@aws-sdk/client-cloudtrail 3.288.0 → 3.290.0

package/dist-types/commands/ListQueriesCommand.d.ts

@@ -35,6 +35,45 @@ export interface ListQueriesCommandOutput extends ListQueriesResponse, __Metadat
  * @see {@link ListQueriesCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link EventDataStoreARNInvalidException} (client fault)
+ *  <p>The specified event data store ARN is not valid or does not map to an event data store
+ *          in your account.</p>
+ *
+ * @throws {@link EventDataStoreNotFoundException} (client fault)
+ *  <p>The specified event data store was not found.</p>
+ *
+ * @throws {@link InactiveEventDataStoreException} (client fault)
+ *  <p>The event data store is inactive.</p>
+ *
+ * @throws {@link InvalidDateRangeException} (client fault)
+ *  <p>A date range for the query was specified that is not valid. Be sure that the start time
+ *          is chronologically before the end time. For more information about writing a query, see
+ *             <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-create-edit-query.html">Create or edit a query</a> in the <i>CloudTrail User Guide</i>.</p>
+ *
+ * @throws {@link InvalidMaxResultsException} (client fault)
+ *  <p>This exception is thrown if the limit specified is not valid.</p>
+ *
+ * @throws {@link InvalidNextTokenException} (client fault)
+ *  <p>A token that is not valid, or a token that was previously used in a request with
+ *          different parameters. This exception is thrown if the token is not valid.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
+ *
+ * @throws {@link InvalidQueryStatusException} (client fault)
+ *  <p>The query status is not valid for the operation.</p>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class ListQueriesCommand extends $Command<ListQueriesCommandInput, ListQueriesCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: ListQueriesCommandInput;

package/dist-types/commands/ListTagsCommand.d.ts

@@ -29,6 +29,69 @@ export interface ListTagsCommandOutput extends ListTagsResponse, __MetadataBeare
  * @see {@link ListTagsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link CloudTrailARNInvalidException} (client fault)
+ *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
+ *          The following is the format of a trail ARN.</p>
+ *          <p>
+ *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *          </p>
+ *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
+ *          <p>The following is the format of an event data store ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:12345678910:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+ *          </p>
+ *          <p>The following is the format of a channel ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+ *          </p>
+ *
+ * @throws {@link EventDataStoreNotFoundException} (client fault)
+ *  <p>The specified event data store was not found.</p>
+ *
+ * @throws {@link InactiveEventDataStoreException} (client fault)
+ *  <p>The event data store is inactive.</p>
+ *
+ * @throws {@link InvalidTokenException} (client fault)
+ *  <p>Reserved for future use.</p>
+ *
+ * @throws {@link InvalidTrailNameException} (client fault)
+ *  <p>This exception is thrown when the provided trail name is not valid. Trail names must
+ *          meet the following requirements:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores
+ *                (_), or dashes (-)</p>
+ *             </li>
+ *             <li>
+ *                <p>Start with a letter or number, and end with a letter or number</p>
+ *             </li>
+ *             <li>
+ *                <p>Be between 3 and 128 characters</p>
+ *             </li>
+ *             <li>
+ *                <p>Have no adjacent periods, underscores or dashes. Names like
+ *                   <code>my-_namespace</code> and <code>my--namespace</code> are not valid.</p>
+ *             </li>
+ *             <li>
+ *                <p>Not be in IP address format (for example, 192.168.5.4)</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>This exception is thrown when the specified resource is not found.</p>
+ *
+ * @throws {@link ResourceTypeNotSupportedException} (client fault)
+ *  <p>This exception is thrown when the specified resource type is not supported by CloudTrail.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class ListTagsCommand extends $Command<ListTagsCommandInput, ListTagsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: ListTagsCommandInput;

package/dist-types/commands/ListTrailsCommand.d.ts

@@ -29,6 +29,13 @@ export interface ListTrailsCommandOutput extends ListTrailsResponse, __MetadataB
  * @see {@link ListTrailsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class ListTrailsCommand extends $Command<ListTrailsCommandInput, ListTrailsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: ListTrailsCommandInput;

