@aws-sdk/client-cloudtrail 3.261.0 → 3.264.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/README.md +13 -12
  2. package/dist-cjs/CloudTrail.js +90 -0
  3. package/dist-cjs/commands/CreateChannelCommand.js +46 -0
  4. package/dist-cjs/commands/DeleteChannelCommand.js +46 -0
  5. package/dist-cjs/commands/DeleteResourcePolicyCommand.js +46 -0
  6. package/dist-cjs/commands/GetResourcePolicyCommand.js +46 -0
  7. package/dist-cjs/commands/PutResourcePolicyCommand.js +46 -0
  8. package/dist-cjs/commands/UpdateChannelCommand.js +46 -0
  9. package/dist-cjs/commands/index.js +6 -0
  10. package/dist-cjs/endpoint/ruleset.js +1 -1
  11. package/dist-cjs/models/models_0.js +181 -30
  12. package/dist-cjs/protocols/Aws_json1_1.js +602 -2
  13. package/dist-es/CloudTrail.js +90 -0
  14. package/dist-es/commands/CreateChannelCommand.js +42 -0
  15. package/dist-es/commands/DeleteChannelCommand.js +42 -0
  16. package/dist-es/commands/DeleteResourcePolicyCommand.js +42 -0
  17. package/dist-es/commands/GetResourcePolicyCommand.js +42 -0
  18. package/dist-es/commands/PutResourcePolicyCommand.js +42 -0
  19. package/dist-es/commands/UpdateChannelCommand.js +42 -0
  20. package/dist-es/commands/index.js +6 -0
  21. package/dist-es/endpoint/ruleset.js +1 -1
  22. package/dist-es/models/models_0.js +152 -22
  23. package/dist-es/protocols/Aws_json1_1.js +589 -1
  24. package/dist-types/CloudTrail.d.ts +238 -164
  25. package/dist-types/CloudTrailClient.d.ts +21 -14
  26. package/dist-types/commands/AddTagsCommand.d.ts +7 -9
  27. package/dist-types/commands/CancelQueryCommand.d.ts +6 -3
  28. package/dist-types/commands/CreateChannelCommand.d.ts +39 -0
  29. package/dist-types/commands/DeleteChannelCommand.d.ts +37 -0
  30. package/dist-types/commands/DeleteEventDataStoreCommand.d.ts +10 -7
  31. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +39 -0
  32. package/dist-types/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +2 -1
  33. package/dist-types/commands/DescribeQueryCommand.d.ts +3 -2
  34. package/dist-types/commands/DescribeTrailsCommand.d.ts +2 -1
  35. package/dist-types/commands/GetChannelCommand.d.ts +1 -3
  36. package/dist-types/commands/GetEventDataStoreCommand.d.ts +2 -1
  37. package/dist-types/commands/GetEventSelectorsCommand.d.ts +10 -11
  38. package/dist-types/commands/GetImportCommand.d.ts +1 -3
  39. package/dist-types/commands/GetInsightSelectorsCommand.d.ts +6 -6
  40. package/dist-types/commands/GetQueryResultsCommand.d.ts +3 -2
  41. package/dist-types/commands/GetResourcePolicyCommand.d.ts +39 -0
  42. package/dist-types/commands/GetTrailStatusCommand.d.ts +5 -1
  43. package/dist-types/commands/ListChannelsCommand.d.ts +1 -3
  44. package/dist-types/commands/ListEventDataStoresCommand.d.ts +2 -1
  45. package/dist-types/commands/ListImportFailuresCommand.d.ts +1 -3
  46. package/dist-types/commands/ListImportsCommand.d.ts +2 -3
  47. package/dist-types/commands/ListPublicKeysCommand.d.ts +7 -4
  48. package/dist-types/commands/ListQueriesCommand.d.ts +7 -5
  49. package/dist-types/commands/ListTagsCommand.d.ts +1 -1
  50. package/dist-types/commands/LookupEventsCommand.d.ts +5 -5
  51. package/dist-types/commands/PutEventSelectorsCommand.d.ts +28 -31
  52. package/dist-types/commands/PutInsightSelectorsCommand.d.ts +5 -4
  53. package/dist-types/commands/PutResourcePolicyCommand.d.ts +41 -0
  54. package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +2 -1
  55. package/dist-types/commands/RemoveTagsCommand.d.ts +1 -1
  56. package/dist-types/commands/RestoreEventDataStoreCommand.d.ts +4 -3
  57. package/dist-types/commands/StartImportCommand.d.ts +17 -13
  58. package/dist-types/commands/StartLoggingCommand.d.ts +4 -1
  59. package/dist-types/commands/StartQueryCommand.d.ts +3 -1
  60. package/dist-types/commands/StopImportCommand.d.ts +1 -3
  61. package/dist-types/commands/StopLoggingCommand.d.ts +7 -7
  62. package/dist-types/commands/UpdateChannelCommand.d.ts +37 -0
  63. package/dist-types/commands/UpdateEventDataStoreCommand.d.ts +11 -6
  64. package/dist-types/commands/UpdateTrailCommand.d.ts +6 -6
  65. package/dist-types/commands/index.d.ts +6 -0
  66. package/dist-types/models/models_0.d.ts +1428 -835
  67. package/dist-types/protocols/Aws_json1_1.d.ts +18 -0
  68. package/dist-types/ts3.4/CloudTrail.d.ts +102 -0
  69. package/dist-types/ts3.4/CloudTrailClient.d.ts +36 -0
  70. package/dist-types/ts3.4/commands/CreateChannelCommand.d.ts +37 -0
  71. package/dist-types/ts3.4/commands/DeleteChannelCommand.d.ts +37 -0
  72. package/dist-types/ts3.4/commands/DeleteResourcePolicyCommand.d.ts +41 -0
  73. package/dist-types/ts3.4/commands/GetResourcePolicyCommand.d.ts +38 -0
  74. package/dist-types/ts3.4/commands/PutResourcePolicyCommand.d.ts +38 -0
  75. package/dist-types/ts3.4/commands/UpdateChannelCommand.d.ts +37 -0
  76. package/dist-types/ts3.4/commands/index.d.ts +6 -0
  77. package/dist-types/ts3.4/models/models_0.d.ts +181 -22
  78. package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +72 -0
  79. package/package.json +4 -4
@@ -2,9 +2,12 @@ import { HttpHandlerOptions as __HttpHandlerOptions } from "@aws-sdk/types";
2
2
  import { CloudTrailClient } from "./CloudTrailClient";
3
3
  import { AddTagsCommandInput, AddTagsCommandOutput } from "./commands/AddTagsCommand";
4
4
  import { CancelQueryCommandInput, CancelQueryCommandOutput } from "./commands/CancelQueryCommand";
5
+ import { CreateChannelCommandInput, CreateChannelCommandOutput } from "./commands/CreateChannelCommand";
5
6
  import { CreateEventDataStoreCommandInput, CreateEventDataStoreCommandOutput } from "./commands/CreateEventDataStoreCommand";
6
7
  import { CreateTrailCommandInput, CreateTrailCommandOutput } from "./commands/CreateTrailCommand";
8
+ import { DeleteChannelCommandInput, DeleteChannelCommandOutput } from "./commands/DeleteChannelCommand";
7
9
  import { DeleteEventDataStoreCommandInput, DeleteEventDataStoreCommandOutput } from "./commands/DeleteEventDataStoreCommand";
10
+ import { DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput } from "./commands/DeleteResourcePolicyCommand";
8
11
  import { DeleteTrailCommandInput, DeleteTrailCommandOutput } from "./commands/DeleteTrailCommand";
9
12
  import { DeregisterOrganizationDelegatedAdminCommandInput, DeregisterOrganizationDelegatedAdminCommandOutput } from "./commands/DeregisterOrganizationDelegatedAdminCommand";
10
13
  import { DescribeQueryCommandInput, DescribeQueryCommandOutput } from "./commands/DescribeQueryCommand";
@@ -15,6 +18,7 @@ import { GetEventSelectorsCommandInput, GetEventSelectorsCommandOutput } from ".
