@aws-sdk/client-cloudtrail 3.261.0 → 3.264.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +13 -12
- package/dist-cjs/CloudTrail.js +90 -0
- package/dist-cjs/commands/CreateChannelCommand.js +46 -0
- package/dist-cjs/commands/DeleteChannelCommand.js +46 -0
- package/dist-cjs/commands/DeleteResourcePolicyCommand.js +46 -0
- package/dist-cjs/commands/GetResourcePolicyCommand.js +46 -0
- package/dist-cjs/commands/PutResourcePolicyCommand.js +46 -0
- package/dist-cjs/commands/UpdateChannelCommand.js +46 -0
- package/dist-cjs/commands/index.js +6 -0
- package/dist-cjs/endpoint/ruleset.js +1 -1
- package/dist-cjs/models/models_0.js +181 -30
- package/dist-cjs/protocols/Aws_json1_1.js +602 -2
- package/dist-es/CloudTrail.js +90 -0
- package/dist-es/commands/CreateChannelCommand.js +42 -0
- package/dist-es/commands/DeleteChannelCommand.js +42 -0
- package/dist-es/commands/DeleteResourcePolicyCommand.js +42 -0
- package/dist-es/commands/GetResourcePolicyCommand.js +42 -0
- package/dist-es/commands/PutResourcePolicyCommand.js +42 -0
- package/dist-es/commands/UpdateChannelCommand.js +42 -0
- package/dist-es/commands/index.js +6 -0
- package/dist-es/endpoint/ruleset.js +1 -1
- package/dist-es/models/models_0.js +152 -22
- package/dist-es/protocols/Aws_json1_1.js +589 -1
- package/dist-types/CloudTrail.d.ts +238 -164
- package/dist-types/CloudTrailClient.d.ts +21 -14
- package/dist-types/commands/AddTagsCommand.d.ts +7 -9
- package/dist-types/commands/CancelQueryCommand.d.ts +6 -3
- package/dist-types/commands/CreateChannelCommand.d.ts +39 -0
- package/dist-types/commands/DeleteChannelCommand.d.ts +37 -0
- package/dist-types/commands/DeleteEventDataStoreCommand.d.ts +10 -7
- package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +39 -0
- package/dist-types/commands/DeregisterOrganizationDelegatedAdminCommand.d.ts +2 -1
- package/dist-types/commands/DescribeQueryCommand.d.ts +3 -2
- package/dist-types/commands/DescribeTrailsCommand.d.ts +2 -1
- package/dist-types/commands/GetChannelCommand.d.ts +1 -3
- package/dist-types/commands/GetEventDataStoreCommand.d.ts +2 -1
- package/dist-types/commands/GetEventSelectorsCommand.d.ts +10 -11
- package/dist-types/commands/GetImportCommand.d.ts +1 -3
- package/dist-types/commands/GetInsightSelectorsCommand.d.ts +6 -6
- package/dist-types/commands/GetQueryResultsCommand.d.ts +3 -2
- package/dist-types/commands/GetResourcePolicyCommand.d.ts +39 -0
- package/dist-types/commands/GetTrailStatusCommand.d.ts +5 -1
- package/dist-types/commands/ListChannelsCommand.d.ts +1 -3
- package/dist-types/commands/ListEventDataStoresCommand.d.ts +2 -1
- package/dist-types/commands/ListImportFailuresCommand.d.ts +1 -3
- package/dist-types/commands/ListImportsCommand.d.ts +2 -3
- package/dist-types/commands/ListPublicKeysCommand.d.ts +7 -4
- package/dist-types/commands/ListQueriesCommand.d.ts +7 -5
- package/dist-types/commands/ListTagsCommand.d.ts +1 -1
- package/dist-types/commands/LookupEventsCommand.d.ts +5 -5
- package/dist-types/commands/PutEventSelectorsCommand.d.ts +28 -31
- package/dist-types/commands/PutInsightSelectorsCommand.d.ts +5 -4
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +41 -0
- package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts +2 -1
- package/dist-types/commands/RemoveTagsCommand.d.ts +1 -1
- package/dist-types/commands/RestoreEventDataStoreCommand.d.ts +4 -3
- package/dist-types/commands/StartImportCommand.d.ts +17 -13
- package/dist-types/commands/StartLoggingCommand.d.ts +4 -1
- package/dist-types/commands/StartQueryCommand.d.ts +3 -1
- package/dist-types/commands/StopImportCommand.d.ts +1 -3
- package/dist-types/commands/StopLoggingCommand.d.ts +7 -7
- package/dist-types/commands/UpdateChannelCommand.d.ts +37 -0
- package/dist-types/commands/UpdateEventDataStoreCommand.d.ts +11 -6
- package/dist-types/commands/UpdateTrailCommand.d.ts +6 -6
- package/dist-types/commands/index.d.ts +6 -0
- package/dist-types/models/models_0.d.ts +1428 -835
- package/dist-types/protocols/Aws_json1_1.d.ts +18 -0
- package/dist-types/ts3.4/CloudTrail.d.ts +102 -0
- package/dist-types/ts3.4/CloudTrailClient.d.ts +36 -0
- package/dist-types/ts3.4/commands/CreateChannelCommand.d.ts +37 -0
- package/dist-types/ts3.4/commands/DeleteChannelCommand.d.ts +37 -0
- package/dist-types/ts3.4/commands/DeleteResourcePolicyCommand.d.ts +41 -0
- package/dist-types/ts3.4/commands/GetResourcePolicyCommand.d.ts +38 -0
- package/dist-types/ts3.4/commands/PutResourcePolicyCommand.d.ts +38 -0
- package/dist-types/ts3.4/commands/UpdateChannelCommand.d.ts +37 -0
- package/dist-types/ts3.4/commands/index.d.ts +6 -0
- package/dist-types/ts3.4/models/models_0.d.ts +181 -22
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +72 -0
- package/package.json +4 -4
|
@@ -2,9 +2,12 @@ import { HttpHandlerOptions as __HttpHandlerOptions } from "@aws-sdk/types";
|
|
|
2
2
|
import { CloudTrailClient } from "./CloudTrailClient";
|
|
3
3
|
import { AddTagsCommandInput, AddTagsCommandOutput } from "./commands/AddTagsCommand";
|
|
4
4
|
import { CancelQueryCommandInput, CancelQueryCommandOutput } from "./commands/CancelQueryCommand";
|
|
5
|
+
import { CreateChannelCommandInput, CreateChannelCommandOutput } from "./commands/CreateChannelCommand";
|
|
5
6
|
import { CreateEventDataStoreCommandInput, CreateEventDataStoreCommandOutput } from "./commands/CreateEventDataStoreCommand";
|
|
6
7
|
import { CreateTrailCommandInput, CreateTrailCommandOutput } from "./commands/CreateTrailCommand";
|
|
8
|
+
import { DeleteChannelCommandInput, DeleteChannelCommandOutput } from "./commands/DeleteChannelCommand";
|
|
7
9
|
import { DeleteEventDataStoreCommandInput, DeleteEventDataStoreCommandOutput } from "./commands/DeleteEventDataStoreCommand";
|
|
10
|
+
import { DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput } from "./commands/DeleteResourcePolicyCommand";
|
|
8
11
|
import { DeleteTrailCommandInput, DeleteTrailCommandOutput } from "./commands/DeleteTrailCommand";
|
|
9
12
|
import { DeregisterOrganizationDelegatedAdminCommandInput, DeregisterOrganizationDelegatedAdminCommandOutput } from "./commands/DeregisterOrganizationDelegatedAdminCommand";
|
|
10
13
|
import { DescribeQueryCommandInput, DescribeQueryCommandOutput } from "./commands/DescribeQueryCommand";
|
|
@@ -15,6 +18,7 @@ import { GetEventSelectorsCommandInput, GetEventSelectorsCommandOutput } from ".