package/dist-types/commands/LookupEventsCommand.d.ts

@@ -76,6 +76,31 @@ export interface LookupEventsCommandOutput extends LookupEventsResponse, __Metad
  * @see {@link LookupEventsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link InvalidEventCategoryException} (client fault)
+ *  <p>Occurs if an event category that is not valid is specified as a value of
+ *             <code>EventCategory</code>.</p>
+ *
+ * @throws {@link InvalidLookupAttributesException} (client fault)
+ *  <p>Occurs when a lookup attribute is specified that is not valid.</p>
+ *
+ * @throws {@link InvalidMaxResultsException} (client fault)
+ *  <p>This exception is thrown if the limit specified is not valid.</p>
+ *
+ * @throws {@link InvalidNextTokenException} (client fault)
+ *  <p>A token that is not valid, or a token that was previously used in a request with
+ *          different parameters. This exception is thrown if the token is not valid.</p>
+ *
+ * @throws {@link InvalidTimeRangeException} (client fault)
+ *  <p>Occurs if the timestamp values are not valid. Either the start time occurs after the end
+ *          time, or the time range is outside the range of possible values.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class LookupEventsCommand extends $Command<LookupEventsCommandInput, LookupEventsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: LookupEventsCommandInput;

package/dist-types/commands/PutEventSelectorsCommand.d.ts

@@ -71,6 +71,101 @@ export interface PutEventSelectorsCommandOutput extends PutEventSelectorsRespons
  * @see {@link PutEventSelectorsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link CloudTrailARNInvalidException} (client fault)
+ *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
+ *          The following is the format of a trail ARN.</p>
+ *          <p>
+ *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *          </p>
+ *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
+ *          <p>The following is the format of an event data store ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:12345678910:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+ *          </p>
+ *          <p>The following is the format of a channel ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+ *          </p>
+ *
+ * @throws {@link InsufficientDependencyServiceAccessPermissionException} (client fault)
+ *  <p>This exception is thrown when the IAM user or role that is used to create
+ *          the organization resource lacks one or more required permissions for creating an
+ *          organization resource in a required service.</p>
+ *
+ * @throws {@link InvalidEventSelectorsException} (client fault)
+ *  <p>This exception is thrown when the <code>PutEventSelectors</code> operation is called
+ *          with a number of event selectors, advanced event selectors, or data resources that is not
+ *          valid. The combination of event selectors or advanced event selectors and data resources is
+ *          not valid. A trail can have up to 5 event selectors. If a trail uses advanced event
+ *          selectors, a maximum of 500 total values for all conditions in all advanced event selectors
+ *          is allowed. A trail is limited to 250 data resources. These data resources can be
+ *          distributed across event selectors, but the overall total cannot exceed 250.</p>
+ *          <p>You can:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Specify a valid number of event selectors (1 to 5) for a trail.</p>
+ *             </li>
+ *             <li>
+ *                <p>Specify a valid number of data resources (1 to 250) for an event selector. The
+ *                limit of number of resources on an individual event selector is configurable up to
+ *                250. However, this upper limit is allowed only if the total number of data resources
+ *                does not exceed 250 across all event selectors for a trail.</p>
+ *             </li>
+ *             <li>
+ *                <p>Specify up to 500 values for all conditions in all advanced event selectors for a
+ *                trail.</p>
+ *             </li>
+ *             <li>
+ *                <p>Specify a valid value for a parameter. For example, specifying the
+ *                   <code>ReadWriteType</code> parameter with a value of <code>read-only</code> is not
+ *                valid.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link InvalidHomeRegionException} (client fault)
+ *  <p>This exception is thrown when an operation is called on a trail from a region other than
+ *          the region in which the trail was created.</p>
+ *
+ * @throws {@link InvalidTrailNameException} (client fault)
+ *  <p>This exception is thrown when the provided trail name is not valid. Trail names must
+ *          meet the following requirements:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores
+ *                (_), or dashes (-)</p>
+ *             </li>
+ *             <li>
+ *                <p>Start with a letter or number, and end with a letter or number</p>
+ *             </li>
+ *             <li>
+ *                <p>Be between 3 and 128 characters</p>
+ *             </li>
+ *             <li>
+ *                <p>Have no adjacent periods, underscores or dashes. Names like
+ *                   <code>my-_namespace</code> and <code>my--namespace</code> are not valid.</p>
+ *             </li>
+ *             <li>
+ *                <p>Not be in IP address format (for example, 192.168.5.4)</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link NotOrganizationMasterAccountException} (client fault)
+ *  <p>This exception is thrown when the Amazon Web Services account making the request to
+ *          create or update an organization trail or event data store is not the management account
+ *          for an organization in Organizations. For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store.html">Create an event data store</a>.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link TrailNotFoundException} (client fault)
+ *  <p>This exception is thrown when the trail with the given name is not found.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class PutEventSelectorsCommand extends $Command<PutEventSelectorsCommandInput, PutEventSelectorsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: PutEventSelectorsCommandInput;

