@aws-sdk/client-cloudtrail 3.204.0 → 3.205.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4361 -0
- package/dist-cjs/CloudTrail.js +30 -0
- package/dist-cjs/commands/DeregisterOrganizationDelegatedAdminCommand.js +46 -0
- package/dist-cjs/commands/RegisterOrganizationDelegatedAdminCommand.js +46 -0
- package/dist-cjs/commands/index.js +2 -0
- package/dist-cjs/endpoint/ruleset.js +1 -1
- package/dist-cjs/models/models_0.js +174 -60
- package/dist-cjs/protocols/Aws_json1_1.js +375 -2
- package/dist-es/CloudTrail.js +30 -0
- package/dist-es/commands/DeregisterOrganizationDelegatedAdminCommand.js +42 -0
- package/dist-es/commands/RegisterOrganizationDelegatedAdminCommand.js +42 -0
- package/dist-es/commands/index.js +2 -0
- package/dist-es/endpoint/ruleset.js +1 -1
- package/dist-es/models/models_0.js +155 -52
- package/dist-es/protocols/Aws_json1_1.js +370 -1
- package/dist-types/CloudTrail.d.ts +15 -1
- package/dist-types/CloudTrailClient.d.ts +4 -2
- package/dist-types/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +37 -0
- package/dist-types/commands/GetChannelCommand.d.ts +1 -1
- package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +37 -0
- package/dist-types/commands/index.d.ts +2 -0
- package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +334 -65
- package/dist-types/protocols/Aws_json1_1.d.ts +6 -0
- package/dist-types/ts3.4/CloudTrail.d.ts +46 -0
- package/dist-types/ts3.4/CloudTrailClient.d.ts +12 -0
- package/dist-types/ts3.4/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +41 -0
- package/dist-types/ts3.4/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +41 -0
- package/dist-types/ts3.4/commands/index.d.ts +2 -0
- package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/ts3.4/models/models_0.d.ts +130 -36
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +24 -0
- package/package.json +1 -1
|
@@ -18,6 +18,51 @@ export declare class AccountHasOngoingImportException extends __BaseException {
|
|
|
18
18
|
*/
|
|
19
19
|
constructor(opts: __ExceptionOptionType<AccountHasOngoingImportException, __BaseException>);
|
|
20
20
|
}
|
|
21
|
+
/**
|
|
22
|
+
* <p>This exception is thrown when when the specified account is not found or not part of an organization.</p>
|
|
23
|
+
*/
|
|
24
|
+
export declare class AccountNotFoundException extends __BaseException {
|
|
25
|
+
readonly name: "AccountNotFoundException";
|
|
26
|
+
readonly $fault: "client";
|
|
27
|
+
/**
|
|
28
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
29
|
+
*/
|
|
30
|
+
Message?: string;
|
|
31
|
+
/**
|
|
32
|
+
* @internal
|
|
33
|
+
*/
|
|
34
|
+
constructor(opts: __ExceptionOptionType<AccountNotFoundException, __BaseException>);
|
|
35
|
+
}
|
|
36
|
+
/**
|
|
37
|
+
* <p>This exception is thrown when the specified account is not registered as the CloudTrail delegated administrator.</p>
|
|
38
|
+
*/
|
|
39
|
+
export declare class AccountNotRegisteredException extends __BaseException {
|
|
40
|
+
readonly name: "AccountNotRegisteredException";
|
|
41
|
+
readonly $fault: "client";
|
|
42
|
+
/**
|
|
43
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
44
|
+
*/
|
|
45
|
+
Message?: string;
|
|
46
|
+
/**
|
|
47
|
+
* @internal
|
|
48
|
+
*/
|
|
49
|
+
constructor(opts: __ExceptionOptionType<AccountNotRegisteredException, __BaseException>);
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* <p>This exception is thrown when the account is already registered as the CloudTrail delegated administrator.</p>
|
|
53
|
+
*/
|
|
54
|
+
export declare class AccountRegisteredException extends __BaseException {
|
|
55
|
+
readonly name: "AccountRegisteredException";
|
|
56
|
+
readonly $fault: "client";
|
|
57
|
+
/**
|
|
58
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
59
|
+
*/
|
|
60
|
+
Message?: string;
|
|
61
|
+
/**
|
|
62
|
+
* @internal
|
|
63
|
+
*/
|
|
64
|
+
constructor(opts: __ExceptionOptionType<AccountRegisteredException, __BaseException>);
|
|
65
|
+
}
|
|
21
66
|
/**
|
|
22
67
|
* <p>A custom key-value pair associated with a resource such as a CloudTrail trail.</p>
|
|
23
68
|
*/
|
|
@@ -167,6 +212,23 @@ export declare class InvalidTrailNameException extends __BaseException {
|
|
|
167
212
|
*/
|
|
168
213
|
constructor(opts: __ExceptionOptionType<InvalidTrailNameException, __BaseException>);
|
|
169
214
|
}
|
|
215
|
+
/**
|
|
216
|
+
* <p>
|
|
217
|
+
* This exception is thrown when the management account does not have a service-linked role.