15
18
  import { GetImportCommandInput, GetImportCommandOutput } from "./commands/GetImportCommand";
16
19
  import { GetInsightSelectorsCommandInput, GetInsightSelectorsCommandOutput } from "./commands/GetInsightSelectorsCommand";
17
20
  import { GetQueryResultsCommandInput, GetQueryResultsCommandOutput } from "./commands/GetQueryResultsCommand";
21
+ import { GetResourcePolicyCommandInput, GetResourcePolicyCommandOutput } from "./commands/GetResourcePolicyCommand";
18
22
  import { GetTrailCommandInput, GetTrailCommandOutput } from "./commands/GetTrailCommand";
19
23
  import { GetTrailStatusCommandInput, GetTrailStatusCommandOutput } from "./commands/GetTrailStatusCommand";
20
24
  import { ListChannelsCommandInput, ListChannelsCommandOutput } from "./commands/ListChannelsCommand";
@@ -28,6 +32,7 @@ import { ListTrailsCommandInput, ListTrailsCommandOutput } from "./commands/List
28
32
  import { LookupEventsCommandInput, LookupEventsCommandOutput } from "./commands/LookupEventsCommand";
29
33
  import { PutEventSelectorsCommandInput, PutEventSelectorsCommandOutput } from "./commands/PutEventSelectorsCommand";
30
34
  import { PutInsightSelectorsCommandInput, PutInsightSelectorsCommandOutput } from "./commands/PutInsightSelectorsCommand";
35
+ import { PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput } from "./commands/PutResourcePolicyCommand";
31
36
  import { RegisterOrganizationDelegatedAdminCommandInput, RegisterOrganizationDelegatedAdminCommandOutput } from "./commands/RegisterOrganizationDelegatedAdminCommand";
32
37
  import { RemoveTagsCommandInput, RemoveTagsCommandOutput } from "./commands/RemoveTagsCommand";
33
38
  import { RestoreEventDataStoreCommandInput, RestoreEventDataStoreCommandOutput } from "./commands/RestoreEventDataStoreCommand";
@@ -36,48 +41,59 @@ import { StartLoggingCommandInput, StartLoggingCommandOutput } from "./commands/
36
41
  import { StartQueryCommandInput, StartQueryCommandOutput } from "./commands/StartQueryCommand";
37
42
  import { StopImportCommandInput, StopImportCommandOutput } from "./commands/StopImportCommand";
38
43
  import { StopLoggingCommandInput, StopLoggingCommandOutput } from "./commands/StopLoggingCommand";
44
+ import { UpdateChannelCommandInput, UpdateChannelCommandOutput } from "./commands/UpdateChannelCommand";
39
45
  import { UpdateEventDataStoreCommandInput, UpdateEventDataStoreCommandOutput } from "./commands/UpdateEventDataStoreCommand";
40
46
  import { UpdateTrailCommandInput, UpdateTrailCommandOutput } from "./commands/UpdateTrailCommand";
41
47
  /**
42
48
  * <fullname>CloudTrail</fullname>
43
- * <p>This is the CloudTrail API Reference. It provides descriptions of actions, data types, common parameters, and common errors for CloudTrail.</p>
44
- * <p>CloudTrail is a web service that records Amazon Web Services API calls for your Amazon Web Services account and delivers log files to an Amazon S3 bucket.
45
- * The recorded information includes the identity of the user, the start time of the Amazon Web Services API call, the source IP address, the request parameters, and the response elements returned by the service.</p>
49
+ * <p>This is the CloudTrail API Reference. It provides descriptions of actions, data
50
+ * types, common parameters, and common errors for CloudTrail.</p>
51
+ * <p>CloudTrail is a web service that records Amazon Web Services API calls for your
52
+ * Amazon Web Services account and delivers log files to an Amazon S3 bucket. The
53
+ * recorded information includes the identity of the user, the start time of the Amazon Web Services API call, the source IP address, the request parameters, and the response
54
+ * elements returned by the service.</p>
46
55
  * <note>
47
- * <p>As an alternative to the API,
48
- * you can use one of the Amazon Web Services SDKs, which consist of libraries and sample code for various
49
- * programming languages and platforms (Java, Ruby, .NET, iOS, Android, etc.). The SDKs
50
- * provide programmatic access to CloudTrail. For example, the SDKs
51
- * handle cryptographically signing requests, managing errors, and retrying requests
52
- * automatically. For more information about the Amazon Web Services SDKs, including how to download and install
53
- * them, see <a href="http://aws.amazon.com/tools/">Tools to Build on Amazon Web Services</a>.</p>
56
+ * <p>As an alternative to the API, you can use one of the Amazon Web Services SDKs, which
57
+ * consist of libraries and sample code for various programming languages and platforms
58
+ * (Java, Ruby, .NET, iOS, Android, etc.). The SDKs provide programmatic access to CloudTrail. For example, the SDKs handle cryptographically signing requests,
59
+ * managing errors, and retrying requests automatically. For more information about the
60
+ * Amazon Web Services SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools to Build on Amazon Web Services</a>.</p>
54
61
  * </note>
55
- * <p>See the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html">CloudTrail User
56
- * Guide</a> for information about the data that is included with each Amazon Web Services API call listed in the log files.</p>
62
+ * <p>See the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html">CloudTrail
63
+ * User Guide</a> for information about the data that is included with each Amazon Web Services API call listed in the log files.</p>
57
64
  */
58
65
  export declare class CloudTrail extends CloudTrailClient {
59
66
  /**
60
- * <p>Adds one or more tags to a trail or event data store, up to a limit of 50. Overwrites an
61
- * existing tag's value when a new value is specified for an existing tag key.
62
- * Tag key names must be unique for a trail; you cannot have two keys with the same name but
63
- * different values.
64
- * If you specify a key without a value, the tag will be created with the specified key and a
65
- * value of null.