package/dist-types/commands/PutInsightSelectorsCommand.d.ts

@@ -33,6 +33,86 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
  * @see {@link PutInsightSelectorsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link CloudTrailARNInvalidException} (client fault)
+ *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
+ *          The following is the format of a trail ARN.</p>
+ *          <p>
+ *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *          </p>
+ *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
+ *          <p>The following is the format of an event data store ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:12345678910:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+ *          </p>
+ *          <p>The following is the format of a channel ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+ *          </p>
+ *
+ * @throws {@link InsufficientEncryptionPolicyException} (client fault)
+ *  <p>This exception is thrown when the policy on the S3 bucket or KMS key does
+ *          not have sufficient permissions for the operation.</p>
+ *
+ * @throws {@link InsufficientS3BucketPolicyException} (client fault)
+ *  <p>This exception is thrown when the policy on the S3 bucket is not sufficient.</p>
+ *
+ * @throws {@link InvalidHomeRegionException} (client fault)
+ *  <p>This exception is thrown when an operation is called on a trail from a region other than
+ *          the region in which the trail was created.</p>
+ *
+ * @throws {@link InvalidInsightSelectorsException} (client fault)
+ *  <p>The formatting or syntax of the <code>InsightSelectors</code> JSON statement in your
+ *             <code>PutInsightSelectors</code> or <code>GetInsightSelectors</code> request is not
+ *          valid, or the specified insight type in the <code>InsightSelectors</code> statement is not
+ *          a valid insight type.</p>
+ *
+ * @throws {@link InvalidTrailNameException} (client fault)
+ *  <p>This exception is thrown when the provided trail name is not valid. Trail names must
+ *          meet the following requirements:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores
+ *                (_), or dashes (-)</p>
+ *             </li>
+ *             <li>
+ *                <p>Start with a letter or number, and end with a letter or number</p>
+ *             </li>
+ *             <li>
+ *                <p>Be between 3 and 128 characters</p>
+ *             </li>
+ *             <li>
+ *                <p>Have no adjacent periods, underscores or dashes. Names like
+ *                   <code>my-_namespace</code> and <code>my--namespace</code> are not valid.</p>
+ *             </li>
+ *             <li>
+ *                <p>Not be in IP address format (for example, 192.168.5.4)</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link KmsException} (client fault)
+ *  <p>This exception is thrown when there is an issue with the specified KMS
+ *          key and the trail or event data store can't be updated.</p>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link NotOrganizationMasterAccountException} (client fault)
+ *  <p>This exception is thrown when the Amazon Web Services account making the request to
+ *          create or update an organization trail or event data store is not the management account
+ *          for an organization in Organizations. For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store.html">Create an event data store</a>.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link S3BucketDoesNotExistException} (client fault)
+ *  <p>This exception is thrown when the specified S3 bucket does not exist.</p>
+ *
+ * @throws {@link TrailNotFoundException} (client fault)
+ *  <p>This exception is thrown when the trail with the given name is not found.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class PutInsightSelectorsCommand extends $Command<PutInsightSelectorsCommandInput, PutInsightSelectorsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: PutInsightSelectorsCommandInput;

