@aws-sdk/client-cloudtrail 3.204.0 → 3.205.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/CHANGELOG.md +4361 -0
  2. package/dist-cjs/CloudTrail.js +30 -0
  3. package/dist-cjs/commands/DeregisterOrganizationDelegatedAdminCommand.js +46 -0
  4. package/dist-cjs/commands/RegisterOrganizationDelegatedAdminCommand.js +46 -0
  5. package/dist-cjs/commands/index.js +2 -0
  6. package/dist-cjs/endpoint/ruleset.js +1 -1
  7. package/dist-cjs/models/models_0.js +174 -60
  8. package/dist-cjs/protocols/Aws_json1_1.js +375 -2
  9. package/dist-es/CloudTrail.js +30 -0
  10. package/dist-es/commands/DeregisterOrganizationDelegatedAdminCommand.js +42 -0
  11. package/dist-es/commands/RegisterOrganizationDelegatedAdminCommand.js +42 -0
  12. package/dist-es/commands/index.js +2 -0
  13. package/dist-es/endpoint/ruleset.js +1 -1
  14. package/dist-es/models/models_0.js +155 -52
  15. package/dist-es/protocols/Aws_json1_1.js +370 -1
  16. package/dist-types/CloudTrail.d.ts +15 -1
  17. package/dist-types/CloudTrailClient.d.ts +4 -2
  18. package/dist-types/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +37 -0
  19. package/dist-types/commands/GetChannelCommand.d.ts +1 -1
  20. package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +37 -0
  21. package/dist-types/commands/index.d.ts +2 -0
  22. package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
  23. package/dist-types/models/models_0.d.ts +334 -65
  24. package/dist-types/protocols/Aws_json1_1.d.ts +6 -0
  25. package/dist-types/ts3.4/CloudTrail.d.ts +46 -0
  26. package/dist-types/ts3.4/CloudTrailClient.d.ts +12 -0
  27. package/dist-types/ts3.4/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +41 -0
  28. package/dist-types/ts3.4/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +41 -0
  29. package/dist-types/ts3.4/commands/index.d.ts +2 -0
  30. package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
  31. package/dist-types/ts3.4/models/models_0.d.ts +130 -36
  32. package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +24 -0
  33. package/package.json +1 -1
@@ -18,6 +18,51 @@ export declare class AccountHasOngoingImportException extends __BaseException {
18
18
  */
19
19
  constructor(opts: __ExceptionOptionType<AccountHasOngoingImportException, __BaseException>);
20
20
  }
21
+ /**
22
+ * <p>This exception is thrown when when the specified account is not found or not part of an organization.</p>
23
+ */
24
+ export declare class AccountNotFoundException extends __BaseException {
25
+ readonly name: "AccountNotFoundException";
26
+ readonly $fault: "client";
27
+ /**
28
+ * <p>Brief description of the exception returned by the request.</p>
29
+ */
30
+ Message?: string;
31
+ /**
32
+ * @internal
33
+ */
34
+ constructor(opts: __ExceptionOptionType<AccountNotFoundException, __BaseException>);
35
+ }
36
+ /**
37
+ * <p>This exception is thrown when the specified account is not registered as the CloudTrail delegated administrator.</p>
38
+ */
39
+ export declare class AccountNotRegisteredException extends __BaseException {
40
+ readonly name: "AccountNotRegisteredException";
41
+ readonly $fault: "client";
42
+ /**
43
+ * <p>Brief description of the exception returned by the request.</p>
44
+ */
45
+ Message?: string;
46
+ /**
47
+ * @internal
48
+ */
49
+ constructor(opts: __ExceptionOptionType<AccountNotRegisteredException, __BaseException>);
50
+ }
51
+ /**
52
+ * <p>This exception is thrown when the account is already registered as the CloudTrail delegated administrator.</p>
53
+ */
54
+ export declare class AccountRegisteredException extends __BaseException {
55
+ readonly name: "AccountRegisteredException";
56
+ readonly $fault: "client";
57
+ /**
58
+ * <p>Brief description of the exception returned by the request.</p>
59
+ */
60
+ Message?: string;
61
+ /**
62
+ * @internal
63
+ */
64
+ constructor(opts: __ExceptionOptionType<AccountRegisteredException, __BaseException>);
65
+ }
21
66
  /**
22
67
  * <p>A custom key-value pair associated with a resource such as a CloudTrail trail.</p>
23
68
  */
@@ -167,6 +212,23 @@ export declare class InvalidTrailNameException extends __BaseException {
167
212
  */
168
213
  constructor(opts: __ExceptionOptionType<InvalidTrailNameException, __BaseException>);
169
214
  }
215
+ /**
216
+ * <p>
217
+ * This exception is thrown when the management account does not have a service-linked role.