|
|
|
15
18
|
import { GetImportCommandInput, GetImportCommandOutput } from "./commands/GetImportCommand";
|
|
16
19
|
import { GetInsightSelectorsCommandInput, GetInsightSelectorsCommandOutput } from "./commands/GetInsightSelectorsCommand";
|
|
17
20
|
import { GetQueryResultsCommandInput, GetQueryResultsCommandOutput } from "./commands/GetQueryResultsCommand";
|
|
21
|
+
import { GetResourcePolicyCommandInput, GetResourcePolicyCommandOutput } from "./commands/GetResourcePolicyCommand";
|
|
18
22
|
import { GetTrailCommandInput, GetTrailCommandOutput } from "./commands/GetTrailCommand";
|
|
19
23
|
import { GetTrailStatusCommandInput, GetTrailStatusCommandOutput } from "./commands/GetTrailStatusCommand";
|
|
20
24
|
import { ListChannelsCommandInput, ListChannelsCommandOutput } from "./commands/ListChannelsCommand";
|
|
@@ -28,6 +32,7 @@ import { ListTrailsCommandInput, ListTrailsCommandOutput } from "./commands/List
|
|
|
28
32
|
import { LookupEventsCommandInput, LookupEventsCommandOutput } from "./commands/LookupEventsCommand";
|
|
29
33
|
import { PutEventSelectorsCommandInput, PutEventSelectorsCommandOutput } from "./commands/PutEventSelectorsCommand";
|
|
30
34
|
import { PutInsightSelectorsCommandInput, PutInsightSelectorsCommandOutput } from "./commands/PutInsightSelectorsCommand";
|
|
35
|
+
import { PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput } from "./commands/PutResourcePolicyCommand";
|
|
31
36
|
import { RegisterOrganizationDelegatedAdminCommandInput, RegisterOrganizationDelegatedAdminCommandOutput } from "./commands/RegisterOrganizationDelegatedAdminCommand";
|
|
32
37
|
import { RemoveTagsCommandInput, RemoveTagsCommandOutput } from "./commands/RemoveTagsCommand";
|
|
33
38
|
import { RestoreEventDataStoreCommandInput, RestoreEventDataStoreCommandOutput } from "./commands/RestoreEventDataStoreCommand";
|
|
@@ -36,48 +41,59 @@ import { StartLoggingCommandInput, StartLoggingCommandOutput } from "./commands/
|
|
|
36
41
|
import { StartQueryCommandInput, StartQueryCommandOutput } from "./commands/StartQueryCommand";
|
|
37
42
|
import { StopImportCommandInput, StopImportCommandOutput } from "./commands/StopImportCommand";
|
|
38
43
|
import { StopLoggingCommandInput, StopLoggingCommandOutput } from "./commands/StopLoggingCommand";
|
|
44
|
+
import { UpdateChannelCommandInput, UpdateChannelCommandOutput } from "./commands/UpdateChannelCommand";
|
|
39
45
|
import { UpdateEventDataStoreCommandInput, UpdateEventDataStoreCommandOutput } from "./commands/UpdateEventDataStoreCommand";
|
|
40
46
|
import { UpdateTrailCommandInput, UpdateTrailCommandOutput } from "./commands/UpdateTrailCommand";
|
|
41
47
|
/**
|
|
42
48
|
* <fullname>CloudTrail</fullname>
|
|
43
|
-
* <p>This is the CloudTrail API Reference. It provides descriptions of actions, data
|
|
44
|
-
*
|
|
45
|
-
*
|
|
49
|
+
* <p>This is the CloudTrail API Reference. It provides descriptions of actions, data
|
|
50
|
+
* types, common parameters, and common errors for CloudTrail.</p>
|
|
51
|
+
* <p>CloudTrail is a web service that records Amazon Web Services API calls for your
|
|
52
|
+
* Amazon Web Services account and delivers log files to an Amazon S3 bucket. The
|
|
53
|
+
* recorded information includes the identity of the user, the start time of the Amazon Web Services API call, the source IP address, the request parameters, and the response
|
|
54
|
+
* elements returned by the service.</p>
|
|
46
55
|
* <note>
|
|
47
|
-
* <p>As an alternative to the API,
|
|
48
|
-
*
|
|
49
|
-
*
|
|
50
|
-
*
|
|
51
|
-
*
|
|
52
|
-
* automatically. For more information about the Amazon Web Services SDKs, including how to download and install
|
|
53
|
-
* them, see <a href="http://aws.amazon.com/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
56
|
+
* <p>As an alternative to the API, you can use one of the Amazon Web Services SDKs, which
|
|
57
|
+
* consist of libraries and sample code for various programming languages and platforms
|
|
58
|
+
* (Java, Ruby, .NET, iOS, Android, etc.). The SDKs provide programmatic access to CloudTrail. For example, the SDKs handle cryptographically signing requests,
|
|
59
|
+
* managing errors, and retrying requests automatically. For more information about the
|
|
60
|
+
* Amazon Web Services SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
54
61
|
* </note>
|
|
55
|
-
* <p>See the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html">CloudTrail
|
|
56
|
-
*
|
|
62
|
+
* <p>See the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html">CloudTrail
|
|
63
|
+
* User Guide</a> for information about the data that is included with each Amazon Web Services API call listed in the log files.</p>
|
|
57
64
|
*/
|
|
58
65
|
export declare class CloudTrail extends CloudTrailClient {
|
|
59
66
|
/**
|
|
60
|
-
* <p>Adds one or more tags to a trail
|
|
61
|
-
* existing tag's value when a new value is specified for an existing tag key.
|
|
62
|
-
*
|
|
63
|
-
*
|
|
64
|
-
*
|
|
65
|
-
*
|
|
66
|
-
*
|
|
67
|
-
* only from the Region in which the trail or event data store was created (also known as its
|
|
68
|
-
* home region).</p>
|
|
67
|
+
* <p>Adds one or more tags to a trail, event data store, or channel, up to a limit of 50. Overwrites an
|
|
68
|
+
* existing tag's value when a new value is specified for an existing tag key. Tag key names
|
|
69
|
+
* must be unique; you cannot have two keys with the same name but different
|
|
70
|
+
* values. If you specify a key without a value, the tag will be created with the specified
|
|
71
|
+
* key and a value of null. You can tag a trail or event data store that applies to all
|
|
72
|
+
* Amazon Web Services Regions only from the Region in which the trail or event data store
|
|
73
|
+
* was created (also known as its home region).</p>
|
|
69
74
|
*/
|
|
70
75
|
addTags(args: AddTagsCommandInput, options?: __HttpHandlerOptions): Promise<AddTagsCommandOutput>;
|
|
71
76
|
addTags(args: AddTagsCommandInput, cb: (err: any, data?: AddTagsCommandOutput) => void): void;
|
|
72
77
|
addTags(args: AddTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AddTagsCommandOutput) => void): void;
|
|
73
78
|
/**
|
|
74
|
-
* <p>Cancels a query if the query is not in a terminated state, such as
|
|
75
|
-
*
|
|
76
|
-
*
|
|
79
|
+
* <p>Cancels a query if the query is not in a terminated state, such as
|
|
80
|
+
* <code>CANCELLED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or
|
|
81
|
+
* <code>FINISHED</code>. You must specify an ARN value for <code>EventDataStore</code>.