|
|
218
|
+
* </p>
|
|
219
|
+
*/
|
|
220
|
+
export declare class NoManagementAccountSLRExistsException extends __BaseException {
|
|
221
|
+
readonly name: "NoManagementAccountSLRExistsException";
|
|
222
|
+
readonly $fault: "client";
|
|
223
|
+
/**
|
|
224
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
225
|
+
*/
|
|
226
|
+
Message?: string;
|
|
227
|
+
/**
|
|
228
|
+
* @internal
|
|
229
|
+
*/
|
|
230
|
+
constructor(opts: __ExceptionOptionType<NoManagementAccountSLRExistsException, __BaseException>);
|
|
231
|
+
}
|
|
170
232
|
/**
|
|
171
233
|
* <p>This exception is thrown when the Amazon Web Services account making the request to create
|
|
172
234
|
* or update an organization trail or event data store is not the management account for an
|
|
@@ -575,9 +637,11 @@ export interface AdvancedEventSelector {
|
|
|
575
637
|
}
|
|
576
638
|
export interface CancelQueryRequest {
|
|
577
639
|
/**
|
|
640
|
+
* @deprecated
|
|
641
|
+
*
|
|
578
642
|
* <p>The ARN (or the ID suffix of the ARN) of an event data store on which the specified query is running.</p>
|
|
579
643
|
*/
|
|
580
|
-
EventDataStore
|
|
644
|
+
EventDataStore?: string;
|
|
581
645
|
/**
|
|
582
646
|
* <p>The ID of the query that you want to cancel. The <code>QueryId</code> comes from the response of a <code>StartQuery</code>
|
|
583
647
|
* operation.</p>
|
|
@@ -664,6 +728,21 @@ export declare class QueryIdNotFoundException extends __BaseException {
|
|
|
664
728
|
*/
|
|
665
729
|
constructor(opts: __ExceptionOptionType<QueryIdNotFoundException, __BaseException>);
|
|
666
730
|
}
|
|
731
|
+
/**
|
|
732
|
+
* <p>This exception is thrown when the management account of an organization is registered as the CloudTrail delegated administrator.</p>
|
|
733
|
+
*/
|
|
734
|
+
export declare class CannotDelegateManagementAccountException extends __BaseException {
|
|
735
|
+
readonly name: "CannotDelegateManagementAccountException";
|
|
736
|
+
readonly $fault: "client";
|
|
737
|
+
/**
|
|
738
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
739
|
+
*/
|
|
740
|
+
Message?: string;
|
|
741
|
+
/**
|
|
742
|
+
* @internal
|
|
743
|
+
*/
|
|
744
|
+
constructor(opts: __ExceptionOptionType<CannotDelegateManagementAccountException, __BaseException>);
|
|
745
|
+
}
|
|
667
746
|
/**
|
|
668
747
|
* <p>Contains information about a returned CloudTrail channel.</p>
|
|
669
748
|
*/
|
|
@@ -763,6 +842,44 @@ export interface CreateEventDataStoreRequest {
|
|
|
763
842
|
* <p>A list of tags.</p>
|
|
764
843
|
*/
|
|
765
844
|
TagsList?: Tag[];
|
|
845
|
+
/**
|
|
846
|
+
* <p>Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The
|
|
847
|
+
* value can be an alias name prefixed by <code>alias/</code>, a fully specified ARN to an alias, a fully
|
|
848
|
+
* specified ARN to a key, or a globally unique identifier.</p>
|
|
849
|
+
* <important>
|
|
850
|
+
* <p>Disabling or deleting the KMS key, or removing CloudTrail
|
|
851
|
+
* permissions on the key, prevents CloudTrail from logging events to the event data store, and prevents users
|
|
852
|
+
* from querying the data in the event data store that was encrypted with the key.
|
|
853
|
+
* After you associate an event data store with a KMS key, the KMS key cannot be removed or changed. Before you disable or
|
|
854
|
+
* delete a KMS key that you are using with an event data store, delete or back up your event data store.</p>
|
|
855
|
+
* </important>
|
|
856
|
+
* <p>CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys,
|
|
857
|
+
* see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
|
|
858
|
+
* <p>Examples:</p>
|
|
859
|
+
* <ul>
|
|
860
|
+
* <li>
|
|
861
|
+
* <p>
|
|
862
|
+
* <code>alias/MyAliasName</code>
|
|
863
|
+
* </p>
|
|
864
|
+
* </li>
|
|
865
|
+
* <li>
|
|
866
|
+
* <p>
|
|
867
|
+
* <code>arn:aws:kms:us-east-2:123456789012:alias/MyAliasName</code>
|
|
868
|
+
* </p>
|
|
869
|
+
* </li>
|
|
870
|
+
* <li>
|
|
871
|
+
* <p>
|
|
872
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
873
|
+
* </p>
|
|
874
|
+
* </li>
|
|
875
|
+
* <li>
|
|
876
|
+
* <p>
|
|
877
|
+
* <code>12345678-1234-1234-1234-123456789012</code>
|
|
878
|
+
* </p>
|
|
879
|
+
* </li>
|
|
880
|
+
* </ul>
|
|
881
|
+
*/
|
|
882
|
+
KmsKeyId?: string;
|
|
766
883
|
}
|
|
767
884
|
export declare enum EventDataStoreStatus {
|
|
768
885
|
CREATED = "CREATED",
|
|
@@ -815,6 +932,14 @@ export interface CreateEventDataStoreResponse {
|
|
|
815
932
|