218
+ * </p>
219
+ */
220
+ export declare class NoManagementAccountSLRExistsException extends __BaseException {
221
+ readonly name: "NoManagementAccountSLRExistsException";
222
+ readonly $fault: "client";
223
+ /**
224
+ * <p>Brief description of the exception returned by the request.</p>
225
+ */
226
+ Message?: string;
227
+ /**
228
+ * @internal
229
+ */
230
+ constructor(opts: __ExceptionOptionType<NoManagementAccountSLRExistsException, __BaseException>);
231
+ }
170
232
  /**
171
233
  * <p>This exception is thrown when the Amazon Web Services account making the request to create
172
234
  * or update an organization trail or event data store is not the management account for an
@@ -575,9 +637,11 @@ export interface AdvancedEventSelector {
575
637
  }
576
638
  export interface CancelQueryRequest {
577
639
  /**
640
+ * @deprecated
641
+ *
578
642
  * <p>The ARN (or the ID suffix of the ARN) of an event data store on which the specified query is running.</p>
579
643
  */
580
- EventDataStore: string | undefined;
644
+ EventDataStore?: string;
581
645
  /**
582
646
  * <p>The ID of the query that you want to cancel. The <code>QueryId</code> comes from the response of a <code>StartQuery</code>
583
647
  * operation.</p>
@@ -664,6 +728,21 @@ export declare class QueryIdNotFoundException extends __BaseException {
664
728
  */
665
729
  constructor(opts: __ExceptionOptionType<QueryIdNotFoundException, __BaseException>);
666
730
  }
731
+ /**
732
+ * <p>This exception is thrown when the management account of an organization is registered as the CloudTrail delegated administrator.</p>
733
+ */
734
+ export declare class CannotDelegateManagementAccountException extends __BaseException {
735
+ readonly name: "CannotDelegateManagementAccountException";
736
+ readonly $fault: "client";
737
+ /**
738
+ * <p>Brief description of the exception returned by the request.</p>
739
+ */
740
+ Message?: string;
741
+ /**
742
+ * @internal
743
+ */
744
+ constructor(opts: __ExceptionOptionType<CannotDelegateManagementAccountException, __BaseException>);
745
+ }
667
746
  /**
668
747
  * <p>Contains information about a returned CloudTrail channel.</p>
669
748
  */
@@ -763,6 +842,44 @@ export interface CreateEventDataStoreRequest {
763
842
  * <p>A list of tags.</p>
764
843
  */
765
844
  TagsList?: Tag[];
845
+ /**
846
+ * <p>Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The
847
+ * value can be an alias name prefixed by <code>alias/</code>, a fully specified ARN to an alias, a fully
848
+ * specified ARN to a key, or a globally unique identifier.</p>
849
+ * <important>
850
+ * <p>Disabling or deleting the KMS key, or removing CloudTrail
851
+ * permissions on the key, prevents CloudTrail from logging events to the event data store, and prevents users
852
+ * from querying the data in the event data store that was encrypted with the key.