|
|
82
|
+
* The ID of the query that you want to cancel is also required. When you run
|
|
83
|
+
* <code>CancelQuery</code>, the query status might show as <code>CANCELLED</code> even if
|
|
84
|
+
* the operation is not yet finished.</p>
|
|
77
85
|
*/
|
|
78
86
|
cancelQuery(args: CancelQueryCommandInput, options?: __HttpHandlerOptions): Promise<CancelQueryCommandOutput>;
|
|
79
87
|
cancelQuery(args: CancelQueryCommandInput, cb: (err: any, data?: CancelQueryCommandOutput) => void): void;
|
|
80
88
|
cancelQuery(args: CancelQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CancelQueryCommandOutput) => void): void;
|
|
89
|
+
/**
|
|
90
|
+
* <p>Creates a channel for CloudTrail to ingest events from a partner or external source.
|
|
91
|
+
* After you create a channel, a CloudTrail Lake event data store can log events
|
|
92
|
+
* from the partner or source that you specify.</p>
|
|
93
|
+
*/
|
|
94
|
+
createChannel(args: CreateChannelCommandInput, options?: __HttpHandlerOptions): Promise<CreateChannelCommandOutput>;
|
|
95
|
+
createChannel(args: CreateChannelCommandInput, cb: (err: any, data?: CreateChannelCommandOutput) => void): void;
|
|
96
|
+
createChannel(args: CreateChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateChannelCommandOutput) => void): void;
|
|
81
97
|
/**
|
|
82
98
|
* <p>Creates a new event data store.</p>
|
|
83
99
|
*/
|
|
@@ -92,17 +108,34 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
92
108
|
createTrail(args: CreateTrailCommandInput, cb: (err: any, data?: CreateTrailCommandOutput) => void): void;
|
|
93
109
|
createTrail(args: CreateTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateTrailCommandOutput) => void): void;
|
|
94
110
|
/**
|
|
95
|
-
* <p>
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
*
|
|
111
|
+
* <p>Deletes a channel.</p>
|
|
112
|
+
*/
|
|
113
|
+
deleteChannel(args: DeleteChannelCommandInput, options?: __HttpHandlerOptions): Promise<DeleteChannelCommandOutput>;
|
|
114
|
+
deleteChannel(args: DeleteChannelCommandInput, cb: (err: any, data?: DeleteChannelCommandOutput) => void): void;
|
|
115
|
+
deleteChannel(args: DeleteChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteChannelCommandOutput) => void): void;
|
|
116
|
+
/**
|
|
117
|
+
* <p>Disables the event data store specified by <code>EventDataStore</code>, which accepts an
|
|
118
|
+
* event data store ARN. After you run <code>DeleteEventDataStore</code>, the event data store
|
|
119
|
+
* enters a <code>PENDING_DELETION</code> state, and is automatically deleted after a wait
|
|
120
|
+
* period of seven days. <code>TerminationProtectionEnabled</code> must be set to
|
|
121
|
+
* <code>False</code> on the event data store; this operation cannot work if
|
|
122
|
+
* <code>TerminationProtectionEnabled</code> is <code>True</code>.</p>
|
|
123
|
+
* <p>After you run <code>DeleteEventDataStore</code> on an event data store, you cannot run
|
|
124
|
+
* <code>ListQueries</code>, <code>DescribeQuery</code>, or <code>GetQueryResults</code> on
|
|
125
|
+
* queries that are using an event data store in a <code>PENDING_DELETION</code> state. An
|
|
126
|
+
* event data store in the <code>PENDING_DELETION</code> state does not incur costs.</p>
|
|
102
127
|
*/
|
|
103
128
|
deleteEventDataStore(args: DeleteEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<DeleteEventDataStoreCommandOutput>;
|
|
104
129
|
deleteEventDataStore(args: DeleteEventDataStoreCommandInput, cb: (err: any, data?: DeleteEventDataStoreCommandOutput) => void): void;
|
|
105
130
|
deleteEventDataStore(args: DeleteEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteEventDataStoreCommandOutput) => void): void;
|
|
131
|
+
/**
|
|
132
|
+
* <p>
|
|
133
|
+
* Deletes the resource-based policy attached to the CloudTrail channel.
|
|
134
|
+
* </p>
|
|
135
|
+
*/
|
|
136
|
+
deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeleteResourcePolicyCommandOutput>;
|
|
137
|
+
deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
|
|
138
|
+
deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
|
|
106
139
|
/**
|
|
107
140
|
* <p>Deletes a trail. This operation must be called from the region in which the trail was
|
|
108
141
|
* created. <code>DeleteTrail</code> cannot be called on the shadow trails (replicated trails
|
|
@@ -112,67 +145,68 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
112
145
|
deleteTrail(args: DeleteTrailCommandInput, cb: (err: any, data?: DeleteTrailCommandOutput) => void): void;
|
|
113
146
|
deleteTrail(args: DeleteTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteTrailCommandOutput) => void): void;
|
|
114
147
|
/**
|
|
115
|
-
* <p>Removes CloudTrail delegated administrator permissions from a member account in
|
|
148
|
+
* <p>Removes CloudTrail delegated administrator permissions from a member account in
|
|
149
|
+
* an organization.</p>
|
|
116
150
|
*/
|
|
117
151
|
deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, options?: __HttpHandlerOptions): Promise<DeregisterOrganizationDelegatedAdminCommandOutput>;
|
|
118
152
|
deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, cb: (err: any, data?: DeregisterOrganizationDelegatedAdminCommandOutput) => void): void;
|
|
119
153
|
deregisterOrganizationDelegatedAdmin(args: DeregisterOrganizationDelegatedAdminCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeregisterOrganizationDelegatedAdminCommandOutput) => void): void;
|
|
120
154
|
/**
|
|
121
|
-
* <p>Returns metadata about a query, including query run time in milliseconds, number of
|
|
122
|
-
* status. You must specify an ARN for
|
|
155
|
+
* <p>Returns metadata about a query, including query run time in milliseconds, number of
|
|
156
|
+
* events scanned and matched, and query status. You must specify an ARN for
|
|
157
|
+
* <code>EventDataStore</code>, and a value for <code>QueryID</code>.</p>
|
|
123
158
|
*/
|
|
124
159
|
describeQuery(args: DescribeQueryCommandInput, options?: __HttpHandlerOptions): Promise<DescribeQueryCommandOutput>;
|
|
125
160
|
describeQuery(args: DescribeQueryCommandInput, cb: (err: any, data?: DescribeQueryCommandOutput) => void): void;
|
|
126
161
|
describeQuery(args: DescribeQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeQueryCommandOutput) => void): void;
|
|
127
162
|
/**
|
|
128
|
-
* <p>Retrieves settings for one or more trails associated with the current region for your
|
|
163
|
+
* <p>Retrieves settings for one or more trails associated with the current region for your
|
|
164
|
+
* account.</p>
|
|
129
165
|
*/
|
|
130
166
|
describeTrails(args: DescribeTrailsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeTrailsCommandOutput>;
|
|
131
167
|
describeTrails(args: DescribeTrailsCommandInput, cb: (err: any, data?: DescribeTrailsCommandOutput) => void): void;
|
|
132
168
|
describeTrails(args: DescribeTrailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeTrailsCommandOutput) => void): void;
|
|
133
169
|
/**
|
|
134
|
-
* <p>
|
|
135
|
-
* Returns information about a specific channel. Amazon Web Services services create service-linked channels to get information about CloudTrail events on your behalf. For more information about
|
|
136
|
-
* service-linked channels, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html">Viewing service-linked channels for CloudTrail by using the CLI</a>.