* <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
|
|
816
933
|
*/
|
|
817
934
|
UpdatedTimestamp?: Date;
|
|
935
|
+
/**
|
|
936
|
+
* <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
|
|
937
|
+
* The value is a fully specified ARN to a KMS key in the following format.</p>
|
|
938
|
+
* <p>
|
|
939
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
940
|
+
* </p>
|
|
941
|
+
*/
|
|
942
|
+
KmsKeyId?: string;
|
|
818
943
|
}
|
|
819
944
|
/**
|
|
820
945
|
* <p>An event data store with that name already exists.</p>
|
|
@@ -863,6 +988,68 @@ export declare class InsufficientDependencyServiceAccessPermissionException exte
|
|
|
863
988
|
*/
|
|
864
989
|
constructor(opts: __ExceptionOptionType<InsufficientDependencyServiceAccessPermissionException, __BaseException>);
|
|
865
990
|
}
|
|
991
|
+
/**
|
|
992
|
+
* <p>This exception is thrown when the policy on the S3 bucket or KMS key does not have sufficient permissions for the operation.</p>
|
|
993
|
+
*/
|
|
994
|
+
export declare class InsufficientEncryptionPolicyException extends __BaseException {
|
|
995
|
+
readonly name: "InsufficientEncryptionPolicyException";
|
|
996
|
+
readonly $fault: "client";
|
|
997
|
+
/**
|
|
998
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
999
|
+
*/
|
|
1000
|
+
Message?: string;
|
|
1001
|
+
/**
|
|
1002
|
+
* @internal
|
|
1003
|
+
*/
|
|
1004
|
+
constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
|
|
1005
|
+
}
|
|
1006
|
+
/**
|
|
1007
|
+
* <p>This exception is thrown when the KMS key ARN is not valid.</p>
|
|
1008
|
+
*/
|
|
1009
|
+
export declare class InvalidKmsKeyIdException extends __BaseException {
|
|
1010
|
+
readonly name: "InvalidKmsKeyIdException";
|
|
1011
|
+
readonly $fault: "client";
|
|
1012
|
+
/**
|
|
1013
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
1014
|
+
*/
|
|
1015
|
+
Message?: string;
|
|
1016
|
+
/**
|
|
1017
|
+
* @internal
|
|
1018
|
+
*/
|
|
1019
|
+
constructor(opts: __ExceptionOptionType<InvalidKmsKeyIdException, __BaseException>);
|
|
1020
|
+
}
|
|
1021
|
+
/**
|
|
1022
|
+
* <p>This exception is thrown when there is an issue with the specified KMS key and the trail or event data store can't be updated.</p>
|
|
1023
|
+
*/
|
|
1024
|
+
export declare class KmsException extends __BaseException {
|
|
1025
|
+
readonly name: "KmsException";
|
|
1026
|
+
readonly $fault: "client";
|
|
1027
|
+
/**
|
|
1028
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
1029
|
+
*/
|
|
1030
|
+
Message?: string;
|
|
1031
|
+
/**
|
|
1032
|
+
* @internal
|
|
1033
|
+
*/
|
|
1034
|
+
constructor(opts: __ExceptionOptionType<KmsException, __BaseException>);
|
|
1035
|
+
}
|
|
1036
|
+
/**
|
|
1037
|
+
* <p>This exception is thrown when the KMS key does not exist, when the S3 bucket and the
|
|
1038
|
+
* KMS key are not in the same region, or when the KMS key associated with the Amazon SNS
|
|
1039
|
+
* topic either does not exist or is not in the same region.</p>
|
|
1040
|
+
*/
|
|
1041
|
+
export declare class KmsKeyNotFoundException extends __BaseException {
|
|
1042
|
+
readonly name: "KmsKeyNotFoundException";
|
|
1043
|
+
readonly $fault: "client";
|
|
1044
|
+
/**
|
|
1045
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
1046
|
+
*/
|
|
1047
|
+
Message?: string;
|
|
1048
|
+
/**
|
|
1049
|
+
* @internal
|
|
1050
|
+
*/
|
|
1051
|
+
constructor(opts: __ExceptionOptionType<KmsKeyNotFoundException, __BaseException>);
|
|
1052
|
+
}
|
|
866
1053
|
/**
|
|
867
1054
|
* <p>This exception is thrown when Organizations is not configured to support all
|
|
868
1055
|
* features. All features must be enabled in Organizations to support
|
|
@@ -1109,21 +1296,6 @@ export interface CreateTrailResponse {
|
|
|
1109
1296
|
*/
|
|
1110
1297
|
IsOrganizationTrail?: boolean;
|
|
1111
1298
|
}
|
|
1112
|
-
/**
|
|
1113
|
-
* <p>This exception is thrown when the policy on the S3 bucket or KMS key does not have sufficient permissions for the operation.</p>
|
|
1114
|
-
*/
|
|
1115
|
-
export declare class InsufficientEncryptionPolicyException extends __BaseException {
|
|
1116
|
-
readonly name: "InsufficientEncryptionPolicyException";
|
|
1117
|
-
readonly $fault: "client";
|
|
1118
|
-
/**
|
|
1119
|
-
* <p>Brief description of the exception returned by the request.</p>
|
|
1120
|
-
*/
|
|
1121
|
-
Message?: string;
|
|
1122
|
-
/**
|
|
1123
|
-
* @internal
|
|
1124
|
-
*/
|
|
1125
|
-
constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
|
|
1126
|
-
}
|
|
1127
1299
|