853
+ * After you associate an event data store with a KMS key, the KMS key cannot be removed or changed. Before you disable or
854
+ * delete a KMS key that you are using with an event data store, delete or back up your event data store.</p>
855
+ * </important>
856
+ * <p>CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys,
857
+ * see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
858
+ * <p>Examples:</p>
859
+ * <ul>
860
+ * <li>
861
+ * <p>
862
+ * <code>alias/MyAliasName</code>
863
+ * </p>
864
+ * </li>
865
+ * <li>
866
+ * <p>
867
+ * <code>arn:aws:kms:us-east-2:123456789012:alias/MyAliasName</code>
868
+ * </p>
869
+ * </li>
870
+ * <li>
871
+ * <p>
872
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
873
+ * </p>
874
+ * </li>
875
+ * <li>
876
+ * <p>
877
+ * <code>12345678-1234-1234-1234-123456789012</code>
878
+ * </p>
879
+ * </li>
880
+ * </ul>
881
+ */
882
+ KmsKeyId?: string;
766
883
  }
767
884
  export declare enum EventDataStoreStatus {
768
885
  CREATED = "CREATED",
@@ -815,6 +932,14 @@ export interface CreateEventDataStoreResponse {
815
932
  * <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
816
933
  */
817
934
  UpdatedTimestamp?: Date;
935
+ /**
936
+ * <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
937
+ * The value is a fully specified ARN to a KMS key in the following format.</p>
938
+ * <p>
939
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
940
+ * </p>
941
+ */
942
+ KmsKeyId?: string;
818
943
  }
819
944
  /**
820
945
  * <p>An event data store with that name already exists.</p>
@@ -863,6 +988,68 @@ export declare class InsufficientDependencyServiceAccessPermissionException exte
863
988
  */
864
989
  constructor(opts: __ExceptionOptionType<InsufficientDependencyServiceAccessPermissionException, __BaseException>);
865
990
  }
991
+ /**
992
+ * <p>This exception is thrown when the policy on the S3 bucket or KMS key does not have sufficient permissions for the operation.</p>
993
+ */
994
+ export declare class InsufficientEncryptionPolicyException extends __BaseException {
995
+ readonly name: "InsufficientEncryptionPolicyException";
996
+ readonly $fault: "client";
997
+ /**
998
+ * <p>Brief description of the exception returned by the request.</p>
999
+ */
1000
+ Message?: string;
1001
+ /**
1002
+ * @internal
1003
+ */
1004
+ constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
1005
+ }
1006
+ /**
1007
+ * <p>This exception is thrown when the KMS key ARN is not valid.</p>
1008
+ */
1009
+ export declare class InvalidKmsKeyIdException extends __BaseException {
1010
+ readonly name: "InvalidKmsKeyIdException";
1011
+ readonly $fault: "client";
1012
+ /**
1013
+ * <p>Brief description of the exception returned by the request.</p>
1014
+ */
1015
+ Message?: string;
1016
+ /**
1017
+ * @internal
1018
+ */
1019
+ constructor(opts: __ExceptionOptionType<InvalidKmsKeyIdException, __BaseException>);
1020
+ }
1021
+ /**
1022
+ * <p>This exception is thrown when there is an issue with the specified KMS key and the trail or event data store can't be updated.</p>
1023
+ */
1024
+ export declare class KmsException extends __BaseException {
1025
+ readonly name: "KmsException";
1026
+ readonly $fault: "client";
1027
+ /**
1028
+ * <p>Brief description of the exception returned by the request.</p>
1029
+ */
1030
+ Message?: string;
1031
+ /**
1032
+ * @internal
1033
+ */
1034
+ constructor(opts: __ExceptionOptionType<KmsException, __BaseException>);
1035
+ }
1036
+ /**
1037
+ * <p>This exception is thrown when the KMS key does not exist, when the S3 bucket and the
1038
+ * KMS key are not in the same region, or when the KMS key associated with the Amazon SNS
1039
+ * topic either does not exist or is not in the same region.</p>
1040
+ */
1041
+ export declare class KmsKeyNotFoundException extends __BaseException {
1042
+ readonly name: "KmsKeyNotFoundException";
1043
+ readonly $fault: "client";
1044
+ /**
1045
+ * <p>Brief description of the exception returned by the request.</p>
1046
+ */
1047
+ Message?: string;
1048
+ /**
1049
+ * @internal
1050
+ */
1051
+ constructor(opts: __ExceptionOptionType<KmsKeyNotFoundException, __BaseException>);
1052
+ }
866
1053
  /**
867
1054
  * <p>This exception is thrown when Organizations is not configured to support all
868
1055
  * features. All features must be enabled in Organizations to support
@@ -1109,21 +1296,6 @@ export interface CreateTrailResponse {
1109
1296
  */
1110
1297
  IsOrganizationTrail?: boolean;
1111
1298
  }
1112
- /**
1113