|
|
170
|
+
* <p> Returns information about a specific channel.
|
|
137
171
|
* </p>
|
|
138
172
|
*/
|
|
139
173
|
getChannel(args: GetChannelCommandInput, options?: __HttpHandlerOptions): Promise<GetChannelCommandOutput>;
|
|
140
174
|
getChannel(args: GetChannelCommandInput, cb: (err: any, data?: GetChannelCommandOutput) => void): void;
|
|
141
175
|
getChannel(args: GetChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetChannelCommandOutput) => void): void;
|
|
142
176
|
/**
|
|
143
|
-
* <p>Returns information about an event data store specified as either an ARN or the ID
|
|
177
|
+
* <p>Returns information about an event data store specified as either an ARN or the ID
|
|
178
|
+
* portion of the ARN.</p>
|
|
144
179
|
*/
|
|
145
180
|
getEventDataStore(args: GetEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<GetEventDataStoreCommandOutput>;
|
|
146
181
|
getEventDataStore(args: GetEventDataStoreCommandInput, cb: (err: any, data?: GetEventDataStoreCommandOutput) => void): void;
|
|
147
182
|
getEventDataStore(args: GetEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetEventDataStoreCommandOutput) => void): void;
|
|
148
183
|
/**
|
|
149
|
-
* <p>Describes the settings for the event selectors that you configured for your trail.
|
|
150
|
-
*
|
|
184
|
+
* <p>Describes the settings for the event selectors that you configured for your trail. The
|
|
185
|
+
* information returned for your event selectors includes the following:</p>
|
|
151
186
|
* <ul>
|
|
152
187
|
* <li>
|
|
153
|
-
* <p>If your event selector includes read-only events, write-only events, or
|
|
154
|
-
*
|
|
188
|
+
* <p>If your event selector includes read-only events, write-only events, or all
|
|
189
|
+
* events. This applies to both management events and data events.</p>
|
|
155
190
|
* </li>
|
|
156
191
|
* <li>
|
|
157
192
|
* <p>If your event selector includes management events.</p>
|
|
158
193
|
* </li>
|
|
159
194
|
* <li>
|
|
160
|
-
* <p>If your event selector includes data events, the resources on which you are
|
|
161
|
-
* events.</p>
|
|
195
|
+
* <p>If your event selector includes data events, the resources on which you are
|
|
196
|
+
* logging data events.</p>
|
|
162
197
|
* </li>
|
|
163
198
|
* </ul>
|
|
164
|
-
* <p>For more information about logging management and data events, see the following topics
|
|
199
|
+
* <p>For more information about logging management and data events, see the following topics
|
|
200
|
+
* in the <i>CloudTrail User Guide</i>:</p>
|
|
165
201
|
* <ul>
|
|
166
202
|
* <li>
|
|
167
203
|
* <p>
|
|
168
|
-
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails
|
|
169
|
-
* </a>
|
|
204
|
+
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails </a>
|
|
170
205
|
* </p>
|
|
171
206
|
* </li>
|
|
172
207
|
* <li>
|
|
173
208
|
* <p>
|
|
174
|
-
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails
|
|
175
|
-
* </a>
|
|
209
|
+
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails </a>
|
|
176
210
|
* </p>
|
|
177
211
|
* </li>
|
|
178
212
|
* </ul>
|
|
@@ -181,32 +215,39 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
181
215
|
getEventSelectors(args: GetEventSelectorsCommandInput, cb: (err: any, data?: GetEventSelectorsCommandOutput) => void): void;
|
|
182
216
|
getEventSelectors(args: GetEventSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetEventSelectorsCommandOutput) => void): void;
|
|
183
217
|
/**
|
|
184
|
-
* <p>
|
|
185
|
-
* Returns information about a specific import.
|
|
186
|
-
* </p>
|
|
218
|
+
* <p> Returns information about a specific import. </p>
|
|
187
219
|
*/
|
|
188
220
|
getImport(args: GetImportCommandInput, options?: __HttpHandlerOptions): Promise<GetImportCommandOutput>;
|
|
189
221
|
getImport(args: GetImportCommandInput, cb: (err: any, data?: GetImportCommandOutput) => void): void;
|
|
190
222
|
getImport(args: GetImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetImportCommandOutput) => void): void;
|
|
191
223
|
/**
|
|
192
|
-
* <p>Describes the settings for the Insights event selectors that you configured for your
|
|
193
|
-
* if CloudTrail Insights event logging
|
|
194
|
-
*
|
|
195
|
-
*
|
|
224
|
+
* <p>Describes the settings for the Insights event selectors that you configured for your
|
|
225
|
+
* trail. <code>GetInsightSelectors</code> shows if CloudTrail Insights event logging
|
|
226
|
+
* is enabled on the trail, and if it is, which insight types are enabled. If you run
|
|
227
|
+
* <code>GetInsightSelectors</code> on a trail that does not have Insights events enabled,
|
|
228
|
+
* the operation throws the exception <code>InsightNotEnabledException</code>
|
|
196
229
|
* </p>
|
|
197
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights Events for Trails
|
|
198
|
-
* </a> in the <i>CloudTrail User Guide</i>.</p>
|
|
230
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights Events for Trails </a> in the <i>CloudTrail User Guide</i>.</p>
|
|
199
231
|
*/
|
|
200
232
|
getInsightSelectors(args: GetInsightSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<GetInsightSelectorsCommandOutput>;
|
|
201
233
|
getInsightSelectors(args: GetInsightSelectorsCommandInput, cb: (err: any, data?: GetInsightSelectorsCommandOutput) => void): void;
|
|
202
234
|
getInsightSelectors(args: GetInsightSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInsightSelectorsCommandOutput) => void): void;
|
|
203
235
|
/**
|
|
204
|
-
* <p>Gets event data results of a query. You must specify the <code>QueryID</code> value
|
|
205
|
-
* operation, and an ARN for
|
|
236
|
+
* <p>Gets event data results of a query. You must specify the <code>QueryID</code> value
|
|
237
|
+
* returned by the <code>StartQuery</code> operation, and an ARN for
|
|
238
|
+
* <code>EventDataStore</code>.</p>
|
|
206
239
|
*/
|
|
207
240
|
getQueryResults(args: GetQueryResultsCommandInput, options?: __HttpHandlerOptions): Promise<GetQueryResultsCommandOutput>;
|
|
208
241
|
getQueryResults(args: GetQueryResultsCommandInput, cb: (err: any, data?: GetQueryResultsCommandOutput) => void): void;
|
|
209
242
|
getQueryResults(args: GetQueryResultsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetQueryResultsCommandOutput) => void): void;
|
|
243
|
+
/**
|
|
244
|
+
* <p>
|
|
245
|
+
* Retrieves the JSON text of the resource-based policy document attached to the CloudTrail channel.
