@aws-sdk/client-cloudtrail 3.441.0 → 3.448.0

package/dist-cjs/protocols/Aws_json1_1.js

@@ -1327,6 +1327,12 @@ const de_GetInsightSelectorsCommandError = async (output, context) => {
         case "InsightNotEnabledException":
         case "com.amazonaws.cloudtrail#InsightNotEnabledException":
             throw await de_InsightNotEnabledExceptionRes(parsedOutput, context);
+        case "InvalidParameterCombinationException":
+        case "com.amazonaws.cloudtrail#InvalidParameterCombinationException":
+            throw await de_InvalidParameterCombinationExceptionRes(parsedOutput, context);
+        case "InvalidParameterException":
+        case "com.amazonaws.cloudtrail#InvalidParameterException":
+            throw await de_InvalidParameterExceptionRes(parsedOutput, context);
         case "InvalidTrailNameException":
         case "com.amazonaws.cloudtrail#InvalidTrailNameException":
             throw await de_InvalidTrailNameExceptionRes(parsedOutput, context);
@@ -2083,6 +2089,12 @@ const de_PutInsightSelectorsCommandError = async (output, context) => {
         case "InvalidInsightSelectorsException":
         case "com.amazonaws.cloudtrail#InvalidInsightSelectorsException":
             throw await de_InvalidInsightSelectorsExceptionRes(parsedOutput, context);
+        case "InvalidParameterCombinationException":
+        case "com.amazonaws.cloudtrail#InvalidParameterCombinationException":
+            throw await de_InvalidParameterCombinationExceptionRes(parsedOutput, context);
+        case "InvalidParameterException":
+        case "com.amazonaws.cloudtrail#InvalidParameterException":
+            throw await de_InvalidParameterExceptionRes(parsedOutput, context);
         case "InvalidTrailNameException":
         case "com.amazonaws.cloudtrail#InvalidTrailNameException":
             throw await de_InvalidTrailNameExceptionRes(parsedOutput, context);
@@ -2911,6 +2923,9 @@ const de_UpdateEventDataStoreCommandError = async (output, context) => {
         case "InvalidEventSelectorsException":
         case "com.amazonaws.cloudtrail#InvalidEventSelectorsException":
             throw await de_InvalidEventSelectorsExceptionRes(parsedOutput, context);
+        case "InvalidInsightSelectorsException":
+        case "com.amazonaws.cloudtrail#InvalidInsightSelectorsException":
+            throw await de_InvalidInsightSelectorsExceptionRes(parsedOutput, context);
         case "InvalidKmsKeyIdException":
         case "com.amazonaws.cloudtrail#InvalidKmsKeyIdException":
             throw await de_InvalidKmsKeyIdExceptionRes(parsedOutput, context);

package/dist-es/protocols/Aws_json1_1.js

@@ -1260,6 +1260,12 @@ const de_GetInsightSelectorsCommandError = async (output, context) => {
         case "InsightNotEnabledException":
         case "com.amazonaws.cloudtrail#InsightNotEnabledException":
             throw await de_InsightNotEnabledExceptionRes(parsedOutput, context);
+        case "InvalidParameterCombinationException":
+        case "com.amazonaws.cloudtrail#InvalidParameterCombinationException":
+            throw await de_InvalidParameterCombinationExceptionRes(parsedOutput, context);
+        case "InvalidParameterException":
+        case "com.amazonaws.cloudtrail#InvalidParameterException":
+            throw await de_InvalidParameterExceptionRes(parsedOutput, context);
         case "InvalidTrailNameException":
         case "com.amazonaws.cloudtrail#InvalidTrailNameException":
             throw await de_InvalidTrailNameExceptionRes(parsedOutput, context);
@@ -2001,6 +2007,12 @@ const de_PutInsightSelectorsCommandError = async (output, context) => {
         case "InvalidInsightSelectorsException":
         case "com.amazonaws.cloudtrail#InvalidInsightSelectorsException":
             throw await de_InvalidInsightSelectorsExceptionRes(parsedOutput, context);
+        case "InvalidParameterCombinationException":
+        case "com.amazonaws.cloudtrail#InvalidParameterCombinationException":
+            throw await de_InvalidParameterCombinationExceptionRes(parsedOutput, context);
+        case "InvalidParameterException":
+        case "com.amazonaws.cloudtrail#InvalidParameterException":
+            throw await de_InvalidParameterExceptionRes(parsedOutput, context);
         case "InvalidTrailNameException":
         case "com.amazonaws.cloudtrail#InvalidTrailNameException":
             throw await de_InvalidTrailNameExceptionRes(parsedOutput, context);
@@ -2816,6 +2828,9 @@ const de_UpdateEventDataStoreCommandError = async (output, context) => {
         case "InvalidEventSelectorsException":
         case "com.amazonaws.cloudtrail#InvalidEventSelectorsException":
             throw await de_InvalidEventSelectorsExceptionRes(parsedOutput, context);
+        case "InvalidInsightSelectorsException":
+        case "com.amazonaws.cloudtrail#InvalidInsightSelectorsException":
+            throw await de_InvalidInsightSelectorsExceptionRes(parsedOutput, context);
         case "InvalidKmsKeyIdException":
         case "com.amazonaws.cloudtrail#InvalidKmsKeyIdException":
             throw await de_InvalidKmsKeyIdExceptionRes(parsedOutput, context);