- * <p>This exception is thrown when the policy on the S3 bucket or KMS key does not have sufficient permissions for the operation.</p>
1114
- */
1115
- export declare class InsufficientEncryptionPolicyException extends __BaseException {
1116
- readonly name: "InsufficientEncryptionPolicyException";
1117
- readonly $fault: "client";
1118
- /**
1119
- * <p>Brief description of the exception returned by the request.</p>
1120
- */
1121
- Message?: string;
1122
- /**
1123
- * @internal
1124
- */
1125
- constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
1126
- }
1127
1299
  /**
1128
1300
  * <p>This exception is thrown when the policy on the S3 bucket is not sufficient.</p>
1129
1301
  */
@@ -1184,21 +1356,6 @@ export declare class InvalidCloudWatchLogsRoleArnException extends __BaseExcepti
1184
1356
  */
1185
1357
  constructor(opts: __ExceptionOptionType<InvalidCloudWatchLogsRoleArnException, __BaseException>);
1186
1358
  }
1187
- /**
1188
- * <p>This exception is thrown when the KMS key ARN is not valid.</p>
1189
- */
1190
- export declare class InvalidKmsKeyIdException extends __BaseException {
1191
- readonly name: "InvalidKmsKeyIdException";
1192
- readonly $fault: "client";
1193
- /**
1194
- * <p>Brief description of the exception returned by the request.</p>
1195
- */
1196
- Message?: string;
1197
- /**
1198
- * @internal
1199
- */
1200
- constructor(opts: __ExceptionOptionType<InvalidKmsKeyIdException, __BaseException>);
1201
- }
1202
1359
  /**
1203
1360
  * <p>This exception is thrown when the combination of parameters provided is not valid.</p>
1204
1361
  */
@@ -1259,21 +1416,6 @@ export declare class InvalidSnsTopicNameException extends __BaseException {
1259
1416
  */
1260
1417
  constructor(opts: __ExceptionOptionType<InvalidSnsTopicNameException, __BaseException>);
1261
1418
  }
1262
- /**
1263
- * <p>This exception is thrown when there is an issue with the specified KMS key and the trail can’t be updated.</p>
1264
- */
1265
- export declare class KmsException extends __BaseException {
1266
- readonly name: "KmsException";
1267
- readonly $fault: "client";
1268
- /**
1269
- * <p>Brief description of the exception returned by the request.</p>
1270
- */
1271
- Message?: string;
1272
- /**
1273
- * @internal
1274
- */
1275
- constructor(opts: __ExceptionOptionType<KmsException, __BaseException>);
1276
- }
1277
1419
  /**
1278
1420
  * @deprecated
1279
1421
  *
@@ -1291,23 +1433,6 @@ export declare class KmsKeyDisabledException extends __BaseException {
1291
1433
  */
1292
1434
  constructor(opts: __ExceptionOptionType<KmsKeyDisabledException, __BaseException>);
1293
1435
  }
1294
- /**
1295
- * <p>This exception is thrown when the KMS key does not exist, when the S3 bucket and the
1296
- * KMS key are not in the same region, or when the KMS key associated with the Amazon SNS
1297
- * topic either does not exist or is not in the same region.</p>
1298
- */
1299
- export declare class KmsKeyNotFoundException extends __BaseException {
1300
- readonly name: "KmsKeyNotFoundException";
1301
- readonly $fault: "client";
1302
- /**
1303
- * <p>Brief description of the exception returned by the request.</p>
1304
- */
1305
- Message?: string;
1306
- /**
1307
- * @internal
1308
- */
1309
- constructor(opts: __ExceptionOptionType<KmsKeyNotFoundException, __BaseException>);
1310
- }
1311
1436
  /**
1312
1437
  * <p>This exception is thrown when the maximum number of trails is reached.</p>
1313
1438
  */
@@ -1455,11 +1580,46 @@ export declare class TrailNotFoundException extends __BaseException {
1455
1580
  */
1456
1581
  constructor(opts: __ExceptionOptionType<TrailNotFoundException, __BaseException>);
1457
1582
  }
1583
+ /**
1584
+ * <p>Removes CloudTrail delegated administrator permissions from a specified member account in an organization
1585
+ * that is currently designated as a delegated administrator.</p>
1586
+ */
1587
+ export interface DeregisterOrganizationDelegatedAdminRequest {
1588
+ /**
1589
+ * <p>A delegated administrator account ID. This is a member account in an organization
1590
+ * that is currently designated as a delegated administrator.</p>
1591
+ */
1592
+ DelegatedAdminAccountId: string | undefined;
1593
+ }
1594
+ /**
1595
+ * <p>Returns the following response if successful. Otherwise, returns an error.</p>
1596
+ */
1597
+ export interface DeregisterOrganizationDelegatedAdminResponse {
1598
+ }
1599
+ /**
1600
+ * <p>
1601
+ * This exception is thrown when the account making the request is not the organization's management account.