|
|
246
|
+
* </p>
|
|
247
|
+
*/
|
|
248
|
+
getResourcePolicy(args: GetResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<GetResourcePolicyCommandOutput>;
|
|
249
|
+
getResourcePolicy(args: GetResourcePolicyCommandInput, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
|
|
250
|
+
getResourcePolicy(args: GetResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
|
|
210
251
|
/**
|
|
211
252
|
* <p>Returns settings information for a specified trail.</p>
|
|
212
253
|
*/
|
|
@@ -214,65 +255,70 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
214
255
|
getTrail(args: GetTrailCommandInput, cb: (err: any, data?: GetTrailCommandOutput) => void): void;
|
|
215
256
|
getTrail(args: GetTrailCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTrailCommandOutput) => void): void;
|
|
216
257
|
/**
|
|
217
|
-
* <p>Returns a JSON-formatted list of information about the specified trail. Fields include
|
|
258
|
+
* <p>Returns a JSON-formatted list of information about the specified trail. Fields include
|
|
259
|
+
* information on delivery errors, Amazon SNS and Amazon S3 errors, and start
|
|
260
|
+
* and stop logging times for each trail. This operation returns trail status from a single
|
|
261
|
+
* region. To return trail status from all regions, you must call the operation on each
|
|
262
|
+
* region.</p>
|
|
218
263
|
*/
|
|
219
264
|
getTrailStatus(args: GetTrailStatusCommandInput, options?: __HttpHandlerOptions): Promise<GetTrailStatusCommandOutput>;
|
|
220
265
|
getTrailStatus(args: GetTrailStatusCommandInput, cb: (err: any, data?: GetTrailStatusCommandOutput) => void): void;
|
|
221
266
|
getTrailStatus(args: GetTrailStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetTrailStatusCommandOutput) => void): void;
|
|
222
267
|
/**
|
|
223
|
-
* <p>
|
|
224
|
-
* Lists the channels in the current account, and their source names. Amazon Web Services services create service-linked channels get information about CloudTrail events on your behalf. For more information about
|
|
225
|
-
* service-linked channels, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/viewing-service-linked-channels.html">Viewing service-linked channels for CloudTrail by using the CLI</a>.
|
|
268
|
+
* <p> Lists the channels in the current account, and their source names.
|
|
226
269
|
* </p>
|
|
227
270
|
*/
|
|
228
271
|
listChannels(args: ListChannelsCommandInput, options?: __HttpHandlerOptions): Promise<ListChannelsCommandOutput>;
|
|
229
272
|
listChannels(args: ListChannelsCommandInput, cb: (err: any, data?: ListChannelsCommandOutput) => void): void;
|
|
230
273
|
listChannels(args: ListChannelsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListChannelsCommandOutput) => void): void;
|
|
231
274
|
/**
|
|
232
|
-
* <p>Returns information about all event data stores in the account, in the current
|
|
275
|
+
* <p>Returns information about all event data stores in the account, in the current
|
|
276
|
+
* region.</p>
|
|
233
277
|
*/
|
|
234
278
|
listEventDataStores(args: ListEventDataStoresCommandInput, options?: __HttpHandlerOptions): Promise<ListEventDataStoresCommandOutput>;
|
|
235
279
|
listEventDataStores(args: ListEventDataStoresCommandInput, cb: (err: any, data?: ListEventDataStoresCommandOutput) => void): void;
|
|
236
280
|
listEventDataStores(args: ListEventDataStoresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListEventDataStoresCommandOutput) => void): void;
|
|
237
281
|
/**
|
|
238
|
-
* <p>
|
|
239
|
-
* Returns a list of failures for the specified import.
|
|
240
|
-
* </p>
|
|
282
|
+
* <p> Returns a list of failures for the specified import. </p>
|
|
241
283
|
*/
|
|
242
284
|
listImportFailures(args: ListImportFailuresCommandInput, options?: __HttpHandlerOptions): Promise<ListImportFailuresCommandOutput>;
|
|
243
285
|
listImportFailures(args: ListImportFailuresCommandInput, cb: (err: any, data?: ListImportFailuresCommandOutput) => void): void;
|
|
244
286
|
listImportFailures(args: ListImportFailuresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListImportFailuresCommandOutput) => void): void;
|
|
245
287
|
/**
|
|
246
|
-
* <p>
|
|
247
|
-
*
|
|
248
|
-
* </p>
|
|
288
|
+
* <p> Returns information on all imports, or a select set of imports by
|
|
289
|
+
* <code>ImportStatus</code> or <code>Destination</code>. </p>
|
|
249
290
|
*/
|
|
250
291
|
listImports(args: ListImportsCommandInput, options?: __HttpHandlerOptions): Promise<ListImportsCommandOutput>;
|
|
251
292
|
listImports(args: ListImportsCommandInput, cb: (err: any, data?: ListImportsCommandOutput) => void): void;
|
|
252
293
|
listImports(args: ListImportsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListImportsCommandOutput) => void): void;
|
|
253
294
|
/**
|
|
254
|
-
* <p>Returns all public keys whose private keys were used to sign the digest files within the
|
|
295
|
+
* <p>Returns all public keys whose private keys were used to sign the digest files within the
|
|
296
|
+
* specified time range. The public key is needed to validate digest files that were signed
|
|
297
|
+
* with its corresponding private key.</p>
|
|
255
298
|
* <note>
|
|
256
|
-
* <p>CloudTrail uses different private and public key pairs per region. Each digest
|
|
257
|
-
* unique to its region. When you validate a digest file
|
|
258
|
-
* corresponding public
|
|
299
|
+
* <p>CloudTrail uses different private and public key pairs per region. Each digest
|
|
300
|
+
* file is signed with a private key unique to its region. When you validate a digest file
|
|
301
|
+
* from a specific region, you must look in the same region for its corresponding public
|
|
302
|
+
* key.</p>
|
|
259
303
|
* </note>
|
|
260
304
|
*/
|
|
261
305
|
listPublicKeys(args: ListPublicKeysCommandInput, options?: __HttpHandlerOptions): Promise<ListPublicKeysCommandOutput>;
|
|
262
306
|
listPublicKeys(args: ListPublicKeysCommandInput, cb: (err: any, data?: ListPublicKeysCommandOutput) => void): void;
|
|
263
307
|
listPublicKeys(args: ListPublicKeysCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPublicKeysCommandOutput) => void): void;
|
|
264
308
|
/**
|
|
265
|
-
* <p>Returns a list of queries and query statuses for the past seven days. You must specify
|
|
266
|
-
* <code>EventDataStore</code>. Optionally, to shorten the list of results,
|
|
267
|
-
* formatted as timestamps, by adding <code>StartTime</code> and
|
|
268
|
-
*
|
|
269
|
-
*
|
|
309
|
+
* <p>Returns a list of queries and query statuses for the past seven days. You must specify
|
|
310
|
+
* an ARN value for <code>EventDataStore</code>. Optionally, to shorten the list of results,
|
|
311
|
+
* you can specify a time range, formatted as timestamps, by adding <code>StartTime</code> and
|
|
312
|
+
* <code>EndTime</code> parameters, and a <code>QueryStatus</code> value. Valid values for
|
|
313
|
+
* <code>QueryStatus</code> include <code>QUEUED</code>, <code>RUNNING</code>,
|
|
314
|
+
* <code>FINISHED</code>, <code>FAILED</code>, <code>TIMED_OUT</code>, or
|
|
315
|
+
* <code>CANCELLED</code>.</p>
|
|
270
316
|
*/
|
|
271
317
|
listQueries(args: ListQueriesCommandInput, options?: __HttpHandlerOptions): Promise<ListQueriesCommandOutput>;
|
|
272
318
|
listQueries(args: ListQueriesCommandInput, cb: (err: any, data?: ListQueriesCommandOutput) => void): void;
|
|
273
319
|
listQueries(args: ListQueriesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListQueriesCommandOutput) => void): void;
|
|
274
320
|
/**
|
|
275
|
-
* <p>Lists the tags for the trail
|
|
321
|
+
* <p>Lists the tags for the trail, event data store, or channel in the current region.</p>
|
|
276
322
|
*/
|
|
277
323
|
listTags(args: ListTagsCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsCommandOutput>;
|
|
278
324
|
listTags(args: ListTagsCommandInput, cb: (err: any, data?: ListTagsCommandOutput) => void): void;
|
|
@@ -284,9 +330,9 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
284
330
|
listTrails(args: ListTrailsCommandInput, cb: (err: any, data?: ListTrailsCommandOutput) => void): void;
|
|
285
331
|
listTrails(args: ListTrailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTrailsCommandOutput) => void): void;
|
|
286
332
|
/**
|
|
287
|
-
* <p>Looks up <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-management-events">management events</a> or
|
|
288
|
-
*
|
|
289
|
-
*
|
|
333
|
+
* <p>Looks up <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-management-events">management events</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-insights-events">CloudTrail Insights events</a> that are captured by CloudTrail.