66
- * You can tag a trail or event data store that applies to all Amazon Web Services Regions
67
- * only from the Region in which the trail or event data store was created (also known as its
68
- * home region).</p>
67
+ * <p>Adds one or more tags to a trail, event data store, or channel, up to a limit of 50. Overwrites an
68
+ * existing tag's value when a new value is specified for an existing tag key. Tag key names
69
+ * must be unique; you cannot have two keys with the same name but different
70
+ * values. If you specify a key without a value, the tag will be created with the specified
71
+ * key and a value of null. You can tag a trail or event data store that applies to all
72
+ * Amazon Web Services Regions only from the Region in which the trail or event data store
73
+ * was created (also known as its home region).</p>
69
74
  */
70
75
  addTags(args: AddTagsCommandInput, options?: __HttpHandlerOptions): Promise<AddTagsCommandOutput>;
71
76
  addTags(args: AddTagsCommandInput, cb: (err: any, data?: AddTagsCommandOutput) => void): void;
72
77
  addTags(args: AddTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AddTagsCommandOutput) => void): void;
73
78
  /**
74
- * <p>Cancels a query if the query is not in a terminated state, such as <code>CANCELLED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or <code>FINISHED</code>. You must specify an ARN value for <code>EventDataStore</code>.
75
- * The ID of the query that you want to cancel is also required. When you run <code>CancelQuery</code>, the query status might
76
- * show as <code>CANCELLED</code> even if the operation is not yet finished.</p>
79
+ * <p>Cancels a query if the query is not in a terminated state, such as
80
+ * <code>CANCELLED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or
81
+ * <code>FINISHED</code>. You must specify an ARN value for <code>EventDataStore</code>.
82
+ * The ID of the query that you want to cancel is also required. When you run
83
+ * <code>CancelQuery</code>, the query status might show as <code>CANCELLED</code> even if
84
+ * the operation is not yet finished.</p>
77
85
  */
78
86
  cancelQuery(args: CancelQueryCommandInput, options?: __HttpHandlerOptions): Promise<CancelQueryCommandOutput>;
79
87
  cancelQuery(args: CancelQueryCommandInput, cb: (err: any, data?: CancelQueryCommandOutput) => void): void;
80
88
  cancelQuery(args: CancelQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CancelQueryCommandOutput) => void): void;
89
+ /**
90
+ * <p>Creates a channel for CloudTrail to ingest events from a partner or external source.
91
+ * After you create a channel, a CloudTrail Lake event data store can log events
92
+ * from the partner or source that you specify.</p>
93
+ */
94
+ createChannel(args: CreateChannelCommandInput, options?: __HttpHandlerOptions): Promise<CreateChannelCommandOutput>;
95
+ createChannel(args: CreateChannelCommandInput, cb: (err: any, data?: CreateChannelCommandOutput) => void): void;
96
+ createChannel(args: CreateChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateChannelCommandOutput) => void): void;
81
97
  /**
82
98
  * <p>Creates a new event data store.</p>
83
99
  */
@@ -92,17 +108,34 @@ export declare class CloudTrail extends CloudTrailClient {
92
108
  createTrail(args: CreateTrailCommandInput, cb: (err: any, data?: CreateTrailCommandOutput) => void): void;
93
109
  createTrail(args: CreateTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateTrailCommandOutput) => void): void;
94
110
  /**
95
- * <p>Disables the event data store specified by <code>EventDataStore</code>, which accepts an event data store ARN.
96
- * After you run <code>DeleteEventDataStore</code>, the event data store enters a <code>PENDING_DELETION</code> state, and is automatically deleted after a wait period of
97
- * seven days. <code>TerminationProtectionEnabled</code> must be set to <code>False</code> on the event data store; this
98
- * operation cannot work if <code>TerminationProtectionEnabled</code> is <code>True</code>.</p>
99
- * <p>After you run <code>DeleteEventDataStore</code> on an event data store, you cannot run <code>ListQueries</code>,
100
- * <code>DescribeQuery</code>, or <code>GetQueryResults</code> on queries that are using an event data store in a
101
- * <code>PENDING_DELETION</code> state. An event data store in the <code>PENDING_DELETION</code> state does not incur costs.</p>
111
+ * <p>Deletes a channel.</p>
112
+ */
113
+ deleteChannel(args: DeleteChannelCommandInput, options?: __HttpHandlerOptions): Promise<DeleteChannelCommandOutput>;
114
+ deleteChannel(args: DeleteChannelCommandInput, cb: (err: any, data?: DeleteChannelCommandOutput) => void): void;
115
+ deleteChannel(args: DeleteChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteChannelCommandOutput) => void): void;
116
+ /**
117
+ * <p>Disables the event data store specified by <code>EventDataStore</code>, which accepts an
118
+ * event data store ARN. After you run <code>DeleteEventDataStore</code>, the event data store
119
+ * enters a <code>PENDING_DELETION</code> state, and is automatically deleted after a wait
120
+ * period of seven days. <code>TerminationProtectionEnabled</code> must be set to
121
+ * <code>False</code> on the event data store; this operation cannot work if
122
+ * <code>TerminationProtectionEnabled</code> is <code>True</code>.</p>
123
+ * <p>After you run <code>DeleteEventDataStore</code> on an event data store, you cannot run
124
+ * <code>ListQueries</code>, <code>DescribeQuery</code>, or <code>GetQueryResults</code> on
125
+ * queries that are using an event data store in a <code>PENDING_DELETION</code> state. An
126
+ * event data store in the <code>PENDING_DELETION</code> state does not incur costs.</p>
102
127
  */
103
128
  deleteEventDataStore(args: DeleteEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<DeleteEventDataStoreCommandOutput>;
104
129
  deleteEventDataStore(args: DeleteEventDataStoreCommandInput, cb: (err: any, data?: DeleteEventDataStoreCommandOutput) => void): void;
105
130
  deleteEventDataStore(args: DeleteEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteEventDataStoreCommandOutput) => void): void;
131
+ /**
132
+ * <p>
133
+ * Deletes the resource-based policy attached to the CloudTrail channel.
134
+ * </p>
135
+ */
136
+ deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeleteResourcePolicyCommandOutput>;
137
+ deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
138
+ deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
106
139
  /**
107
140
  * <p>Deletes a trail. This operation must be called from the region in which the trail was
108
141
  * created. <code>DeleteTrail</code> cannot be called on the shadow trails (replicated trails
@@ -112,67 +145,68 @@ export declare class CloudTrail extends CloudTrailClient {
112
145
  deleteTrail(args: DeleteTrailCommandInput, cb: (err: any, data?: DeleteTrailCommandOutput) => void): void;
113
146
  deleteTrail(args: DeleteTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteTrailCommandOutput) => void): void;
114
147
  /**
115
- * <p>Removes CloudTrail delegated administrator permissions from a member account in an organization.</p>
148
+ * <p>Removes CloudTrail delegated administrator permissions from a member account in
149
+ * an organization.</p>
116
150
  */
117
151
  deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, options?: __HttpHandlerOptions): Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
118
152
  deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, cb: (err: any, data?: DeregisterOrganizationDelegatedAdminCommandOutput) => void): void;
119
153
  deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeregisterOrganizationDelegatedAdminCommandOutput) => void): void;
120
154
  /**
121
- * <p>Returns metadata about a query, including query run time in milliseconds, number of events scanned and matched, and query
122
- * status. You must specify an ARN for <code>EventDataStore</code>, and a value for <code>QueryID</code>.</p>
155
+ * <p>Returns metadata about a query, including query run time in milliseconds, number of
156
+ * events scanned and matched, and query status. You must specify an ARN for
157
+ * <code>EventDataStore</code>, and a value for <code>QueryID</code>.</p>
123
158
  */
124
159
  describeQuery(args: DescribeQueryCommandInput, options?: __HttpHandlerOptions): Promise<DescribeQueryCommandOutput>;
125
160
  describeQuery(args: DescribeQueryCommandInput, cb: (err: any, data?: DescribeQueryCommandOutput) => void): void;
126
161
  describeQuery(args: DescribeQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeQueryCommandOutput) => void): void;
127
162
  /**
128
- * <p>Retrieves settings for one or more trails associated with the current region for your account.</p>
163
+ * <p>Retrieves settings for one or more trails associated with the current region for your
164
+ * account.</p>
129
165
  */
130
166
  describeTrails(args: DescribeTrailsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeTrailsCommandOutput>;
131
167
  describeTrails(args: DescribeTrailsCommandInput, cb: (err: any, data?: DescribeTrailsCommandOutput) => void): void;
132
168
  describeTrails(args: DescribeTrailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeTrailsCommandOutput) => void): void;
133
169
  /**
134
- * <p>
135
- * Returns information about a specific channel. Amazon Web Services services create service-linked channels to get information about CloudTrail events on your behalf. For more information about
136
- * service-linked channels, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html">Viewing service-linked channels for CloudTrail by using the CLI</a>.