/**
|
|
1128
1300
|
* <p>This exception is thrown when the policy on the S3 bucket is not sufficient.</p>
|
|
1129
1301
|
*/
|
|
@@ -1184,21 +1356,6 @@ export declare class InvalidCloudWatchLogsRoleArnException extends __BaseExcepti
|
|
|
1184
1356
|
*/
|
|
1185
1357
|
constructor(opts: __ExceptionOptionType<InvalidCloudWatchLogsRoleArnException, __BaseException>);
|
|
1186
1358
|
}
|
|
1187
|
-
/**
|
|
1188
|
-
* <p>This exception is thrown when the KMS key ARN is not valid.</p>
|
|
1189
|
-
*/
|
|
1190
|
-
export declare class InvalidKmsKeyIdException extends __BaseException {
|
|
1191
|
-
readonly name: "InvalidKmsKeyIdException";
|
|
1192
|
-
readonly $fault: "client";
|
|
1193
|
-
/**
|
|
1194
|
-
* <p>Brief description of the exception returned by the request.</p>
|
|
1195
|
-
*/
|
|
1196
|
-
Message?: string;
|
|
1197
|
-
/**
|
|
1198
|
-
* @internal
|
|
1199
|
-
*/
|
|
1200
|
-
constructor(opts: __ExceptionOptionType<InvalidKmsKeyIdException, __BaseException>);
|
|
1201
|
-
}
|
|
1202
1359
|
/**
|
|
1203
1360
|
* <p>This exception is thrown when the combination of parameters provided is not valid.</p>
|
|
1204
1361
|
*/
|
|
@@ -1259,21 +1416,6 @@ export declare class InvalidSnsTopicNameException extends __BaseException {
|
|
|
1259
1416
|
*/
|
|
1260
1417
|
constructor(opts: __ExceptionOptionType<InvalidSnsTopicNameException, __BaseException>);
|
|
1261
1418
|
}
|
|
1262
|
-
/**
|
|
1263
|
-
* <p>This exception is thrown when there is an issue with the specified KMS key and the trail can’t be updated.</p>
|
|
1264
|
-
*/
|
|
1265
|
-
export declare class KmsException extends __BaseException {
|
|
1266
|
-
readonly name: "KmsException";
|
|
1267
|
-
readonly $fault: "client";
|
|
1268
|
-
/**
|
|
1269
|
-
* <p>Brief description of the exception returned by the request.</p>
|
|
1270
|
-
*/
|
|
1271
|
-
Message?: string;
|
|
1272
|
-
/**
|
|
1273
|
-
* @internal
|
|
1274
|
-
*/
|
|
1275
|
-
constructor(opts: __ExceptionOptionType<KmsException, __BaseException>);
|
|
1276
|
-
}
|
|
1277
1419
|
/**
|
|
1278
1420
|
* @deprecated
|
|
1279
1421
|
*
|
|
@@ -1291,23 +1433,6 @@ export declare class KmsKeyDisabledException extends __BaseException {
|
|
|
1291
1433
|
*/
|
|
1292
1434
|
constructor(opts: __ExceptionOptionType<KmsKeyDisabledException, __BaseException>);
|
|
1293
1435
|
}
|
|
1294
|
-
/**
|
|
1295
|
-
* <p>This exception is thrown when the KMS key does not exist, when the S3 bucket and the
|
|
1296
|
-
* KMS key are not in the same region, or when the KMS key associated with the Amazon SNS
|
|
1297
|
-
* topic either does not exist or is not in the same region.</p>
|
|
1298
|
-
*/
|
|
1299
|
-
export declare class KmsKeyNotFoundException extends __BaseException {
|
|
1300
|
-
readonly name: "KmsKeyNotFoundException";
|
|
1301
|
-
readonly $fault: "client";
|
|
1302
|
-
/**
|
|
1303
|
-
* <p>Brief description of the exception returned by the request.</p>
|
|
1304
|
-
*/
|
|
1305
|
-
Message?: string;
|
|
1306
|
-
/**
|
|
1307
|
-
* @internal
|
|
1308
|
-
*/
|
|
1309
|
-
constructor(opts: __ExceptionOptionType<KmsKeyNotFoundException, __BaseException>);
|
|
1310
|
-
}
|
|
1311
1436
|
/**
|
|
1312
1437
|
* <p>This exception is thrown when the maximum number of trails is reached.</p>
|
|
1313
1438
|
*/
|
|
@@ -1455,11 +1580,46 @@ export declare class TrailNotFoundException extends __BaseException {
|
|
|
1455
1580
|
*/
|
|
1456
1581
|
constructor(opts: __ExceptionOptionType<TrailNotFoundException, __BaseException>);
|
|
1457
1582
|
}
|
|
1583
|
+
/**
|
|
1584
|
+
* <p>Removes CloudTrail delegated administrator permissions from a specified member account in an organization
|
|
1585
|
+
* that is currently designated as a delegated administrator.</p>
|
|
1586
|
+
*/
|
|
1587
|
+
export interface DeregisterOrganizationDelegatedAdminRequest {
|
|
1588
|
+
/**
|
|
1589
|
+
* <p>A delegated administrator account ID. This is a member account in an organization
|
|
1590
|
+
* that is currently designated as a delegated administrator.</p>
|
|
1591
|
+
*/
|
|
1592
|
+
DelegatedAdminAccountId: string | undefined;
|
|
1593
|
+
}
|
|
1594
|
+
/**
|
|
1595
|
+
* <p>Returns the following response if successful. Otherwise, returns an error.</p>
|
|
1596
|
+
*/
|
|
1597
|
+
export interface DeregisterOrganizationDelegatedAdminResponse {
|
|
1598
|
+
}
|
|
1599
|
+
/**
|
|
1600
|
+
* <p>
|
|
1601
|
+
* This exception is thrown when the account making the request is not the organization's management account.