|
|
334
|
+
* You can look up events that occurred in a region within the last 90 days. Lookup supports
|
|
335
|
+
* the following attributes for management events:</p>
|
|
290
336
|
* <ul>
|
|
291
337
|
* <li>
|
|
292
338
|
* <p>Amazon Web Services access key</p>
|
|
@@ -329,162 +375,190 @@ export declare class CloudTrail extends CloudTrailClient {
|
|
|
329
375
|
* maximum of 50 possible. The response includes a token that you can use to get the next page
|
|
330
376
|
* of results.</p>
|
|
331
377
|
* <important>
|
|
332
|
-
* <p>The rate of lookup requests is limited to two per second, per account, per region. If
|
|
333
|
-
* limit is exceeded, a throttling error occurs.</p>
|
|
378
|
+
* <p>The rate of lookup requests is limited to two per second, per account, per region. If
|
|
379
|
+
* this limit is exceeded, a throttling error occurs.</p>
|
|
334
380
|
* </important>
|
|
335
381
|
*/
|
|
336
382
|
lookupEvents(args: LookupEventsCommandInput, options?: __HttpHandlerOptions): Promise<LookupEventsCommandOutput>;
|
|
337
383
|
lookupEvents(args: LookupEventsCommandInput, cb: (err: any, data?: LookupEventsCommandOutput) => void): void;
|
|
338
384
|
lookupEvents(args: LookupEventsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: LookupEventsCommandOutput) => void): void;
|
|
339
385
|
/**
|
|
340
|
-
* <p>Configures an event selector or advanced event selectors for your trail.
|
|
341
|
-
*
|
|
342
|
-
* default, trails created without specific event selectors are configured to
|
|
343
|
-
* write management events, and no data events.</p>
|
|
344
|
-
* <p>When an event occurs in your account, CloudTrail
|
|
345
|
-
*
|
|
346
|
-
*
|
|
386
|
+
* <p>Configures an event selector or advanced event selectors for your trail. Use event
|
|
387
|
+
* selectors or advanced event selectors to specify management and data event settings for
|
|
388
|
+
* your trail. By default, trails created without specific event selectors are configured to
|
|
389
|
+
* log all read and write management events, and no data events.</p>
|
|
390
|
+
* <p>When an event occurs in your account, CloudTrail evaluates the event selectors or
|
|
391
|
+
* advanced event selectors in all trails. For each trail, if the event matches any event
|
|
392
|
+
* selector, the trail processes and logs the event. If the event doesn't match any event
|
|
347
393
|
* selector, the trail doesn't log the event.</p>
|
|
348
394
|
* <p>Example</p>
|
|
349
395
|
* <ol>
|
|
350
396
|
* <li>
|
|
351
|
-
* <p>You create an event selector for a trail and specify that you want
|
|
352
|
-
*
|
|
397
|
+
* <p>You create an event selector for a trail and specify that you want write-only
|
|
398
|
+
* events.</p>
|
|
353
399
|
* </li>
|
|
354
400
|
* <li>
|
|
355
|
-
* <p>The EC2 <code>GetConsoleOutput</code> and <code>RunInstances</code> API
|
|
356
|
-
*
|
|
401
|
+
* <p>The EC2 <code>GetConsoleOutput</code> and <code>RunInstances</code> API operations
|
|
402
|
+
* occur in your account.</p>
|
|
357
403
|
* </li>
|
|
358
404
|
* <li>
|
|
359
|
-
* <p>CloudTrail evaluates whether the events match your event
|
|
360
|
-
* selectors.</p>
|
|
405
|
+
* <p>CloudTrail evaluates whether the events match your event selectors.</p>
|
|
361
406
|
* </li>
|
|
362
407
|
* <li>
|
|
363
|
-
* <p>The <code>RunInstances</code> is a write-only event and it matches your
|
|
364
|
-
*
|
|
408
|
+
* <p>The <code>RunInstances</code> is a write-only event and it matches your event
|
|
409
|
+
* selector. The trail logs the event.</p>
|
|
365
410
|
* </li>
|
|
366
411
|
* <li>
|
|
367
|
-
* <p>The <code>GetConsoleOutput</code> is a read-only event that doesn't
|
|
368
|
-
*
|
|
369
|
-
* </p>
|
|
412
|
+
* <p>The <code>GetConsoleOutput</code> is a read-only event that doesn't match your
|
|
413
|
+
* event selector. The trail doesn't log the event. </p>
|
|
370
414
|
* </li>
|
|
371
415
|
* </ol>
|
|
372
|
-
* <p>The <code>PutEventSelectors</code> operation must be called from the region in which
|
|
373
|
-
*
|
|
416
|
+
* <p>The <code>PutEventSelectors</code> operation must be called from the region in which the
|
|
417
|
+
* trail was created; otherwise, an <code>InvalidHomeRegionException</code> exception is
|
|
374
418
|
* thrown.</p>
|
|
375
|
-
* <p>You can configure up to five event selectors for each trail. For more information, see
|
|
376
|
-
*
|
|
377
|
-
*
|
|
378
|
-
*
|
|
379
|
-
* <p>You can add advanced event selectors, and conditions for your advanced
|
|
380
|
-
*
|
|
381
|
-
*
|
|
382
|
-
*
|
|
383
|
-
*
|
|
384
|
-
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging
|
|
385
|
-
* data events for trails</a> in the <i>CloudTrail User Guide</i>.</p>
|
|
419
|
+
* <p>You can configure up to five event selectors for each trail. For more information, see
|
|
420
|
+
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html">Logging management events for trails </a>, <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging
|
|
421
|
+
* data events for trails </a>, and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html">Quotas in CloudTrail</a> in the <i>CloudTrail User
|
|
422
|
+
* Guide</i>.</p>
|
|
423
|
+
* <p>You can add advanced event selectors, and conditions for your advanced event selectors,
|
|
424
|
+
* up to a maximum of 500 values for all conditions and selectors on a trail. You can use
|
|
425
|
+
* either <code>AdvancedEventSelectors</code> or <code>EventSelectors</code>, but not both. If
|
|
426
|
+
* you apply <code>AdvancedEventSelectors</code> to a trail, any existing
|
|
427
|
+
* <code>EventSelectors</code> are overwritten. For more information about advanced event
|
|
428
|
+
* selectors, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events for trails</a> in the <i>CloudTrail User Guide</i>.</p>
|
|
386
429
|
*/
|
|
387
430
|
putEventSelectors(args: PutEventSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<PutEventSelectorsCommandOutput>;
|
|
388
431
|
putEventSelectors(args: PutEventSelectorsCommandInput, cb: (err: any, data?: PutEventSelectorsCommandOutput) => void): void;
|
|
389
432
|
putEventSelectors(args: PutEventSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutEventSelectorsCommandOutput) => void): void;
|
|
390
433
|
/**
|
|
391
|
-
* <p>Lets you enable Insights event logging by specifying the Insights
|
|
392
|
-
*
|
|
393
|
-
*
|
|
394
|
-
*
|
|
434
|
+
* <p>Lets you enable Insights event logging by specifying the Insights selectors that you
|
|
435
|
+
* want to enable on an existing trail. You also use <code>PutInsightSelectors</code> to turn
|
|
436
|
+
* off Insights event logging, by passing an empty list of insight types. The valid Insights
|
|
437
|
+
* event types in this release are <code>ApiErrorRateInsight</code> and
|
|
438
|
+
* <code>ApiCallRateInsight</code>.</p>
|
|
395
439
|
*/
|
|
396
440
|
putInsightSelectors(args: PutInsightSelectorsCommandInput, options?: __HttpHandlerOptions): Promise<PutInsightSelectorsCommandOutput>;
|
|
397
441
|
putInsightSelectors(args: PutInsightSelectorsCommandInput, cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void): void;
|
|
398
442
|
putInsightSelectors(args: PutInsightSelectorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInsightSelectorsCommandOutput) => void): void;
|
|
399
443
|
/**
|
|
400
|
-
* <p>
|
|
444
|
+
* <p>
|
|
445
|
+
* Attaches a resource-based permission policy to a CloudTrail channel that is used for an integration with an event source outside of Amazon Web Services. For more information about resource-based policies, see
|
|
446
|
+
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html">CloudTrail resource-based policy examples</a>
|
|
447
|
+
* in the <i>CloudTrail User Guide</i>.