package/dist-types/commands/PutResourcePolicyCommand.d.ts

@@ -33,6 +33,48 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
  * @see {@link PutResourcePolicyCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link ResourceARNNotValidException} (client fault)
+ *  <p>
+ *          This exception is thrown when the provided resource does not exist, or the ARN format of the resource is not valid. The following is the valid format for a resource ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel</code>.
+ *       </p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>This exception is thrown when the specified resource is not found.</p>
+ *
+ * @throws {@link ResourcePolicyNotValidException} (client fault)
+ *  <p>
+ *          This exception is thrown when the resouce-based policy has syntax errors, or contains a principal that is not valid.
+ *       </p>
+ *          <p>The following are requirements for the resource policy:</p>
+ *          <ul>
+ *             <li>
+ *                <p>
+ *                Contains only one action: cloudtrail-data:PutAuditEvents
+ *             </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                Contains at least one statement. The policy can have a maximum of 20 statements.
+ *             </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                Each statement contains at least one principal. A statement can have a maximum of 50 principals.
+ *             </p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link ResourceTypeNotSupportedException} (client fault)
+ *  <p>This exception is thrown when the specified resource type is not supported by CloudTrail.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class PutResourcePolicyCommand extends $Command<PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: PutResourcePolicyCommandInput;

package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts

@@ -30,6 +30,60 @@ export interface RegisterOrganizationDelegatedAdminCommandOutput extends Registe
  * @see {@link RegisterOrganizationDelegatedAdminCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link AccountNotFoundException} (client fault)
+ *  <p>This exception is thrown when the specified account is not found or not part of an
+ *          organization.</p>
+ *
+ * @throws {@link AccountRegisteredException} (client fault)
+ *  <p>This exception is thrown when the account is already registered as the CloudTrail
+ *          delegated administrator.</p>
+ *
+ * @throws {@link CannotDelegateManagementAccountException} (client fault)
+ *  <p>This exception is thrown when the management account of an organization is registered as
+ *          the CloudTrail delegated administrator.</p>
+ *
+ * @throws {@link CloudTrailAccessNotEnabledException} (client fault)
+ *  <p>This exception is thrown when trusted access has not been enabled between CloudTrail and Organizations. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Enabling Trusted Access with Other Amazon Web Services Services</a> and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a>. </p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>This exception is thrown when the specified resource is not ready for an operation. This
+ *          can occur when you try to run an operation on a resource before CloudTrail has time
+ *          to fully load the resource, or because another operation is modifying the resource. If this exception occurs, wait a few minutes, and then try the
+ *          operation again.</p>
+ *
+ * @throws {@link DelegatedAdminAccountLimitExceededException} (client fault)
+ *  <p>This exception is thrown when the maximum number of CloudTrail delegated
+ *          administrators is reached.</p>
+ *
+ * @throws {@link InsufficientDependencyServiceAccessPermissionException} (client fault)
+ *  <p>This exception is thrown when the IAM user or role that is used to create
+ *          the organization resource lacks one or more required permissions for creating an
+ *          organization resource in a required service.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
+ *
+ * @throws {@link NotOrganizationManagementAccountException} (client fault)
+ *  <p> This exception is thrown when the account making the request is not the organization's
+ *          management account. </p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link OrganizationNotInAllFeaturesModeException} (client fault)
+ *  <p>This exception is thrown when Organizations is not configured to support all
+ *          features. All features must be enabled in Organizations to support creating an
+ *          organization trail or event data store.</p>
+ *
+ * @throws {@link OrganizationsNotInUseException} (client fault)
+ *  <p>This exception is thrown when the request is made from an Amazon Web Services account
+ *          that is not a member of an organization. To make this request, sign in using the
+ *          credentials of an account that belongs to an organization.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class RegisterOrganizationDelegatedAdminCommand extends $Command<RegisterOrganizationDelegatedAdminCommandInput, RegisterOrganizationDelegatedAdminCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: RegisterOrganizationDelegatedAdminCommandInput;