170
+ * <p> Returns information about a specific channel.
137
171
  * </p>
138
172
  */
139
173
  getChannel(args: GetChannelCommandInput, options?: __HttpHandlerOptions): Promise<GetChannelCommandOutput>;
140
174
  getChannel(args: GetChannelCommandInput, cb: (err: any, data?: GetChannelCommandOutput) => void): void;
141
175
  getChannel(args: GetChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetChannelCommandOutput) => void): void;
142
176
  /**
143
- * <p>Returns information about an event data store specified as either an ARN or the ID portion of the ARN.</p>
177
+ * <p>Returns information about an event data store specified as either an ARN or the ID
178
+ * portion of the ARN.</p>
144
179
  */
145
180
  getEventDataStore(args: GetEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<GetEventDataStoreCommandOutput>;
146
181
  getEventDataStore(args: GetEventDataStoreCommandInput, cb: (err: any, data?: GetEventDataStoreCommandOutput) => void): void;
147
182
  getEventDataStore(args: GetEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetEventDataStoreCommandOutput) => void): void;
148
183
  /**
149
- * <p>Describes the settings for the event selectors that you configured for your trail.
150
- * The information returned for your event selectors includes the following:</p>
184
+ * <p>Describes the settings for the event selectors that you configured for your trail. The
185
+ * information returned for your event selectors includes the following:</p>
151
186
  * <ul>
152
187
  * <li>
153
- * <p>If your event selector includes read-only events, write-only events, or
154
- * all events. This applies to both management events and data events.</p>
188
+ * <p>If your event selector includes read-only events, write-only events, or all
189
+ * events. This applies to both management events and data events.</p>
155
190
  * </li>
156
191
  * <li>
157
192
  * <p>If your event selector includes management events.</p>
158
193
  * </li>
159
194
  * <li>
160
- * <p>If your event selector includes data events, the resources on which you are logging data
161
- * events.</p>
195
+ * <p>If your event selector includes data events, the resources on which you are
196
+ * logging data events.</p>
162
197
  * </li>
163
198
  * </ul>
164
- * <p>For more information about logging management and data events, see the following topics in the <i>CloudTrail User Guide</i>:</p>
199
+ * <p>For more information about logging management and data events, see the following topics
200
+ * in the <i>CloudTrail User Guide</i>:</p>
165
201
  * <ul>
166
202
  * <li>
167
203
  * <p>
168
- * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails
169
- * </a>
204
+ * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails </a>
170
205
  * </p>
171
206
  * </li>
172
207
  * <li>
173
208
  * <p>
174
- * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails
175
- * </a>
209
+ * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails </a>
176
210
  * </p>
177
211
  * </li>
178
212
  * </ul>
@@ -181,32 +215,39 @@ export declare class CloudTrail extends CloudTrailClient {
181
215
  getEventSelectors(args: GetEventSelectorsCommandInput, cb: (err: any, data?: GetEventSelectorsCommandOutput) => void): void;
182
216
  getEventSelectors(args: GetEventSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetEventSelectorsCommandOutput) => void): void;
183
217
  /**
184
- * <p>
185
- * Returns information about a specific import.
186
- * </p>
218
+ * <p> Returns information about a specific import. </p>
187
219
  */
188
220
  getImport(args: GetImportCommandInput, options?: __HttpHandlerOptions): Promise<GetImportCommandOutput>;
189
221
  getImport(args: GetImportCommandInput, cb: (err: any, data?: GetImportCommandOutput) => void): void;
190
222
  getImport(args: GetImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetImportCommandOutput) => void): void;
191
223
  /**
192
- * <p>Describes the settings for the Insights event selectors that you configured for your trail. <code>GetInsightSelectors</code> shows
193
- * if CloudTrail Insights event logging is enabled on the trail, and if it is, which insight types are enabled.
194
- * If you run <code>GetInsightSelectors</code> on a trail that does not have Insights events enabled, the operation throws the exception
195
- * <code>InsightNotEnabledException</code>
224
+ * <p>Describes the settings for the Insights event selectors that you configured for your
225
+ * trail. <code>GetInsightSelectors</code> shows if CloudTrail Insights event logging
226
+ * is enabled on the trail, and if it is, which insight types are enabled. If you run
227
+ * <code>GetInsightSelectors</code> on a trail that does not have Insights events enabled,
228
+ * the operation throws the exception <code>InsightNotEnabledException</code>
196
229
  * </p>
197
- * <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights Events for Trails
198
- * </a> in the <i>CloudTrail User Guide</i>.</p>
230
+ * <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights Events for Trails </a> in the <i>CloudTrail User Guide</i>.</p>
199
231
  */
200
232
  getInsightSelectors(args: GetInsightSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<GetInsightSelectorsCommandOutput>;
201
233
  getInsightSelectors(args: GetInsightSelectorsCommandInput, cb: (err: any, data?: GetInsightSelectorsCommandOutput) => void): void;
202
234
  getInsightSelectors(args: GetInsightSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInsightSelectorsCommandOutput) => void): void;
203
235
  /**
204
- * <p>Gets event data results of a query. You must specify the <code>QueryID</code> value returned by the <code>StartQuery</code>
205
- * operation, and an ARN for <code>EventDataStore</code>.</p>
236
+ * <p>Gets event data results of a query. You must specify the <code>QueryID</code> value
237
+ * returned by the <code>StartQuery</code> operation, and an ARN for
238
+ * <code>EventDataStore</code>.</p>
206
239
  */
207
240
  getQueryResults(args: GetQueryResultsCommandInput, options?: __HttpHandlerOptions): Promise<GetQueryResultsCommandOutput>;
208
241
  getQueryResults(args: GetQueryResultsCommandInput, cb: (err: any, data?: GetQueryResultsCommandOutput) => void): void;
209
242
  getQueryResults(args: GetQueryResultsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetQueryResultsCommandOutput) => void): void;
243
+ /**
244
+ * <p>
245
+ * Retrieves the JSON text of the resource-based policy document attached to the CloudTrail channel.