|
|
448
|
+
* </p>
|
|
449
|
+
*/
|
|
450
|
+
putResourcePolicy(args: PutResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePolicyCommandOutput>;
|
|
451
|
+
putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
|
|
452
|
+
putResourcePolicy(args: PutResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
|
|
453
|
+
/**
|
|
454
|
+
* <p>Registers an organization’s member account as the CloudTrail delegated
|
|
455
|
+
* administrator.</p>
|
|
401
456
|
*/
|
|
402
457
|
registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, options?: __HttpHandlerOptions): Promise<RegisterOrganizationDelegatedAdminCommandOutput>;
|
|
403
458
|
registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, cb: (err: any, data?: RegisterOrganizationDelegatedAdminCommandOutput) => void): void;
|
|
404
459
|
registerOrganizationDelegatedAdmin(args: RegisterOrganizationDelegatedAdminCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterOrganizationDelegatedAdminCommandOutput) => void): void;
|
|
405
460
|
/**
|
|
406
|
-
* <p>Removes the specified tags from a trail
|
|
461
|
+
* <p>Removes the specified tags from a trail, event data store, or channel.</p>
|
|
407
462
|
*/
|
|
408
463
|
removeTags(args: RemoveTagsCommandInput, options?: __HttpHandlerOptions): Promise<RemoveTagsCommandOutput>;
|
|
409
464
|
removeTags(args: RemoveTagsCommandInput, cb: (err: any, data?: RemoveTagsCommandOutput) => void): void;
|
|
410
465
|
removeTags(args: RemoveTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveTagsCommandOutput) => void): void;
|
|
411
466
|
/**
|
|
412
|
-
* <p>Restores a deleted event data store specified by <code>EventDataStore</code>, which
|
|
413
|
-
* You can only restore a deleted event data store within the
|
|
414
|
-
*
|
|
467
|
+
* <p>Restores a deleted event data store specified by <code>EventDataStore</code>, which
|
|
468
|
+
* accepts an event data store ARN. You can only restore a deleted event data store within the
|
|
469
|
+
* seven-day wait period after deletion. Restoring an event data store can take several
|
|
470
|
+
* minutes, depending on the size of the event data store.</p>
|
|
415
471
|
*/
|
|
416
472
|
restoreEventDataStore(args: RestoreEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<RestoreEventDataStoreCommandOutput>;
|
|
417
473
|
restoreEventDataStore(args: RestoreEventDataStoreCommandInput, cb: (err: any, data?: RestoreEventDataStoreCommandOutput) => void): void;
|
|
418
474
|
restoreEventDataStore(args: RestoreEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RestoreEventDataStoreCommandOutput) => void): void;
|
|
419
475
|
/**
|
|
420
|
-
* <p>
|
|
421
|
-
*
|
|
422
|
-
*
|
|
423
|
-
*
|
|
424
|
-
*
|
|
425
|
-
* <p>
|
|
426
|
-
* When you start a new import, the <code>Destinations</code> and
|
|
427
|
-
*
|
|
428
|
-
*
|
|
429
|
-
*
|
|
430
|
-
*
|
|
431
|
-
* When you retry an import, the <code>ImportID</code> parameter is required.
|
|
432
|
-
*
|
|
476
|
+
* <p> Starts an import of logged trail events from a source S3 bucket to a destination event
|
|
477
|
+
* data store. By default, CloudTrail only imports events contained in the S3 bucket's
|
|
478
|
+
* <code>CloudTrail</code> prefix and the prefixes inside the <code>CloudTrail</code> prefix, and does not check prefixes for other Amazon Web Services
|
|
479
|
+
* services. If you want to import CloudTrail events contained in another prefix, you
|
|
480
|
+
* must include the prefix in the <code>S3LocationUri</code>. For more considerations about
|
|
481
|
+
* importing trail events, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.html#cloudtrail-trail-copy-considerations">Considerations</a>. </p>
|
|
482
|
+
* <p> When you start a new import, the <code>Destinations</code> and
|
|
483
|
+
* <code>ImportSource</code> parameters are required. Before starting a new import, disable
|
|
484
|
+
* any access control lists (ACLs) attached to the source S3 bucket. For more information
|
|
485
|
+
* about disabling ACLs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html">Controlling ownership of
|
|
486
|
+
* objects and disabling ACLs for your bucket</a>. </p>
|
|
487
|
+
* <p> When you retry an import, the <code>ImportID</code> parameter is required. </p>
|
|
488
|
+
* <note>
|
|
489
|
+
* <p> If the destination event data store is for an organization, you must use the
|
|
490
|
+
* management account to import trail events. You cannot use the delegated administrator
|
|
491
|
+
* account for the organization. </p>
|
|
492
|
+
* </note>
|
|
433
493
|
*/
|
|
434
494
|
startImport(args: StartImportCommandInput, options?: __HttpHandlerOptions): Promise<StartImportCommandOutput>;
|
|
435
495
|
startImport(args: StartImportCommandInput, cb: (err: any, data?: StartImportCommandOutput) => void): void;
|
|
436
496
|
startImport(args: StartImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartImportCommandOutput) => void): void;
|
|
437
497
|
/**
|
|
438
|
-
* <p>Starts the recording of Amazon Web Services API calls and log file delivery for a trail.
|
|
498
|
+
* <p>Starts the recording of Amazon Web Services API calls and log file delivery for a trail.