package/dist-types/commands/RemoveTagsCommand.d.ts

@@ -29,6 +29,78 @@ export interface RemoveTagsCommandOutput extends RemoveTagsResponse, __MetadataB
  * @see {@link RemoveTagsCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link ChannelNotFoundException} (client fault)
+ *  <p>This exception is thrown when CloudTrail cannot find the specified channel.</p>
+ *
+ * @throws {@link CloudTrailARNInvalidException} (client fault)
+ *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
+ *          The following is the format of a trail ARN.</p>
+ *          <p>
+ *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *          </p>
+ *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
+ *          <p>The following is the format of an event data store ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:12345678910:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+ *          </p>
+ *          <p>The following is the format of a channel ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+ *          </p>
+ *
+ * @throws {@link EventDataStoreNotFoundException} (client fault)
+ *  <p>The specified event data store was not found.</p>
+ *
+ * @throws {@link InactiveEventDataStoreException} (client fault)
+ *  <p>The event data store is inactive.</p>
+ *
+ * @throws {@link InvalidTagParameterException} (client fault)
+ *  <p>This exception is thrown when the specified tag key or values are not valid. It can also
+ *          occur if there are duplicate tags or too many tags on the resource.</p>
+ *
+ * @throws {@link InvalidTrailNameException} (client fault)
+ *  <p>This exception is thrown when the provided trail name is not valid. Trail names must
+ *          meet the following requirements:</p>
+ *          <ul>
+ *             <li>
+ *                <p>Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores
+ *                (_), or dashes (-)</p>
+ *             </li>
+ *             <li>
+ *                <p>Start with a letter or number, and end with a letter or number</p>
+ *             </li>
+ *             <li>
+ *                <p>Be between 3 and 128 characters</p>
+ *             </li>
+ *             <li>
+ *                <p>Have no adjacent periods, underscores or dashes. Names like
+ *                   <code>my-_namespace</code> and <code>my--namespace</code> are not valid.</p>
+ *             </li>
+ *             <li>
+ *                <p>Not be in IP address format (for example, 192.168.5.4)</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link NotOrganizationMasterAccountException} (client fault)
+ *  <p>This exception is thrown when the Amazon Web Services account making the request to
+ *          create or update an organization trail or event data store is not the management account
+ *          for an organization in Organizations. For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store.html">Create an event data store</a>.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>This exception is thrown when the specified resource is not found.</p>
+ *
+ * @throws {@link ResourceTypeNotSupportedException} (client fault)
+ *  <p>This exception is thrown when the specified resource type is not supported by CloudTrail.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class RemoveTagsCommand extends $Command<RemoveTagsCommandInput, RemoveTagsCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: RemoveTagsCommandInput;