|
|
1602
|
+
* </p>
|
|
1603
|
+
*/
|
|
1604
|
+
export declare class NotOrganizationManagementAccountException extends __BaseException {
|
|
1605
|
+
readonly name: "NotOrganizationManagementAccountException";
|
|
1606
|
+
readonly $fault: "client";
|
|
1607
|
+
/**
|
|
1608
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
1609
|
+
*/
|
|
1610
|
+
Message?: string;
|
|
1611
|
+
/**
|
|
1612
|
+
* @internal
|
|
1613
|
+
*/
|
|
1614
|
+
constructor(opts: __ExceptionOptionType<NotOrganizationManagementAccountException, __BaseException>);
|
|
1615
|
+
}
|
|
1458
1616
|
export interface DescribeQueryRequest {
|
|
1459
1617
|
/**
|
|
1618
|
+
* @deprecated
|
|
1619
|
+
*
|
|
1460
1620
|
* <p>The ARN (or the ID suffix of the ARN) of an event data store on which the specified query was run.</p>
|
|
1461
1621
|
*/
|
|
1462
|
-
EventDataStore
|
|
1622
|
+
EventDataStore?: string;
|
|
1463
1623
|
/**
|
|
1464
1624
|
* <p>The query ID.</p>
|
|
1465
1625
|
*/
|
|
@@ -1782,6 +1942,14 @@ export interface GetEventDataStoreResponse {
|
|
|
1782
1942
|
* <p>Shows the time that an event data store was updated, if applicable. <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
|
|
1783
1943
|
*/
|
|
1784
1944
|
UpdatedTimestamp?: Date;
|
|
1945
|
+
/**
|
|
1946
|
+
* <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
|
|
1947
|
+
* The value is a fully specified ARN to a KMS key in the following format.</p>
|
|
1948
|
+
* <p>
|
|
1949
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
1950
|
+
* </p>
|
|
1951
|
+
*/
|
|
1952
|
+
KmsKeyId?: string;
|
|
1785
1953
|
}
|
|
1786
1954
|
export interface GetEventSelectorsRequest {
|
|
1787
1955
|
/**
|
|
@@ -2283,9 +2451,11 @@ export declare class InsightNotEnabledException extends __BaseException {
|
|
|
2283
2451
|
}
|
|
2284
2452
|
export interface GetQueryResultsRequest {
|
|
2285
2453
|
/**
|
|
2454
|
+
* @deprecated
|
|
2455
|
+
*
|
|
2286
2456
|
* <p>The ARN (or ID suffix of the ARN) of the event data store against which the query was run.</p>
|
|
2287
2457
|
*/
|
|
2288
|
-
EventDataStore
|
|
2458
|
+
EventDataStore?: string;
|
|
2289
2459
|
/**
|
|
2290
2460
|
* <p>The ID of the query for which you want to get results.</p>
|
|
2291
2461
|
*/
|
|
@@ -3304,6 +3474,35 @@ export interface PutInsightSelectorsResponse {
|
|
|
3304
3474
|
*/
|
|
3305
3475
|
InsightSelectors?: InsightSelector[];
|
|
3306
3476
|
}
|
|
3477
|
+
/**
|
|
3478
|
+
* <p>This exception is thrown when the maximum number of CloudTrail delegated administrators is reached.</p>
|
|
3479
|
+
*/
|
|
3480
|
+
export declare class DelegatedAdminAccountLimitExceededException extends __BaseException {
|
|
3481
|
+
readonly name: "DelegatedAdminAccountLimitExceededException";
|
|
3482
|
+
readonly $fault: "client";
|
|
3483
|
+
/**
|
|
3484
|
+
* <p>Brief description of the exception returned by the request.</p>
|
|
3485
|
+
*/
|
|
3486
|
+
Message?: string;
|
|
3487
|
+
/**
|
|
3488
|
+
* @internal
|
|
3489
|
+
*/
|
|
3490
|
+
constructor(opts: __ExceptionOptionType<DelegatedAdminAccountLimitExceededException, __BaseException>);
|
|
3491
|
+
}
|
|
3492
|
+
/**
|
|
3493
|
+
* <p>Specifies an organization member account ID as a CloudTrail delegated administrator.</p>
|
|
3494
|
+
*/
|
|
3495
|
+
export interface RegisterOrganizationDelegatedAdminRequest {
|
|
3496
|
+
/**
|
|
3497
|
+
* <p>An organization member account ID that you want to designate as a delegated administrator.</p>
|
|
3498
|
+
*/
|
|
3499
|
+
MemberAccountId: string | undefined;
|
|
3500
|
+
}
|
|
3501
|
+
/**
|
|
3502
|
+
* <p>Returns the following response if successful. Otherwise, returns an error.</p>
|
|
3503
|
+
*/
|
|
3504
|
+
export interface RegisterOrganizationDelegatedAdminResponse {
|
|
3505
|
+
}
|
|
3307
3506
|
/**
|
|
3308
3507
|
* <p>Specifies the tags to remove from a trail or event data store.</p>
|
|
3309
3508
|
*/
|
|
@@ -3391,6 +3590,14 @@ export interface RestoreEventDataStoreResponse {
|
|
|
3391
3590
|
* <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
|
|
3392
3591
|
*/
|
|
3393
3592
|
UpdatedTimestamp?: Date;
|
|
3593
|
+
/**
|
|
3594
|
+
* <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
|
|
3595
|
+
* The value is a fully specified ARN to a KMS key in the following format.</p>
|
|
3596
|
+
* <p>
|
|
3597
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
3598
|
+
* </p>
|
|
3599
|
+
*/
|
|
3600
|
+
KmsKeyId?: string;
|
|
3394
3601
|
}
|
|
3395
3602
|
/**
|
|
3396
3603
|
* <p>This exception is thrown when event categories of specified event data stores are not valid.</p>
|
|
@@ -3697,6 +3904,44 @@ export interface UpdateEventDataStoreRequest {
|
|
|
3697
3904
|
* <p>Indicates that termination protection is enabled and the event data store cannot be automatically deleted.</p>
|
|
3698
3905
|
*/
|
|
3699
3906
|
TerminationProtectionEnabled?: boolean;
|
|
3907
|
+
/**
|
|
3908
|
+
* <p>Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The
|
|
3909
|
+
* value can be an alias name prefixed by <code>alias/</code>, a fully specified ARN to an alias, a fully
|
|
3910
|
+
* specified ARN to a key, or a globally unique identifier.</p>
|
|
3911
|
+
* <important>
|
|
3912
|
+
* <p>Disabling or deleting the KMS key, or removing CloudTrail
|
|
3913
|
+
* permissions on the key, prevents CloudTrail from logging events to the event data store, and prevents users
|
|
3914
|
+
* from querying the data in the event data store that was encrypted with the key.