246
+ * </p>
247
+ */
248
+ getResourcePolicy(args: GetResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<GetResourcePolicyCommandOutput>;
249
+ getResourcePolicy(args: GetResourcePolicyCommandInput, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
250
+ getResourcePolicy(args: GetResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
210
251
  /**
211
252
  * <p>Returns settings information for a specified trail.</p>
212
253
  */
@@ -214,65 +255,70 @@ export declare class CloudTrail extends CloudTrailClient {
214
255
  getTrail(args: GetTrailCommandInput, cb: (err: any, data?: GetTrailCommandOutput) => void): void;
215
256
  getTrail(args: GetTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTrailCommandOutput) => void): void;
216
257
  /**
217
- * <p>Returns a JSON-formatted list of information about the specified trail. Fields include information on delivery errors, Amazon SNS and Amazon S3 errors, and start and stop logging times for each trail. This operation returns trail status from a single region. To return trail status from all regions, you must call the operation on each region.</p>
258
+ * <p>Returns a JSON-formatted list of information about the specified trail. Fields include
259
+ * information on delivery errors, Amazon SNS and Amazon S3 errors, and start
260
+ * and stop logging times for each trail. This operation returns trail status from a single
261
+ * region. To return trail status from all regions, you must call the operation on each
262
+ * region.</p>
218
263
  */
219
264
  getTrailStatus(args: GetTrailStatusCommandInput, options?: __HttpHandlerOptions): Promise<GetTrailStatusCommandOutput>;
220
265
  getTrailStatus(args: GetTrailStatusCommandInput, cb: (err: any, data?: GetTrailStatusCommandOutput) => void): void;
221
266
  getTrailStatus(args: GetTrailStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTrailStatusCommandOutput) => void): void;
222
267
  /**
223
- * <p>
224
- * Lists the channels in the current account, and their source names. Amazon Web Services services create service-linked channels get information about CloudTrail events on your behalf. For more information about
225
- * service-linked channels, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html">Viewing service-linked channels for CloudTrail by using the CLI</a>.
268
+ * <p> Lists the channels in the current account, and their source names.
226
269
  * </p>
227
270
  */
228
271
  listChannels(args: ListChannelsCommandInput, options?: __HttpHandlerOptions): Promise<ListChannelsCommandOutput>;
229
272
  listChannels(args: ListChannelsCommandInput, cb: (err: any, data?: ListChannelsCommandOutput) => void): void;
230
273
  listChannels(args: ListChannelsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListChannelsCommandOutput) => void): void;
231
274
  /**
232
- * <p>Returns information about all event data stores in the account, in the current region.</p>
275
+ * <p>Returns information about all event data stores in the account, in the current
276
+ * region.</p>
233
277
  */
234
278
  listEventDataStores(args: ListEventDataStoresCommandInput, options?: __HttpHandlerOptions): Promise<ListEventDataStoresCommandOutput>;
235
279
  listEventDataStores(args: ListEventDataStoresCommandInput, cb: (err: any, data?: ListEventDataStoresCommandOutput) => void): void;
236
280
  listEventDataStores(args: ListEventDataStoresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListEventDataStoresCommandOutput) => void): void;
237
281
  /**
238
- * <p>
239
- * Returns a list of failures for the specified import.
240
- * </p>
282
+ * <p> Returns a list of failures for the specified import. </p>
241
283
  */
242
284
  listImportFailures(args: ListImportFailuresCommandInput, options?: __HttpHandlerOptions): Promise<ListImportFailuresCommandOutput>;
243
285
  listImportFailures(args: ListImportFailuresCommandInput, cb: (err: any, data?: ListImportFailuresCommandOutput) => void): void;
244
286
  listImportFailures(args: ListImportFailuresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListImportFailuresCommandOutput) => void): void;
245
287
  /**
246
- * <p>
247
- * Returns information on all imports, or a select set of imports by <code>ImportStatus</code> or <code>Destination</code>.
248
- * </p>
288
+ * <p> Returns information on all imports, or a select set of imports by
289
+ * <code>ImportStatus</code> or <code>Destination</code>. </p>
249
290
  */
250
291
  listImports(args: ListImportsCommandInput, options?: __HttpHandlerOptions): Promise<ListImportsCommandOutput>;
251
292
  listImports(args: ListImportsCommandInput, cb: (err: any, data?: ListImportsCommandOutput) => void): void;
252
293
  listImports(args: ListImportsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListImportsCommandOutput) => void): void;
253
294
  /**
254
- * <p>Returns all public keys whose private keys were used to sign the digest files within the specified time range. The public key is needed to validate digest files that were signed with its corresponding private key.</p>
295
+ * <p>Returns all public keys whose private keys were used to sign the digest files within the
296
+ * specified time range. The public key is needed to validate digest files that were signed
297
+ * with its corresponding private key.</p>
255
298
  * <note>
256
- * <p>CloudTrail uses different private and public key pairs per region. Each digest file is signed with a private key
257
- * unique to its region. When you validate a digest file from a specific region, you must look in the same region for its
258
- * corresponding public key.</p>
299
+ * <p>CloudTrail uses different private and public key pairs per region. Each digest
300
+ * file is signed with a private key unique to its region. When you validate a digest file
301
+ * from a specific region, you must look in the same region for its corresponding public
302
+ * key.</p>
259
303
  * </note>
260
304
  */
261
305
  listPublicKeys(args: ListPublicKeysCommandInput, options?: __HttpHandlerOptions): Promise<ListPublicKeysCommandOutput>;
262
306
  listPublicKeys(args: ListPublicKeysCommandInput, cb: (err: any, data?: ListPublicKeysCommandOutput) => void): void;
263
307
  listPublicKeys(args: ListPublicKeysCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPublicKeysCommandOutput) => void): void;
264
308
  /**
265
- * <p>Returns a list of queries and query statuses for the past seven days. You must specify an ARN value for
266
- * <code>EventDataStore</code>. Optionally, to shorten the list of results, you can specify a time range,
267
- * formatted as timestamps, by adding <code>StartTime</code> and <code>EndTime</code> parameters, and a
268
- * <code>QueryStatus</code> value. Valid values for <code>QueryStatus</code> include <code>QUEUED</code>, <code>RUNNING</code>,
269
- * <code>FINISHED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or <code>CANCELLED</code>.</p>
309
+ * <p>Returns a list of queries and query statuses for the past seven days. You must specify
310
+ * an ARN value for <code>EventDataStore</code>. Optionally, to shorten the list of results,
311
+ * you can specify a time range, formatted as timestamps, by adding <code>StartTime</code> and
312
+ * <code>EndTime</code> parameters, and a <code>QueryStatus</code> value. Valid values for
313
+ * <code>QueryStatus</code> include <code>QUEUED</code>, <code>RUNNING</code>,
314
+ * <code>FINISHED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or
315
+ * <code>CANCELLED</code>.</p>
270
316
  */
271
317
  listQueries(args: ListQueriesCommandInput, options?: __HttpHandlerOptions): Promise<ListQueriesCommandOutput>;
272
318
  listQueries(args: ListQueriesCommandInput, cb: (err: any, data?: ListQueriesCommandOutput) => void): void;
273
319
  listQueries(args: ListQueriesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListQueriesCommandOutput) => void): void;
274
320
  /**
275
- * <p>Lists the tags for the trail or event data store in the current region.</p>
321
+ * <p>Lists the tags for the trail, event data store, or channel in the current region.</p>
276
322
  */
277
323
  listTags(args: ListTagsCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsCommandOutput>;
278
324
  listTags(args: ListTagsCommandInput, cb: (err: any, data?: ListTagsCommandOutput) => void): void;
@@ -284,9 +330,9 @@ export declare class CloudTrail extends CloudTrailClient {
284
330
  listTrails(args: ListTrailsCommandInput, cb: (err: any, data?: ListTrailsCommandOutput) => void): void;
285
331
  listTrails(args: ListTrailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTrailsCommandOutput) => void): void;
286
332
  /**
287
- * <p>Looks up <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-management-events">management events</a> or
288
- * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-insights-events">CloudTrail Insights events</a> that are captured by CloudTrail.
