;
-            /**
-             * keyId property
-             *
-             * Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Filter with the Key reference
-             */
-            readonly keyId?: Array<string>;
-            /**
-             * keySpec property
-             *
-             * Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly keySpec?: Array<string>;
-        }
-        /**
-         * Type definition for EncryptionContext
-         *
-         * @struct
-         */
-        interface EncryptionContext {
-            /**
-             * aws:s3:arn property
-             *
-             * Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly awsS3Arn?: Array<string>;
-        }
-        /**
-         * Type definition for UserIdentity
-         *
-         * @struct
-         */
-        interface UserIdentity {
-            /**
-             * sessionContext property
-             *
-             * Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly sessionContext?: KeyEvents.AWSAPICallViaCloudTrail.SessionContext;
-            /**
-             * accessKeyId property
-             *
-             * Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly accessKeyId?: Array<string>;
-            /**
-             * accountId property
-             *
-             * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly accountId?: Array<string>;
-            /**
-             * principalId property
-             *
-             * Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly principalId?: Array<string>;
-            /**
-             * type property
-             *
-             * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly type?: Array<string>;
-            /**
-             * arn property
-             *
-             * Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly arn?: Array<string>;
-            /**
-             * invokedBy property
-             *
-             * Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly invokedBy?: Array<string>;
-        }
-        /**
-         * Type definition for SessionContext
-         *
-         * @struct
-         */
-        interface SessionContext {
-            /**
-             * sessionIssuer property
-             *
-             * Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly sessionIssuer?: KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer;
-            /**
-             * attributes property
-             *
-             * Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly attributes?: KeyEvents.AWSAPICallViaCloudTrail.Attributes;
-        }
-        /**
-         * Type definition for SessionIssuer
-         *
-         * @struct
-         */
-        interface SessionIssuer {
-            /**
-             * accountId property
-             *
-             * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly accountId?: Array<string>;
-            /**
-             * principalId property
-             *
-             * Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly principalId?: Array<string>;
-            /**
-             * type property
-             *
-             * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly type?: Array<string>;
-            /**
-             * arn property
-             *
-             * Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly arn?: Array<string>;
-            /**
-             * userName property
-             *
-             * Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly userName?: Array<string>;
-        }
-        /**
-         * Type definition for Attributes
-         *
-         * @struct
-         */
-        interface Attributes {
-            /**
-             * mfaAuthenticated property
-             *
-             * Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly mfaAuthenticated?: Array<string>;
-            /**
-             * creationDate property
-             *
-             * Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly creationDate?: Array<string>;
-        }
-        /**
-         * Type definition for AWSAPICallViaCloudTrailItem
-         *
-         * @struct
-         */
-        interface AwsapiCallViaCloudTrailItem {
-            /**
-             * accountId property
-             *
-             * Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly accountId?: Array<string>;
-            /**
-             * type property
-             *
-             * Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly type?: Array<string>;
-            /**
-             * ARN property
-             *
-             * Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Do not filter on this field
-             */
-            readonly arn?: Array<string>;
-        }
-    }
+    static kmsCMKDeletionPattern(options?: KMSCMKDeletion.KMSCMKDeletionProps): events.EventPattern;
+}
+export declare namespace KMSCMKDeletion {
     /**
-     * aws.kms@KMSCMKDeletion event types for Key
+     * Props type for aws.kms@KMSCMKDeletion event
      */
-    class KMSCMKDeletion {
-    }
-    namespace KMSCMKDeletion {
-        /**
-         * Props type for Key aws.kms@KMSCMKDeletion event
-         */
-        interface KMSCMKDeletionProps {
-            /**
-             * key-id property
-             *
-             * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Filter with the Key reference
-             */
-            readonly keyId?: Array<string>;
-            /**
-             * EventBridge event metadata
-             *
-             * @default - -
-             */
-            readonly eventMetadata?: cdk.AWSEventMetadataProps;
-        }
+    interface KMSCMKDeletionProps {
+        /**
+         * key-id property
+         *
+         * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Filter with the Key reference
+         */
+        readonly keyId?: Array<string>;
+        /**
+         * EventBridge event metadata
+         *
+         * @default - -
+         */
+        readonly eventMetadata?: cdk.AWSEventMetadataProps;
     }
+}
+/**
+ * EventBridge event pattern for aws.kms@KMSCMKRotation
+ */
+export declare class KMSCMKRotation {
     /**
-     * aws.kms@KMSCMKRotation event types for Key
+     * EventBridge event pattern for KMS CMK Rotation
      */
-    class KMSCMKRotation {
-    }
-    namespace KMSCMKRotation {
-        /**
-         * Props type for Key aws.kms@KMSCMKRotation event
-         */
-        interface KMSCMKRotationProps {
-            /**
-             * key-id property
-             *
-             * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Filter with the Key reference
-             */
-            readonly keyId?: Array<string>;
-            /**
-             * EventBridge event metadata
-             *
-             * @default - -
-             */
-            readonly eventMetadata?: cdk.AWSEventMetadataProps;
-        }
-    }
+    static kmsCMKRotationPattern(options?: KMSCMKRotation.KMSCMKRotationProps): events.EventPattern;
+}
+export declare namespace KMSCMKRotation {
     /**
-     * aws.kms@KMSImportedKeyMaterialExpiration event types for Key
+     * Props type for aws.kms@KMSCMKRotation event
      */
-    class KMSImportedKeyMaterialExpiration {
+    interface KMSCMKRotationProps {
+        /**
+         * key-id property
+         *
+         * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Filter with the Key reference
+         */
+        readonly keyId?: Array<string>;
+        /**
+         * EventBridge event metadata
+         *
+         * @default - -
+         */
+        readonly eventMetadata?: cdk.AWSEventMetadataProps;
     }
-    namespace KMSImportedKeyMaterialExpiration {
-        /**
-         * Props type for Key aws.kms@KMSImportedKeyMaterialExpiration event
-         */
-        interface KMSImportedKeyMaterialExpirationProps {
-            /**
-             * key-id property
-             *
-             * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
-             *
-             * @default - Filter with the Key reference
-             */
-            readonly keyId?: Array<string>;
-            /**
-             * EventBridge event metadata
-             *
-             * @default - -
-             */
-            readonly eventMetadata?: cdk.AWSEventMetadataProps;
-        }
+}
+/**
+ * EventBridge event pattern for aws.kms@KMSImportedKeyMaterialExpiration
+ */
+export declare class KMSImportedKeyMaterialExpiration {
+    /**
+     * EventBridge event pattern for KMS Imported Key Material Expiration
+     */
+    static kmsImportedKeyMaterialExpirationPattern(options?: KMSImportedKeyMaterialExpiration.KMSImportedKeyMaterialExpirationProps): events.EventPattern;
+}
+export declare namespace KMSImportedKeyMaterialExpiration {
+    /**
+     * Props type for aws.kms@KMSImportedKeyMaterialExpiration event
+     */
+    interface KMSImportedKeyMaterialExpirationProps {
+        /**
+         * key-id property
+         *
+         * Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the `aws_events.Match`  for more advanced matching options.
+         *
+         * @default - Filter with the Key reference
+         */
+        readonly keyId?: Array<string>;
+        /**
+         * EventBridge event metadata
+         *
+         * @default - -
+         */
+        readonly eventMetadata?: cdk.AWSEventMetadataProps;
     }
 }