|
|
499
|
+
* For a trail that is enabled in all regions, this operation must be called from the region
|
|
500
|
+
* in which the trail was created. This operation cannot be called on the shadow trails
|
|
501
|
+
* (replicated trails in other regions) of a trail that is enabled in all regions.</p>
|
|
439
502
|
*/
|
|
440
503
|
startLogging(args: StartLoggingCommandInput, options?: __HttpHandlerOptions): Promise<StartLoggingCommandOutput>;
|
|
441
504
|
startLogging(args: StartLoggingCommandInput, cb: (err: any, data?: StartLoggingCommandOutput) => void): void;
|
|
442
505
|
startLogging(args: StartLoggingCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartLoggingCommandOutput) => void): void;
|
|
443
506
|
/**
|
|
444
507
|
* <p>Starts a CloudTrail Lake query. The required <code>QueryStatement</code>
|
|
445
|
-
* parameter provides your SQL query, enclosed in single quotation marks. Use the optional
|
|
508
|
+
* parameter provides your SQL query, enclosed in single quotation marks. Use the optional
|
|
509
|
+
* <code>DeliveryS3Uri</code> parameter to deliver the query results to an S3
|
|
510
|
+
* bucket.</p>
|
|
446
511
|
*/
|
|
447
512
|
startQuery(args: StartQueryCommandInput, options?: __HttpHandlerOptions): Promise<StartQueryCommandOutput>;
|
|
448
513
|
startQuery(args: StartQueryCommandInput, cb: (err: any, data?: StartQueryCommandOutput) => void): void;
|
|
449
514
|
startQuery(args: StartQueryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StartQueryCommandOutput) => void): void;
|
|
450
515
|
/**
|
|
451
|
-
* <p>
|
|
452
|
-
* Stops a specified import.
|
|
453
|
-
* </p>
|
|
516
|
+
* <p> Stops a specified import. </p>
|
|
454
517
|
*/
|
|
455
518
|
stopImport(args: StopImportCommandInput, options?: __HttpHandlerOptions): Promise<StopImportCommandOutput>;
|
|
456
519
|
stopImport(args: StopImportCommandInput, cb: (err: any, data?: StopImportCommandOutput) => void): void;
|
|
457
520
|
stopImport(args: StopImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StopImportCommandOutput) => void): void;
|
|
458
521
|
/**
|
|
459
|
-
* <p>Suspends the recording of Amazon Web Services API calls and log file delivery for the
|
|
460
|
-
* Under most circumstances, there is no need to use this action. You can
|
|
461
|
-
* without stopping it first. This action is the only way to stop recording.
|
|
462
|
-
* enabled in all regions, this operation must be called from the region in which
|
|
463
|
-
* was created, or an <code>InvalidHomeRegionException</code> will occur. This
|
|
464
|
-
* cannot be called on the shadow trails (replicated trails in other regions) of a
|
|
465
|
-
* enabled in all regions.</p>
|
|
522
|
+
* <p>Suspends the recording of Amazon Web Services API calls and log file delivery for the
|
|
523
|
+
* specified trail. Under most circumstances, there is no need to use this action. You can
|
|
524
|
+
* update a trail without stopping it first. This action is the only way to stop recording.
|
|
525
|
+
* For a trail enabled in all regions, this operation must be called from the region in which
|
|
526
|
+
* the trail was created, or an <code>InvalidHomeRegionException</code> will occur. This
|
|
527
|
+
* operation cannot be called on the shadow trails (replicated trails in other regions) of a
|
|
528
|
+
* trail enabled in all regions.</p>
|
|
466
529
|
*/
|
|
467
530
|
stopLogging(args: StopLoggingCommandInput, options?: __HttpHandlerOptions): Promise<StopLoggingCommandOutput>;
|
|
468
531
|
stopLogging(args: StopLoggingCommandInput, cb: (err: any, data?: StopLoggingCommandOutput) => void): void;
|
|
469
532
|
stopLogging(args: StopLoggingCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StopLoggingCommandOutput) => void): void;
|
|
470
533
|
/**
|
|
471
|
-
* <p>Updates
|
|
472
|
-
|
|
473
|
-
|
|
474
|
-
|
|
475
|
-
|
|
476
|
-
|
|
534
|
+
* <p>Updates a channel specified by a required channel ARN or UUID.</p>
|
|
535
|
+
*/
|
|
536
|
+
updateChannel(args: UpdateChannelCommandInput, options?: __HttpHandlerOptions): Promise<UpdateChannelCommandOutput>;
|
|
537
|
+
updateChannel(args: UpdateChannelCommandInput, cb: (err: any, data?: UpdateChannelCommandOutput) => void): void;
|
|
538
|
+
updateChannel(args: UpdateChannelCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateChannelCommandOutput) => void): void;
|
|
539
|
+
/**
|
|
540
|
+
* <p>Updates an event data store. The required <code>EventDataStore</code> value is an ARN or
|
|
541
|
+
* the ID portion of the ARN. Other parameters are optional, but at least one optional
|
|
542
|
+
* parameter must be specified, or CloudTrail throws an error.
|
|
543
|
+
* <code>RetentionPeriod</code> is in days, and valid values are integers between 90 and
|
|
544
|
+
* 2557. By default, <code>TerminationProtection</code> is enabled.</p>
|
|
545
|
+
* <p>For event data stores for CloudTrail events, <code>AdvancedEventSelectors</code>
|
|
546
|
+
* includes or excludes management and data events in your event data store. For more
|
|
547
|
+
* information about <code>AdvancedEventSelectors</code>, see <a>PutEventSelectorsRequest$AdvancedEventSelectors</a>. </p>
|
|
548
|
+
* <p> For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events,
|
|
549
|
+
* <code>AdvancedEventSelectors</code> includes events of that type in your event data
|
|
550
|
+
* store.</p>
|
|
477
551
|
*/
|
|
478
552
|
updateEventDataStore(args: UpdateEventDataStoreCommandInput, options?: __HttpHandlerOptions): Promise<UpdateEventDataStoreCommandOutput>;
|
|
479
553
|
updateEventDataStore(args: UpdateEventDataStoreCommandInput, cb: (err: any, data?: UpdateEventDataStoreCommandOutput) => void): void;
|
|
480
554
|
updateEventDataStore(args: UpdateEventDataStoreCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateEventDataStoreCommandOutput) => void): void;
|
|
481
555
|
/**
|
|
482
|
-
* <p>Updates trail settings that control what events you are logging, and how to handle log
|
|
483
|
-
*
|
|
484
|
-
*
|
|
485
|
-
*
|
|
486
|
-
*
|
|
487
|
-
*
|
|
556
|
+
* <p>Updates trail settings that control what events you are logging, and how to handle log
|
|
557
|
+
* files. Changes to a trail do not require stopping the CloudTrail service. Use this
|
|
558
|
+
* action to designate an existing bucket for log delivery. If the existing bucket has
|
|
559
|
+
* previously been a target for CloudTrail log files, an IAM policy
|
|
560
|
+
* exists for the bucket. <code>UpdateTrail</code> must be called from the region in which the
|
|
561
|
+
* trail was created; otherwise, an <code>InvalidHomeRegionException</code> is thrown.</p>
|
|
488
562
|
*/
|
|
489
563
|
updateTrail(args: UpdateTrailCommandInput, options?: __HttpHandlerOptions): Promise<UpdateTrailCommandOutput>;
|
|
490
564
|
updateTrail(args: UpdateTrailCommandInput, cb: (err: any, data?: UpdateTrailCommandOutput) => void): void;
|