289
- * You can look up events that occurred in a region within the last 90 days. Lookup supports the following attributes for management events:</p>
333
+ * <p>Looks up <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-management-events">management events</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-insights-events">CloudTrail Insights events</a> that are captured by CloudTrail.
334
+ * You can look up events that occurred in a region within the last 90 days. Lookup supports
335
+ * the following attributes for management events:</p>
290
336
  * <ul>
291
337
  * <li>
292
338
  * <p>Amazon Web Services access key</p>
@@ -329,162 +375,190 @@ export declare class CloudTrail extends CloudTrailClient {
329
375
  * maximum of 50 possible. The response includes a token that you can use to get the next page
330
376
  * of results.</p>
331
377
  * <important>
332
- * <p>The rate of lookup requests is limited to two per second, per account, per region. If this
333
- * limit is exceeded, a throttling error occurs.</p>
378
+ * <p>The rate of lookup requests is limited to two per second, per account, per region. If
379
+ * this limit is exceeded, a throttling error occurs.</p>
334
380
  * </important>
335
381
  */
336
382
  lookupEvents(args: LookupEventsCommandInput, options?: __HttpHandlerOptions): Promise<LookupEventsCommandOutput>;
337
383
  lookupEvents(args: LookupEventsCommandInput, cb: (err: any, data?: LookupEventsCommandOutput) => void): void;
338
384
  lookupEvents(args: LookupEventsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: LookupEventsCommandOutput) => void): void;
339
385
  /**
340
- * <p>Configures an event selector or advanced event selectors for your trail.
341
- * Use event selectors or advanced event selectors to specify management and data event settings for your trail. By
342
- * default, trails created without specific event selectors are configured to log all read and
343
- * write management events, and no data events.</p>
344
- * <p>When an event occurs in your account, CloudTrail
345
- * evaluates the event selectors or advanced event selectors in all trails. For each trail, if the event matches
346
- * any event selector, the trail processes and logs the event. If the event doesn't match any event
386
+ * <p>Configures an event selector or advanced event selectors for your trail. Use event
387
+ * selectors or advanced event selectors to specify management and data event settings for
388
+ * your trail. By default, trails created without specific event selectors are configured to
389
+ * log all read and write management events, and no data events.</p>
390
+ * <p>When an event occurs in your account, CloudTrail evaluates the event selectors or
391
+ * advanced event selectors in all trails. For each trail, if the event matches any event
392
+ * selector, the trail processes and logs the event. If the event doesn't match any event
347
393
  * selector, the trail doesn't log the event.</p>
348
394
  * <p>Example</p>
349
395
  * <ol>
350
396
  * <li>
351
- * <p>You create an event selector for a trail and specify that you want
352
- * write-only events.</p>
397
+ * <p>You create an event selector for a trail and specify that you want write-only
398
+ * events.</p>
353
399
  * </li>
354
400
  * <li>
355
- * <p>The EC2 <code>GetConsoleOutput</code> and <code>RunInstances</code> API
356
- * operations occur in your account.</p>
401
+ * <p>The EC2 <code>GetConsoleOutput</code> and <code>RunInstances</code> API operations
402
+ * occur in your account.</p>
357
403
  * </li>
358
404
  * <li>
359
- * <p>CloudTrail evaluates whether the events match your event
360
- * selectors.</p>
405
+ * <p>CloudTrail evaluates whether the events match your event selectors.</p>
361
406
  * </li>
362
407
  * <li>
363
- * <p>The <code>RunInstances</code> is a write-only event and it matches your
364
- * event selector. The trail logs the event.</p>
408
+ * <p>The <code>RunInstances</code> is a write-only event and it matches your event
409
+ * selector. The trail logs the event.</p>
365
410
  * </li>
366
411
  * <li>
367
- * <p>The <code>GetConsoleOutput</code> is a read-only event that doesn't
368
- * match your event selector. The trail doesn't log the event.
369
- * </p>
412
+ * <p>The <code>GetConsoleOutput</code> is a read-only event that doesn't match your
413
+ * event selector. The trail doesn't log the event. </p>
370
414
  * </li>
371
415
  * </ol>
372
- * <p>The <code>PutEventSelectors</code> operation must be called from the region in which
373
- * the trail was created; otherwise, an <code>InvalidHomeRegionException</code> exception is
416
+ * <p>The <code>PutEventSelectors</code> operation must be called from the region in which the
417
+ * trail was created; otherwise, an <code>InvalidHomeRegionException</code> exception is
374
418
  * thrown.</p>
375
- * <p>You can configure up to five event selectors for each trail. For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails
376
- * </a>, <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails
377
- * </a>, and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html">Quotas in CloudTrail</a>
378
- * in the <i>CloudTrail User Guide</i>.</p>
379
- * <p>You can add advanced event selectors, and conditions for your advanced
380
- * event selectors, up to a maximum of 500 values for all conditions and selectors on a trail.
381
- * You can use either <code>AdvancedEventSelectors</code> or <code>EventSelectors</code>, but not both. If you apply <code>AdvancedEventSelectors</code>
382
- * to a trail, any existing <code>EventSelectors</code> are overwritten. For more information about
383
- * advanced event selectors, see
384
- * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging
385
- * data events for trails</a> in the <i>CloudTrail User Guide</i>.</p>
419
+ * <p>You can configure up to five event selectors for each trail. For more information, see
420
+ * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails </a>, <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging
421
+ * data events for trails </a>, and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html">Quotas in CloudTrail</a> in the <i>CloudTrail User
422
+ * Guide</i>.</p>
423
+ * <p>You can add advanced event selectors, and conditions for your advanced event selectors,
424
+ * up to a maximum of 500 values for all conditions and selectors on a trail. You can use
425
+ * either <code>AdvancedEventSelectors</code> or <code>EventSelectors</code>, but not both. If
426
+ * you apply <code>AdvancedEventSelectors</code> to a trail, any existing
427
+ * <code>EventSelectors</code> are overwritten. For more information about advanced event
428
+ * selectors, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails</a> in the <i>CloudTrail User Guide</i>.</p>
386
429
  */
387
430
  putEventSelectors(args: PutEventSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<PutEventSelectorsCommandOutput>;
388
431
  putEventSelectors(args: PutEventSelectorsCommandInput, cb: (err: any, data?: PutEventSelectorsCommandOutput) => void): void;
389
432
  putEventSelectors(args: PutEventSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutEventSelectorsCommandOutput) => void): void;
390
433
  /**
391
- * <p>Lets you enable Insights event logging by specifying the Insights
392
- * selectors that you want to enable on an existing trail. You also use
393
- * <code>PutInsightSelectors</code> to turn off Insights event logging, by passing an empty list of insight types.