1602
+ * </p>
1603
+ */
1604
+ export declare class NotOrganizationManagementAccountException extends __BaseException {
1605
+ readonly name: "NotOrganizationManagementAccountException";
1606
+ readonly $fault: "client";
1607
+ /**
1608
+ * <p>Brief description of the exception returned by the request.</p>
1609
+ */
1610
+ Message?: string;
1611
+ /**
1612
+ * @internal
1613
+ */
1614
+ constructor(opts: __ExceptionOptionType<NotOrganizationManagementAccountException, __BaseException>);
1615
+ }
1458
1616
  export interface DescribeQueryRequest {
1459
1617
  /**
1618
+ * @deprecated
1619
+ *
1460
1620
  * <p>The ARN (or the ID suffix of the ARN) of an event data store on which the specified query was run.</p>
1461
1621
  */
1462
- EventDataStore: string | undefined;
1622
+ EventDataStore?: string;
1463
1623
  /**
1464
1624
  * <p>The query ID.</p>
1465
1625
  */
@@ -1782,6 +1942,14 @@ export interface GetEventDataStoreResponse {
1782
1942
  * <p>Shows the time that an event data store was updated, if applicable. <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
1783
1943
  */
1784
1944
  UpdatedTimestamp?: Date;
1945
+ /**
1946
+ * <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
1947
+ * The value is a fully specified ARN to a KMS key in the following format.</p>
1948
+ * <p>
1949
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
1950
+ * </p>
1951
+ */
1952
+ KmsKeyId?: string;
1785
1953
  }
1786
1954
  export interface GetEventSelectorsRequest {
1787
1955
  /**
@@ -2283,9 +2451,11 @@ export declare class InsightNotEnabledException extends __BaseException {
2283
2451
  }
2284
2452
  export interface GetQueryResultsRequest {
2285
2453
  /**
2454
+ * @deprecated
2455
+ *
2286
2456
  * <p>The ARN (or ID suffix of the ARN) of the event data store against which the query was run.</p>
2287
2457
  */
2288
- EventDataStore: string | undefined;
2458
+ EventDataStore?: string;
2289
2459
  /**
2290
2460
  * <p>The ID of the query for which you want to get results.</p>
2291
2461
  */
@@ -3304,6 +3474,35 @@ export interface PutInsightSelectorsResponse {
3304
3474
  */
3305
3475
  InsightSelectors?: InsightSelector[];
3306
3476
  }
3477
+ /**
3478
+ * <p>This exception is thrown when the maximum number of CloudTrail delegated administrators is reached.</p>
3479
+ */
3480
+ export declare class DelegatedAdminAccountLimitExceededException extends __BaseException {
3481
+ readonly name: "DelegatedAdminAccountLimitExceededException";
3482
+ readonly $fault: "client";
3483
+ /**
3484
+ * <p>Brief description of the exception returned by the request.</p>
3485
+ */
3486
+ Message?: string;
3487
+ /**
3488
+ * @internal
3489
+ */
3490
+ constructor(opts: __ExceptionOptionType<DelegatedAdminAccountLimitExceededException, __BaseException>);
3491
+ }
3492
+ /**
3493
+ * <p>Specifies an organization member account ID as a CloudTrail delegated administrator.</p>
3494
+ */
3495
+ export interface RegisterOrganizationDelegatedAdminRequest {
3496
+ /**
3497
+ * <p>An organization member account ID that you want to designate as a delegated administrator.</p>
3498
+ */
3499
+ MemberAccountId: string | undefined;
3500
+ }
3501
+ /**
3502
+ * <p>Returns the following response if successful. Otherwise, returns an error.</p>
3503
+ */
3504
+ export interface RegisterOrganizationDelegatedAdminResponse {
3505
+ }
3307
3506
  /**
3308
3507
  * <p>Specifies the tags to remove from a trail or event data store.</p>
3309
3508
  */
@@ -3391,6 +3590,14 @@ export interface RestoreEventDataStoreResponse {
3391
3590
  * <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
3392
3591
  */
3393
3592
  UpdatedTimestamp?: Date;
3593
+ /**
3594
+ * <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
3595
+ * The value is a fully specified ARN to a KMS key in the following format.</p>
3596
+ * <p>
3597
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
3598
+ * </p>
3599
+ */
3600
+ KmsKeyId?: string;
3394
3601
  }
3395
3602
  /**
3396
3603
  * <p>This exception is thrown when event categories of specified event data stores are not valid.</p>
@@ -3697,6 +3904,44 @@ export interface UpdateEventDataStoreRequest {
3697
3904
  * <p>Indicates that termination protection is enabled and the event data store cannot be automatically deleted.</p>
3698
3905
  */
3699
3906
  TerminationProtectionEnabled?: boolean;
3907
+ /**
3908
+ * <p>Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The
3909
+ * value can be an alias name prefixed by <code>alias/</code>, a fully specified ARN to an alias, a fully
3910
+ * specified ARN to a key, or a globally unique identifier.</p>
3911
+ * <important>
3912
+ * <p>Disabling or deleting the KMS key, or removing CloudTrail
3913
+ * permissions on the key, prevents CloudTrail from logging events to the event data store, and prevents users
3914
+ * from querying the data in the event data store that was encrypted with the key.