|
|
3915
|
+
* After you associate an event data store with a KMS key, the KMS key cannot be removed or changed. Before you disable or
|
|
3916
|
+
* delete a KMS key that you are using with an event data store, delete or back up your event data store.</p>
|
|
3917
|
+
* </important>
|
|
3918
|
+
* <p>CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys,
|
|
3919
|
+
* see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
|
|
3920
|
+
* <p>Examples:</p>
|
|
3921
|
+
* <ul>
|
|
3922
|
+
* <li>
|
|
3923
|
+
* <p>
|
|
3924
|
+
* <code>alias/MyAliasName</code>
|
|
3925
|
+
* </p>
|
|
3926
|
+
* </li>
|
|
3927
|
+
* <li>
|
|
3928
|
+
* <p>
|
|
3929
|
+
* <code>arn:aws:kms:us-east-2:123456789012:alias/MyAliasName</code>
|
|
3930
|
+
* </p>
|
|
3931
|
+
* </li>
|
|
3932
|
+
* <li>
|
|
3933
|
+
* <p>
|
|
3934
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
3935
|
+
* </p>
|
|
3936
|
+
* </li>
|
|
3937
|
+
* <li>
|
|
3938
|
+
* <p>
|
|
3939
|
+
* <code>12345678-1234-1234-1234-123456789012</code>
|
|
3940
|
+
* </p>
|
|
3941
|
+
* </li>
|
|
3942
|
+
* </ul>
|
|
3943
|
+
*/
|
|
3944
|
+
KmsKeyId?: string;
|
|
3700
3945
|
}
|
|
3701
3946
|
export interface UpdateEventDataStoreResponse {
|
|
3702
3947
|
/**
|
|
@@ -3739,6 +3984,14 @@ export interface UpdateEventDataStoreResponse {
|
|
|
3739
3984
|
* <p>The timestamp that shows when the event data store was last updated. <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
|
|
3740
3985
|
*/
|
|
3741
3986
|
UpdatedTimestamp?: Date;
|
|
3987
|
+
/**
|
|
3988
|
+
* <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
|
|
3989
|
+
* The value is a fully specified ARN to a KMS key in the following format.</p>
|
|
3990
|
+
* <p>
|
|
3991
|
+
* <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
|
|
3992
|
+
* </p>
|
|
3993
|
+
*/
|
|
3994
|
+
KmsKeyId?: string;
|
|
3742
3995
|
}
|
|
3743
3996
|
/**
|
|
3744
3997
|
* <p>Specifies settings to update for the trail.</p>
|
|
@@ -3982,6 +4235,14 @@ export declare const DeleteTrailRequestFilterSensitiveLog: (obj: DeleteTrailRequ
|
|
|
3982
4235
|
* @internal
|
|
3983
4236
|
*/
|
|
3984
4237
|
export declare const DeleteTrailResponseFilterSensitiveLog: (obj: DeleteTrailResponse) => any;
|
|
4238
|
+
/**
|
|
4239
|
+
* @internal
|
|
4240
|
+
*/
|
|
4241
|
+
export declare const DeregisterOrganizationDelegatedAdminRequestFilterSensitiveLog: (obj: DeregisterOrganizationDelegatedAdminRequest) => any;
|
|
4242
|
+
/**
|
|
4243
|
+
* @internal
|
|
4244
|
+
*/
|
|
4245
|
+
export declare const DeregisterOrganizationDelegatedAdminResponseFilterSensitiveLog: (obj: DeregisterOrganizationDelegatedAdminResponse) => any;
|
|
3985
4246
|
/**
|
|
3986
4247
|
* @internal
|
|
3987
4248
|
*/
|
|
@@ -4234,6 +4495,14 @@ export declare const PutInsightSelectorsRequestFilterSensitiveLog: (obj: PutInsi
|
|
|
4234
4495
|
* @internal
|
|
4235
4496
|
*/
|
|
4236
4497
|
export declare const PutInsightSelectorsResponseFilterSensitiveLog: (obj: PutInsightSelectorsResponse) => any;
|
|
4498
|
+
/**
|
|
4499
|
+
* @internal
|
|
4500
|
+
*/
|
|
4501
|
+
export declare const RegisterOrganizationDelegatedAdminRequestFilterSensitiveLog: (obj: RegisterOrganizationDelegatedAdminRequest) => any;
|
|
4502
|
+
/**
|
|
4503
|
+
* @internal
|
|
4504
|
+
*/
|
|
4505
|
+
export declare const RegisterOrganizationDelegatedAdminResponseFilterSensitiveLog: (obj: RegisterOrganizationDelegatedAdminResponse) => any;
|
|
4237
4506
|
/**
|
|
4238
4507
|
* @internal
|
|
4239
4508
|
*/
|
|
@@ -6,6 +6,7 @@ import { CreateEventDataStoreCommandInput, CreateEventDataStoreCommandOutput } f
|
|
|
6
6
|
import { CreateTrailCommandInput, CreateTrailCommandOutput } from "../commands/CreateTrailCommand";
|
|
7
7
|
import { DeleteEventDataStoreCommandInput, DeleteEventDataStoreCommandOutput } from "../commands/DeleteEventDataStoreCommand";
|
|
8
8
|
import { DeleteTrailCommandInput, DeleteTrailCommandOutput } from "../commands/DeleteTrailCommand";
|
|
9
|
+
import { DeregisterOrganizationDelegatedAdminCommandInput, DeregisterOrganizationDelegatedAdminCommandOutput } from "../commands/DeregisterOrganizationDelegatedAdminCommand";
|
|
9
10
|
import { DescribeQueryCommandInput, DescribeQueryCommandOutput } from "../commands/DescribeQueryCommand";
|
|
10
11
|
import { DescribeTrailsCommandInput, DescribeTrailsCommandOutput } from "../commands/DescribeTrailsCommand";
|
|
11
12
|
import { GetChannelCommandInput, GetChannelCommandOutput } from "../commands/GetChannelCommand";
|
|