394
- * The valid Insights event types in this release are <code>ApiErrorRateInsight</code> and <code>ApiCallRateInsight</code>.</p>
434
+ * <p>Lets you enable Insights event logging by specifying the Insights selectors that you
435
+ * want to enable on an existing trail. You also use <code>PutInsightSelectors</code> to turn
436
+ * off Insights event logging, by passing an empty list of insight types. The valid Insights
437
+ * event types in this release are <code>ApiErrorRateInsight</code> and
438
+ * <code>ApiCallRateInsight</code>.</p>
395
439
  */
396
440
  putInsightSelectors(args: PutInsightSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<PutInsightSelectorsCommandOutput>;
397
441
  putInsightSelectors(args: PutInsightSelectorsCommandInput, cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void): void;
398
442
  putInsightSelectors(args: PutInsightSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void): void;
399
443
  /**
400
- * <p>Registers an organization’s member account as the CloudTrail delegated administrator.</p>
444
+ * <p>
445
+ * Attaches a resource-based permission policy to a CloudTrail channel that is used for an integration with an event source outside of Amazon Web Services. For more information about resource-based policies, see
446
+ * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html">CloudTrail resource-based policy examples</a>
447
+ * in the <i>CloudTrail User Guide</i>.
448
+ * </p>
449
+ */
450
+ putResourcePolicy(args: PutResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePolicyCommandOutput>;
451
+ putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
452
+ putResourcePolicy(args: PutResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
453
+ /**
454
+ * <p>Registers an organization’s member account as the CloudTrail delegated
455
+ * administrator.</p>
401
456
  */
402
457
  registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, options?: __HttpHandlerOptions): Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
403
458
  registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, cb: (err: any, data?: RegisterOrganizationDelegatedAdminCommandOutput) => void): void;
404
459
  registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterOrganizationDelegatedAdminCommandOutput) => void): void;
405
460
  /**
406
- * <p>Removes the specified tags from a trail or event data store.</p>
461
+ * <p>Removes the specified tags from a trail, event data store, or channel.</p>
407
462
  */
408
463
  removeTags(args: RemoveTagsCommandInput, options?: __HttpHandlerOptions): Promise<RemoveTagsCommandOutput>;
409
464
  removeTags(args: RemoveTagsCommandInput, cb: (err: any, data?: RemoveTagsCommandOutput) => void): void;
410
465
  removeTags(args: RemoveTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveTagsCommandOutput) => void): void;
411
466
  /**
412
- * <p>Restores a deleted event data store specified by <code>EventDataStore</code>, which accepts an event data store ARN.
413
- * You can only restore a deleted event data store within the seven-day wait period after deletion. Restoring an event data store
414
- * can take several minutes, depending on the size of the event data store.</p>
467
+ * <p>Restores a deleted event data store specified by <code>EventDataStore</code>, which
468
+ * accepts an event data store ARN. You can only restore a deleted event data store within the
469
+ * seven-day wait period after deletion. Restoring an event data store can take several
470
+ * minutes, depending on the size of the event data store.</p>
415
471
  */
416
472
  restoreEventDataStore(args: RestoreEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<RestoreEventDataStoreCommandOutput>;
417
473
  restoreEventDataStore(args: RestoreEventDataStoreCommandInput, cb: (err: any, data?: RestoreEventDataStoreCommandOutput) => void): void;
418
474
  restoreEventDataStore(args: RestoreEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RestoreEventDataStoreCommandOutput) => void): void;
419
475
  /**
420
- * <p>
421
- * Starts an import of logged trail events from a source S3 bucket to a destination event data store. By default, CloudTrail only imports events contained in the S3 bucket's <code>CloudTrail</code> prefix and the
422
- * prefixes inside the <code>CloudTrail</code> prefix, and does not check prefixes for other Amazon Web Services services. If you want to import CloudTrail events contained in another prefix, you must include the prefix
423
- * in the <code>S3LocationUri</code>. For more considerations about importing trail events, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.html#cloudtrail-trail-copy-considerations">Considerations</a>.
424
- * </p>
425
- * <p>
426
- * When you start a new import, the <code>Destinations</code> and
427
- * <code>ImportSource</code> parameters are required. Before starting a new import, disable any access control lists (ACLs) attached to the source S3 bucket.
428
- * For more information about disabling ACLs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html">Controlling ownership of objects and disabling ACLs for your bucket</a>.
429
- * </p>
430
- * <p>
431
- * When you retry an import, the <code>ImportID</code> parameter is required.
432
- * </p>
476
+ * <p> Starts an import of logged trail events from a source S3 bucket to a destination event
477
+ * data store. By default, CloudTrail only imports events contained in the S3 bucket's
478
+ * <code>CloudTrail</code> prefix and the prefixes inside the <code>CloudTrail</code> prefix, and does not check prefixes for other Amazon Web Services
479
+ * services. If you want to import CloudTrail events contained in another prefix, you
480
+ * must include the prefix in the <code>S3LocationUri</code>. For more considerations about
481
+ * importing trail events, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.html#cloudtrail-trail-copy-considerations">Considerations</a>. </p>
482
+ * <p> When you start a new import, the <code>Destinations</code> and
483
+ * <code>ImportSource</code> parameters are required. Before starting a new import, disable
484
+ * any access control lists (ACLs) attached to the source S3 bucket. For more information
485
+ * about disabling ACLs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html">Controlling ownership of
486
+ * objects and disabling ACLs for your bucket</a>. </p>
487
+ * <p> When you retry an import, the <code>ImportID</code> parameter is required. </p>
488
+ * <note>
489
+ * <p> If the destination event data store is for an organization, you must use the
490
+ * management account to import trail events. You cannot use the delegated administrator
491
+ * account for the organization. </p>
492
+ * </note>
433
493
  */
434
494
  startImport(args: StartImportCommandInput, options?: __HttpHandlerOptions): Promise<StartImportCommandOutput>;
435
495
  startImport(args: StartImportCommandInput, cb: (err: any, data?: StartImportCommandOutput) => void): void;
436
496
  startImport(args: StartImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartImportCommandOutput) => void): void;
437
497
  /**
438
- * <p>Starts the recording of Amazon Web Services API calls and log file delivery for a trail. For a trail that is enabled in all regions, this operation must be called from the region in which the trail was created. This operation cannot be called on the shadow trails (replicated trails in other regions) of a trail that is enabled in all regions.</p>
498
+ * <p>Starts the recording of Amazon Web Services API calls and log file delivery for a trail.