3915
+ * After you associate an event data store with a KMS key, the KMS key cannot be removed or changed. Before you disable or
3916
+ * delete a KMS key that you are using with an event data store, delete or back up your event data store.</p>
3917
+ * </important>
3918
+ * <p>CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys,
3919
+ * see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html">Using multi-Region keys</a> in the <i>Key Management Service Developer Guide</i>.</p>
3920
+ * <p>Examples:</p>
3921
+ * <ul>
3922
+ * <li>
3923
+ * <p>
3924
+ * <code>alias/MyAliasName</code>
3925
+ * </p>
3926
+ * </li>
3927
+ * <li>
3928
+ * <p>
3929
+ * <code>arn:aws:kms:us-east-2:123456789012:alias/MyAliasName</code>
3930
+ * </p>
3931
+ * </li>
3932
+ * <li>
3933
+ * <p>
3934
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
3935
+ * </p>
3936
+ * </li>
3937
+ * <li>
3938
+ * <p>
3939
+ * <code>12345678-1234-1234-1234-123456789012</code>
3940
+ * </p>
3941
+ * </li>
3942
+ * </ul>
3943
+ */
3944
+ KmsKeyId?: string;
3700
3945
  }
3701
3946
  export interface UpdateEventDataStoreResponse {
3702
3947
  /**
@@ -3739,6 +3984,14 @@ export interface UpdateEventDataStoreResponse {
3739
3984
  * <p>The timestamp that shows when the event data store was last updated. <code>UpdatedTimestamp</code> is always either the same or newer than the time shown in <code>CreatedTimestamp</code>.</p>
3740
3985
  */
3741
3986
  UpdatedTimestamp?: Date;
3987
+ /**
3988
+ * <p>Specifies the KMS key ID that encrypts the events delivered by CloudTrail.
3989
+ * The value is a fully specified ARN to a KMS key in the following format.</p>
3990
+ * <p>
3991
+ * <code>arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012</code>
3992
+ * </p>
3993
+ */
3994
+ KmsKeyId?: string;
3742
3995
  }
3743
3996
  /**
3744
3997
  * <p>Specifies settings to update for the trail.</p>
@@ -3982,6 +4235,14 @@ export declare const DeleteTrailRequestFilterSensitiveLog: (obj: DeleteTrailRequ
3982
4235
  * @internal
3983
4236
  */
3984
4237
  export declare const DeleteTrailResponseFilterSensitiveLog: (obj: DeleteTrailResponse) => any;
4238
+ /**
4239
+ * @internal
4240
+ */
4241
+ export declare const DeregisterOrganizationDelegatedAdminRequestFilterSensitiveLog: (obj: DeregisterOrganizationDelegatedAdminRequest) => any;
4242
+ /**
4243
+ * @internal
4244
+ */
4245
+ export declare const DeregisterOrganizationDelegatedAdminResponseFilterSensitiveLog: (obj: DeregisterOrganizationDelegatedAdminResponse) => any;
3985
4246
  /**
3986
4247
  * @internal
3987
4248
  */
@@ -4234,6 +4495,14 @@ export declare const PutInsightSelectorsRequestFilterSensitiveLog: (obj: PutInsi
4234
4495
  * @internal
4235
4496
  */
4236
4497
  export declare const PutInsightSelectorsResponseFilterSensitiveLog: (obj: PutInsightSelectorsResponse) => any;
4498
+ /**
4499
+ * @internal
4500
+ */
4501
+ export declare const RegisterOrganizationDelegatedAdminRequestFilterSensitiveLog: (obj: RegisterOrganizationDelegatedAdminRequest) => any;
4502
+ /**
4503
+ * @internal
4504
+ */
4505
+ export declare const RegisterOrganizationDelegatedAdminResponseFilterSensitiveLog: (obj: RegisterOrganizationDelegatedAdminResponse) => any;
4237
4506
  /**
4238
4507
  * @internal
4239
4508
  */
@@ -6,6 +6,7 @@ import { CreateEventDataStoreCommandInput, CreateEventDataStoreCommandOutput } f
6
6
  import { CreateTrailCommandInput, CreateTrailCommandOutput } from "../commands/CreateTrailCommand";
7
7
  import { DeleteEventDataStoreCommandInput, DeleteEventDataStoreCommandOutput } from "../commands/DeleteEventDataStoreCommand";
8
8
  import { DeleteTrailCommandInput, DeleteTrailCommandOutput } from "../commands/DeleteTrailCommand";
9
+ import { DeregisterOrganizationDelegatedAdminCommandInput, DeregisterOrganizationDelegatedAdminCommandOutput } from "../commands/DeregisterOrganizationDelegatedAdminCommand";
9
10
  import { DescribeQueryCommandInput, DescribeQueryCommandOutput } from "../commands/DescribeQueryCommand";
10
11
  import { DescribeTrailsCommandInput, DescribeTrailsCommandOutput } from "../commands/DescribeTrailsCommand";
11
12
  import { GetChannelCommandInput, GetChannelCommandOutput } from "../commands/GetChannelCommand";