package/dist-types/commands/RestoreEventDataStoreCommand.d.ts

@@ -32,6 +32,56 @@ export interface RestoreEventDataStoreCommandOutput extends RestoreEventDataStor
  * @see {@link RestoreEventDataStoreCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link CloudTrailAccessNotEnabledException} (client fault)
+ *  <p>This exception is thrown when trusted access has not been enabled between CloudTrail and Organizations. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Enabling Trusted Access with Other Amazon Web Services Services</a> and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a>. </p>
+ *
+ * @throws {@link EventDataStoreARNInvalidException} (client fault)
+ *  <p>The specified event data store ARN is not valid or does not map to an event data store
+ *          in your account.</p>
+ *
+ * @throws {@link EventDataStoreMaxLimitExceededException} (client fault)
+ *  <p>Your account has used the maximum number of event data stores.</p>
+ *
+ * @throws {@link EventDataStoreNotFoundException} (client fault)
+ *  <p>The specified event data store was not found.</p>
+ *
+ * @throws {@link InsufficientDependencyServiceAccessPermissionException} (client fault)
+ *  <p>This exception is thrown when the IAM user or role that is used to create
+ *          the organization resource lacks one or more required permissions for creating an
+ *          organization resource in a required service.</p>
+ *
+ * @throws {@link InvalidEventDataStoreStatusException} (client fault)
+ *  <p>The event data store is not in a status that supports the operation.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
+ *
+ * @throws {@link NoManagementAccountSLRExistsException} (client fault)
+ *  <p> This exception is thrown when the management account does not have a service-linked
+ *          role. </p>
+ *
+ * @throws {@link NotOrganizationMasterAccountException} (client fault)
+ *  <p>This exception is thrown when the Amazon Web Services account making the request to
+ *          create or update an organization trail or event data store is not the management account
+ *          for an organization in Organizations. For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-event-data-store.html">Create an event data store</a>.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link OrganizationNotInAllFeaturesModeException} (client fault)
+ *  <p>This exception is thrown when Organizations is not configured to support all
+ *          features. All features must be enabled in Organizations to support creating an
+ *          organization trail or event data store.</p>
+ *
+ * @throws {@link OrganizationsNotInUseException} (client fault)
+ *  <p>This exception is thrown when the request is made from an Amazon Web Services account
+ *          that is not a member of an organization. To make this request, sign in using the
+ *          credentials of an account that belongs to an organization.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class RestoreEventDataStoreCommand extends $Command<RestoreEventDataStoreCommandInput, RestoreEventDataStoreCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: RestoreEventDataStoreCommandInput;

package/dist-types/commands/StartImportCommand.d.ts

@@ -45,6 +45,48 @@ export interface StartImportCommandOutput extends StartImportResponse, __Metadat
  * @see {@link StartImportCommandOutput} for command's `response` shape.
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
+ * @throws {@link AccountHasOngoingImportException} (client fault)
+ *  <p> This exception is thrown when you start a new import and a previous import is still in
+ *          progress. </p>
+ *
+ * @throws {@link EventDataStoreARNInvalidException} (client fault)
+ *  <p>The specified event data store ARN is not valid or does not map to an event data store
+ *          in your account.</p>
+ *
+ * @throws {@link EventDataStoreNotFoundException} (client fault)
+ *  <p>The specified event data store was not found.</p>
+ *
+ * @throws {@link ImportNotFoundException} (client fault)
+ *  <p> The specified import was not found. </p>
+ *
+ * @throws {@link InactiveEventDataStoreException} (client fault)
+ *  <p>The event data store is inactive.</p>
+ *
+ * @throws {@link InsufficientEncryptionPolicyException} (client fault)
+ *  <p>This exception is thrown when the policy on the S3 bucket or KMS key does
+ *          not have sufficient permissions for the operation.</p>
+ *
+ * @throws {@link InvalidEventDataStoreCategoryException} (client fault)
+ *  <p>This exception is thrown when event categories of specified event data stores are not
+ *          valid.</p>
+ *
+ * @throws {@link InvalidEventDataStoreStatusException} (client fault)
+ *  <p>The event data store is not in a status that supports the operation.</p>
+ *
+ * @throws {@link InvalidImportSourceException} (client fault)
+ *  <p> This exception is thrown when the provided source S3 bucket is not valid for import.
+ *       </p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
+ *
+ * @throws {@link OperationNotPermittedException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not permitted.</p>
+ *
+ * @throws {@link UnsupportedOperationException} (client fault)
+ *  <p>This exception is thrown when the requested operation is not supported.</p>
+ *
+ *
  */
 export declare class StartImportCommand extends $Command<StartImportCommandInput, StartImportCommandOutput, CloudTrailClientResolvedConfig> {
     readonly input: StartImportCommandInput;