@@ -27,6 +28,7 @@ import { ListTrailsCommandInput, ListTrailsCommandOutput } from "../commands/Lis
|
|
|
27
28
|
import { LookupEventsCommandInput, LookupEventsCommandOutput } from "../commands/LookupEventsCommand";
|
|
28
29
|
import { PutEventSelectorsCommandInput, PutEventSelectorsCommandOutput } from "../commands/PutEventSelectorsCommand";
|
|
29
30
|
import { PutInsightSelectorsCommandInput, PutInsightSelectorsCommandOutput } from "../commands/PutInsightSelectorsCommand";
|
|
31
|
+
import { RegisterOrganizationDelegatedAdminCommandInput, RegisterOrganizationDelegatedAdminCommandOutput } from "../commands/RegisterOrganizationDelegatedAdminCommand";
|
|
30
32
|
import { RemoveTagsCommandInput, RemoveTagsCommandOutput } from "../commands/RemoveTagsCommand";
|
|
31
33
|
import { RestoreEventDataStoreCommandInput, RestoreEventDataStoreCommandOutput } from "../commands/RestoreEventDataStoreCommand";
|
|
32
34
|
import { StartImportCommandInput, StartImportCommandOutput } from "../commands/StartImportCommand";
|
|
@@ -42,6 +44,7 @@ export declare const serializeAws_json1_1CreateEventDataStoreCommand: (input: Cr
|
|
|
42
44
|
export declare const serializeAws_json1_1CreateTrailCommand: (input: CreateTrailCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
43
45
|
export declare const serializeAws_json1_1DeleteEventDataStoreCommand: (input: DeleteEventDataStoreCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
44
46
|
export declare const serializeAws_json1_1DeleteTrailCommand: (input: DeleteTrailCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
47
|
+
export declare const serializeAws_json1_1DeregisterOrganizationDelegatedAdminCommand: (input: DeregisterOrganizationDelegatedAdminCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
45
48
|
export declare const serializeAws_json1_1DescribeQueryCommand: (input: DescribeQueryCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
46
49
|
export declare const serializeAws_json1_1DescribeTrailsCommand: (input: DescribeTrailsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
47
50
|
export declare const serializeAws_json1_1GetChannelCommand: (input: GetChannelCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
@@ -63,6 +66,7 @@ export declare const serializeAws_json1_1ListTrailsCommand: (input: ListTrailsCo
|
|
|
63
66
|
export declare const serializeAws_json1_1LookupEventsCommand: (input: LookupEventsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
64
67
|
export declare const serializeAws_json1_1PutEventSelectorsCommand: (input: PutEventSelectorsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
65
68
|
export declare const serializeAws_json1_1PutInsightSelectorsCommand: (input: PutInsightSelectorsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
69
|
+
export declare const serializeAws_json1_1RegisterOrganizationDelegatedAdminCommand: (input: RegisterOrganizationDelegatedAdminCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
66
70
|
export declare const serializeAws_json1_1RemoveTagsCommand: (input: RemoveTagsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
67
71
|
export declare const serializeAws_json1_1RestoreEventDataStoreCommand: (input: RestoreEventDataStoreCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
68
72
|
export declare const serializeAws_json1_1StartImportCommand: (input: StartImportCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
@@ -78,6 +82,7 @@ export declare const deserializeAws_json1_1CreateEventDataStoreCommand: (output:
|
|
|
78
82
|
export declare const deserializeAws_json1_1CreateTrailCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateTrailCommandOutput>;
|
|
79
83
|
export declare const deserializeAws_json1_1DeleteEventDataStoreCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteEventDataStoreCommandOutput>;
|
|
80
84
|
export declare const deserializeAws_json1_1DeleteTrailCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteTrailCommandOutput>;
|
|
85
|
+
export declare const deserializeAws_json1_1DeregisterOrganizationDelegatedAdminCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
|
|
81
86
|
export declare const deserializeAws_json1_1DescribeQueryCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeQueryCommandOutput>;
|
|
82
87
|
export declare const deserializeAws_json1_1DescribeTrailsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeTrailsCommandOutput>;
|
|
83
88
|
export declare const deserializeAws_json1_1GetChannelCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetChannelCommandOutput>;