499
+ * For a trail that is enabled in all regions, this operation must be called from the region
500
+ * in which the trail was created. This operation cannot be called on the shadow trails
501
+ * (replicated trails in other regions) of a trail that is enabled in all regions.</p>
439
502
  */
440
503
  startLogging(args: StartLoggingCommandInput, options?: __HttpHandlerOptions): Promise<StartLoggingCommandOutput>;
441
504
  startLogging(args: StartLoggingCommandInput, cb: (err: any, data?: StartLoggingCommandOutput) => void): void;
442
505
  startLogging(args: StartLoggingCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartLoggingCommandOutput) => void): void;
443
506
  /**
444
507
  * <p>Starts a CloudTrail Lake query. The required <code>QueryStatement</code>
445
- * parameter provides your SQL query, enclosed in single quotation marks. Use the optional <code>DeliveryS3Uri</code> parameter to deliver the query results to an S3 bucket.</p>
508
+ * parameter provides your SQL query, enclosed in single quotation marks. Use the optional
509
+ * <code>DeliveryS3Uri</code> parameter to deliver the query results to an S3
510
+ * bucket.</p>
446
511
  */
447
512
  startQuery(args: StartQueryCommandInput, options?: __HttpHandlerOptions): Promise<StartQueryCommandOutput>;
448
513
  startQuery(args: StartQueryCommandInput, cb: (err: any, data?: StartQueryCommandOutput) => void): void;
449
514
  startQuery(args: StartQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartQueryCommandOutput) => void): void;
450
515
  /**
451
- * <p>
452
- * Stops a specified import.
453
- * </p>
516
+ * <p> Stops a specified import. </p>
454
517
  */
455
518
  stopImport(args: StopImportCommandInput, options?: __HttpHandlerOptions): Promise<StopImportCommandOutput>;
456
519
  stopImport(args: StopImportCommandInput, cb: (err: any, data?: StopImportCommandOutput) => void): void;
457
520
  stopImport(args: StopImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StopImportCommandOutput) => void): void;
458
521
  /**
459
- * <p>Suspends the recording of Amazon Web Services API calls and log file delivery for the specified trail.
460
- * Under most circumstances, there is no need to use this action. You can update a trail
461
- * without stopping it first. This action is the only way to stop recording. For a trail
462
- * enabled in all regions, this operation must be called from the region in which the trail
463
- * was created, or an <code>InvalidHomeRegionException</code> will occur. This operation
464
- * cannot be called on the shadow trails (replicated trails in other regions) of a trail
465
- * enabled in all regions.</p>
522
+ * <p>Suspends the recording of Amazon Web Services API calls and log file delivery for the
523
+ * specified trail. Under most circumstances, there is no need to use this action. You can
524
+ * update a trail without stopping it first. This action is the only way to stop recording.
525
+ * For a trail enabled in all regions, this operation must be called from the region in which
526
+ * the trail was created, or an <code>InvalidHomeRegionException</code> will occur. This
527
+ * operation cannot be called on the shadow trails (replicated trails in other regions) of a
528
+ * trail enabled in all regions.</p>
466
529
  */
467
530
  stopLogging(args: StopLoggingCommandInput, options?: __HttpHandlerOptions): Promise<StopLoggingCommandOutput>;
468
531
  stopLogging(args: StopLoggingCommandInput, cb: (err: any, data?: StopLoggingCommandOutput) => void): void;
469
532
  stopLogging(args: StopLoggingCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StopLoggingCommandOutput) => void): void;
470
533
  /**
471
- * <p>Updates an event data store. The required <code>EventDataStore</code> value is an ARN or the ID portion of the ARN.
472
- * Other parameters are optional, but at least one optional parameter must be specified, or CloudTrail throws an error.
473
- * <code>RetentionPeriod</code> is in days, and valid values are integers between 90 and 2557.
474
- * By default, <code>TerminationProtection</code> is enabled. <code>AdvancedEventSelectors</code> includes or excludes management
475
- * and data events in your event data store; for more information about <code>AdvancedEventSelectors</code>, see
476
- * <a>PutEventSelectorsRequest$AdvancedEventSelectors</a>.</p>
534
+ * <p>Updates a channel specified by a required channel ARN or UUID.</p>
535
+ */
536
+ updateChannel(args: UpdateChannelCommandInput, options?: __HttpHandlerOptions): Promise<UpdateChannelCommandOutput>;
537
+ updateChannel(args: UpdateChannelCommandInput, cb: (err: any, data?: UpdateChannelCommandOutput) => void): void;
538
+ updateChannel(args: UpdateChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateChannelCommandOutput) => void): void;
539
+ /**
540
+ * <p>Updates an event data store. The required <code>EventDataStore</code> value is an ARN or
541
+ * the ID portion of the ARN. Other parameters are optional, but at least one optional
542
+ * parameter must be specified, or CloudTrail throws an error.
543
+ * <code>RetentionPeriod</code> is in days, and valid values are integers between 90 and
544
+ * 2557. By default, <code>TerminationProtection</code> is enabled.</p>
545
+ * <p>For event data stores for CloudTrail events, <code>AdvancedEventSelectors</code>
546
+ * includes or excludes management and data events in your event data store. For more
547
+ * information about <code>AdvancedEventSelectors</code>, see <a>PutEventSelectorsRequest$AdvancedEventSelectors</a>. </p>
548
+ * <p> For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events,
549
+ * <code>AdvancedEventSelectors</code> includes events of that type in your event data
550
+ * store.</p>
477
551
  */
478
552
  updateEventDataStore(args: UpdateEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<UpdateEventDataStoreCommandOutput>;
479
553
  updateEventDataStore(args: UpdateEventDataStoreCommandInput, cb: (err: any, data?: UpdateEventDataStoreCommandOutput) => void): void;
480
554
  updateEventDataStore(args: UpdateEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateEventDataStoreCommandOutput) => void): void;
481
555
  /**
482
- * <p>Updates trail settings that control what events you are logging, and how to handle log files. Changes to a trail do not require
483
- * stopping the CloudTrail service. Use this action to designate an existing bucket for log
484
- * delivery. If the existing bucket has previously been a target for CloudTrail log files,
485
- * an IAM policy exists for the bucket. <code>UpdateTrail</code> must be called from the
486
- * region in which the trail was created; otherwise, an
487
- * <code>InvalidHomeRegionException</code> is thrown.</p>
556
+ * <p>Updates trail settings that control what events you are logging, and how to handle log
557
+ * files. Changes to a trail do not require stopping the CloudTrail service. Use this
558
+ * action to designate an existing bucket for log delivery. If the existing bucket has
559
+ * previously been a target for CloudTrail log files, an IAM policy
560
+ * exists for the bucket. <code>UpdateTrail</code> must be called from the region in which the
561
+ * trail was created; otherwise, an <code>InvalidHomeRegionException</code> is thrown.</p>
488
562
  */
489
563
  updateTrail(args: UpdateTrailCommandInput, options?: __HttpHandlerOptions): Promise<UpdateTrailCommandOutput>;
490
564
  updateTrail(args: UpdateTrailCommandInput, cb: (err: any, data?: UpdateTrailCommandOutput) => void): void;