@@ -27,6 +28,7 @@ import { ListTrailsCommandInput, ListTrailsCommandOutput } from "../commands/Lis
27
28
  import { LookupEventsCommandInput, LookupEventsCommandOutput } from "../commands/LookupEventsCommand";
28
29
  import { PutEventSelectorsCommandInput, PutEventSelectorsCommandOutput } from "../commands/PutEventSelectorsCommand";
29
30
  import { PutInsightSelectorsCommandInput, PutInsightSelectorsCommandOutput } from "../commands/PutInsightSelectorsCommand";
31
+ import { RegisterOrganizationDelegatedAdminCommandInput, RegisterOrganizationDelegatedAdminCommandOutput } from "../commands/RegisterOrganizationDelegatedAdminCommand";
30
32
  import { RemoveTagsCommandInput, RemoveTagsCommandOutput } from "../commands/RemoveTagsCommand";
31
33
  import { RestoreEventDataStoreCommandInput, RestoreEventDataStoreCommandOutput } from "../commands/RestoreEventDataStoreCommand";
32
34
  import { StartImportCommandInput, StartImportCommandOutput } from "../commands/StartImportCommand";
@@ -42,6 +44,7 @@ export declare const serializeAws_json1_1CreateEventDataStoreCommand: (input: Cr
42
44
  export declare const serializeAws_json1_1CreateTrailCommand: (input: CreateTrailCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
43
45
  export declare const serializeAws_json1_1DeleteEventDataStoreCommand: (input: DeleteEventDataStoreCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
44
46
  export declare const serializeAws_json1_1DeleteTrailCommand: (input: DeleteTrailCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
47
+ export declare const serializeAws_json1_1DeregisterOrganizationDelegatedAdminCommand: (input: DeregisterOrganizationDelegatedAdminCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
45
48
  export declare const serializeAws_json1_1DescribeQueryCommand: (input: DescribeQueryCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
46
49
  export declare const serializeAws_json1_1DescribeTrailsCommand: (input: DescribeTrailsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
47
50
  export declare const serializeAws_json1_1GetChannelCommand: (input: GetChannelCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -63,6 +66,7 @@ export declare const serializeAws_json1_1ListTrailsCommand: (input: ListTrailsCo
63
66
  export declare const serializeAws_json1_1LookupEventsCommand: (input: LookupEventsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
64
67
  export declare const serializeAws_json1_1PutEventSelectorsCommand: (input: PutEventSelectorsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
65
68
  export declare const serializeAws_json1_1PutInsightSelectorsCommand: (input: PutInsightSelectorsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
69
+ export declare const serializeAws_json1_1RegisterOrganizationDelegatedAdminCommand: (input: RegisterOrganizationDelegatedAdminCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
66
70
  export declare const serializeAws_json1_1RemoveTagsCommand: (input: RemoveTagsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
67
71
  export declare const serializeAws_json1_1RestoreEventDataStoreCommand: (input: RestoreEventDataStoreCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
68
72
  export declare const serializeAws_json1_1StartImportCommand: (input: StartImportCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -78,6 +82,7 @@ export declare const deserializeAws_json1_1CreateEventDataStoreCommand: (output:
78
82
  export declare const deserializeAws_json1_1CreateTrailCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateTrailCommandOutput>;
79
83
  export declare const deserializeAws_json1_1DeleteEventDataStoreCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteEventDataStoreCommandOutput>;
80
84
  export declare const deserializeAws_json1_1DeleteTrailCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteTrailCommandOutput>;
85
+ export declare const deserializeAws_json1_1DeregisterOrganizationDelegatedAdminCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
81
86
  export declare const deserializeAws_json1_1DescribeQueryCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeQueryCommandOutput>;
82
87
  export declare const deserializeAws_json1_1DescribeTrailsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeTrailsCommandOutput>;