|
|
@@ -99,6 +104,7 @@ export declare const deserializeAws_json1_1ListTrailsCommand: (output: __HttpRes
|
|
|
99
104
|
export declare const deserializeAws_json1_1LookupEventsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<LookupEventsCommandOutput>;
|
|
100
105
|
export declare const deserializeAws_json1_1PutEventSelectorsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<PutEventSelectorsCommandOutput>;
|
|
101
106
|
export declare const deserializeAws_json1_1PutInsightSelectorsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<PutInsightSelectorsCommandOutput>;
|
|
107
|
+
export declare const deserializeAws_json1_1RegisterOrganizationDelegatedAdminCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
|
|
102
108
|
export declare const deserializeAws_json1_1RemoveTagsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RemoveTagsCommandOutput>;
|
|
103
109
|
export declare const deserializeAws_json1_1RestoreEventDataStoreCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RestoreEventDataStoreCommandOutput>;
|
|
104
110
|
export declare const deserializeAws_json1_1StartImportCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<StartImportCommandOutput>;
|
|
@@ -24,6 +24,10 @@ import {
|
|
|
24
24
|
DeleteTrailCommandInput,
|
|
25
25
|
DeleteTrailCommandOutput,
|
|
26
26
|
} from "./commands/DeleteTrailCommand";
|
|
27
|
+
import {
|
|
28
|
+
DeregisterOrganizationDelegatedAdminCommandInput,
|
|
29
|
+
DeregisterOrganizationDelegatedAdminCommandOutput,
|
|
30
|
+
} from "./commands/DeregisterOrganizationDelegatedAdminCommand";
|
|
27
31
|
import {
|
|
28
32
|
DescribeQueryCommandInput,
|
|
29
33
|
DescribeQueryCommandOutput,
|
|
@@ -108,6 +112,10 @@ import {
|
|
|
108
112
|
PutInsightSelectorsCommandInput,
|
|
109
113
|
PutInsightSelectorsCommandOutput,
|
|
110
114
|
} from "./commands/PutInsightSelectorsCommand";
|
|
115
|
+
import {
|
|
116
|
+
RegisterOrganizationDelegatedAdminCommandInput,
|
|
117
|
+
RegisterOrganizationDelegatedAdminCommandOutput,
|
|
118
|
+
} from "./commands/RegisterOrganizationDelegatedAdminCommand";
|
|
111
119
|
import {
|
|
112
120
|
RemoveTagsCommandInput,
|
|
113
121
|
RemoveTagsCommandOutput,
|
|
@@ -223,6 +231,25 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
223
231
|
options: __HttpHandlerOptions,
|
|
224
232
|
cb: (err: any, data?: DeleteTrailCommandOutput) => void
|
|
225
233
|
): void;
|
|
234
|
+
deregisterOrganizationDelegatedAdmin(
|
|
235
|
+
args: DeregisterOrganizationDelegatedAdminCommandInput,
|
|
236
|
+
options?: __HttpHandlerOptions
|
|
237
|
+
): Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
|
|
238
|
+
deregisterOrganizationDelegatedAdmin(
|
|
239
|
+
args: DeregisterOrganizationDelegatedAdminCommandInput,
|
|
240
|
+
cb: (
|
|
241
|
+
err: any,
|
|
242
|
+
data?: DeregisterOrganizationDelegatedAdminCommandOutput
|
|
243
|
+
) => void
|
|
244
|
+
): void;
|
|
245
|
+
deregisterOrganizationDelegatedAdmin(
|
|
246
|
+
args: DeregisterOrganizationDelegatedAdminCommandInput,
|
|
247
|
+
options: __HttpHandlerOptions,
|
|
248
|
+
cb: (
|
|
249
|
+
err: any,
|
|
250
|
+
data?: DeregisterOrganizationDelegatedAdminCommandOutput
|
|
251
|
+
) => void
|
|
252
|
+
): void;
|
|
226
253
|
describeQuery(
|
|
227
254
|
args: DescribeQueryCommandInput,
|
|
228
255
|
options?: __HttpHandlerOptions
|
|
@@ -496,6 +523,25 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
496
523
|
options: __HttpHandlerOptions,
|
|
497
524
|
cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void
|
|
498
525
|
): void;
|
|
526
|
+
registerOrganizationDelegatedAdmin(
|
|
527
|
+
args: RegisterOrganizationDelegatedAdminCommandInput,
|
|
528
|
+
options?: __HttpHandlerOptions
|
|
529
|
+
): Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
|
|
530
|
+
registerOrganizationDelegatedAdmin(
|
|
531
|
+
args: RegisterOrganizationDelegatedAdminCommandInput,
|
|
532
|
+
cb: (
|
|
533
|
+
err: any,
|
|
534
|
+
data?: RegisterOrganizationDelegatedAdminCommandOutput
|
|
535
|
+
) => void
|
|
536
|
+
): void;
|
|
537
|
+
registerOrganizationDelegatedAdmin(
|
|
538
|
+
args: RegisterOrganizationDelegatedAdminCommandInput,
|
|
539
|
+
options: __HttpHandlerOptions,
|
|
540
|
+
cb: (
|
|
541
|
+
err: any,
|
|
542
|
+
data?: RegisterOrganizationDelegatedAdminCommandOutput
|
|
543
|
+
) => void
|
|
544
|
+
): void;
|
|
499
545
|
removeTags(
|
|
500
546
|
args: RemoveTagsCommandInput,
|
|
501
547
|
options?: __HttpHandlerOptions
|