83
88
  export declare const deserializeAws_json1_1GetChannelCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetChannelCommandOutput>;
@@ -99,6 +104,7 @@ export declare const deserializeAws_json1_1ListTrailsCommand: (output: __HttpRes
99
104
  export declare const deserializeAws_json1_1LookupEventsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<LookupEventsCommandOutput>;
100
105
  export declare const deserializeAws_json1_1PutEventSelectorsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<PutEventSelectorsCommandOutput>;
101
106
  export declare const deserializeAws_json1_1PutInsightSelectorsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<PutInsightSelectorsCommandOutput>;
107
+ export declare const deserializeAws_json1_1RegisterOrganizationDelegatedAdminCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
102
108
  export declare const deserializeAws_json1_1RemoveTagsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RemoveTagsCommandOutput>;
103
109
  export declare const deserializeAws_json1_1RestoreEventDataStoreCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RestoreEventDataStoreCommandOutput>;
104
110
  export declare const deserializeAws_json1_1StartImportCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<StartImportCommandOutput>;
@@ -24,6 +24,10 @@ import {
24
24
  DeleteTrailCommandInput,
25
25
  DeleteTrailCommandOutput,
26
26
  } from "./commands/DeleteTrailCommand";
27
+ import {
28
+ DeregisterOrganizationDelegatedAdminCommandInput,
29
+ DeregisterOrganizationDelegatedAdminCommandOutput,
30
+ } from "./commands/DeregisterOrganizationDelegatedAdminCommand";
27
31
  import {
28
32
  DescribeQueryCommandInput,
29
33
  DescribeQueryCommandOutput,
@@ -108,6 +112,10 @@ import {
108
112
  PutInsightSelectorsCommandInput,
109
113
  PutInsightSelectorsCommandOutput,
110
114
  } from "./commands/PutInsightSelectorsCommand";
115
+ import {
116
+ RegisterOrganizationDelegatedAdminCommandInput,
117
+ RegisterOrganizationDelegatedAdminCommandOutput,
118
+ } from "./commands/RegisterOrganizationDelegatedAdminCommand";
111
119
  import {
112
120
  RemoveTagsCommandInput,
113
121
  RemoveTagsCommandOutput,
@@ -223,6 +231,25 @@ export declare class CloudTrail extends CloudTrailClient {
223
231
  options: __HttpHandlerOptions,
224
232
  cb: (err: any, data?: DeleteTrailCommandOutput) => void
225
233
  ): void;
234
+ deregisterOrganizationDelegatedAdmin(
235
+ args: DeregisterOrganizationDelegatedAdminCommandInput,
236
+ options?: __HttpHandlerOptions
237
+ ): Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
238
+ deregisterOrganizationDelegatedAdmin(
239
+ args: DeregisterOrganizationDelegatedAdminCommandInput,
240
+ cb: (
241
+ err: any,
242
+ data?: DeregisterOrganizationDelegatedAdminCommandOutput
243
+ ) => void
244
+ ): void;
245
+ deregisterOrganizationDelegatedAdmin(
246
+ args: DeregisterOrganizationDelegatedAdminCommandInput,
247
+ options: __HttpHandlerOptions,
248
+ cb: (
249
+ err: any,
250
+ data?: DeregisterOrganizationDelegatedAdminCommandOutput
251
+ ) => void
252
+ ): void;
226
253
  describeQuery(
227
254
  args: DescribeQueryCommandInput,
228
255
  options?: __HttpHandlerOptions
@@ -496,6 +523,25 @@ export declare class CloudTrail extends CloudTrailClient {
496
523
  options: __HttpHandlerOptions,
497
524
  cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void
498
525
  ): void;
526
+ registerOrganizationDelegatedAdmin(
527
+ args: RegisterOrganizationDelegatedAdminCommandInput,
528
+ options?: __HttpHandlerOptions
529
+ ): Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
530
+ registerOrganizationDelegatedAdmin(
531
+ args: RegisterOrganizationDelegatedAdminCommandInput,
532
+ cb: (
533
+ err: any,
534
+ data?: RegisterOrganizationDelegatedAdminCommandOutput
535
+ ) => void
536
+ ): void;
537
+ registerOrganizationDelegatedAdmin(
538
+ args: RegisterOrganizationDelegatedAdminCommandInput,
539
+ options: __HttpHandlerOptions,
540
+ cb: (
541
+ err: any,
542
+ data?: RegisterOrganizationDelegatedAdminCommandOutput
543
+ ) => void
544
+ ): void;
499
545
  removeTags(
500
546
  args: RemoveTagsCommandInput,
501
547
  options?: __HttpHandlerOptions