package/dist-types/commands/AddTagsCommand.d.ts

@@ -65,12 +65,9 @@ export interface AddTagsCommandOutput extends AddTagsResponse, __MetadataBearer
  *  <p>This exception is thrown when CloudTrail cannot find the specified channel.</p>
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/DeleteTrailCommand.d.ts

@@ -48,12 +48,9 @@ export interface DeleteTrailCommandOutput extends DeleteTrailResponse, __Metadat
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/GetEventSelectorsCommand.d.ts

@@ -119,12 +119,9 @@ export interface GetEventSelectorsCommandOutput extends GetEventSelectorsRespons
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/GetInsightSelectorsCommand.d.ts

@@ -24,12 +24,14 @@ export interface GetInsightSelectorsCommandOutput extends GetInsightSelectorsRes
 /**
  * @public
  * <p>Describes the settings for the Insights event selectors that you configured for your
- *          trail. <code>GetInsightSelectors</code> shows if CloudTrail Insights event logging
- *          is enabled on the trail, and if it is, which insight types are enabled. If you run
- *             <code>GetInsightSelectors</code> on a trail that does not have Insights events enabled,
+ *          trail or event data store. <code>GetInsightSelectors</code> shows if CloudTrail Insights event logging
+ *          is enabled on the trail or event data store, and if it is, which Insights types are enabled. If you run
+ *             <code>GetInsightSelectors</code> on a trail or event data store that does not have Insights events enabled,
  *          the operation throws the exception <code>InsightNotEnabledException</code>
  *          </p>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights Events for Trails </a> in the <i>CloudTrail User Guide</i>.</p>
+ *          <p>Specify either the <code>EventDataStore</code> parameter to get Insights event selectors for an event data store,
+ *          or the <code>TrailName</code> parameter to the get Insights event selectors for a trail. You cannot specify these parameters together.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights events</a> in the <i>CloudTrail User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -37,7 +39,8 @@ export interface GetInsightSelectorsCommandOutput extends GetInsightSelectorsRes
  * // const { CloudTrailClient, GetInsightSelectorsCommand } = require("@aws-sdk/client-cloudtrail"); // CommonJS import
  * const client = new CloudTrailClient(config);
  * const input = { // GetInsightSelectorsRequest
- *   TrailName: "STRING_VALUE", // required
+ *   TrailName: "STRING_VALUE",
+ *   EventDataStore: "STRING_VALUE",
  * };
  * const command = new GetInsightSelectorsCommand(input);
  * const response = await client.send(command);
@@ -48,6 +51,8 @@ export interface GetInsightSelectorsCommandOutput extends GetInsightSelectorsRes
  * //       InsightType: "ApiCallRateInsight" || "ApiErrorRateInsight",
  * //     },
  * //   ],
+ * //   EventDataStoreArn: "STRING_VALUE",
+ * //   InsightsDestination: "STRING_VALUE",
  * // };
  *
  * ```
@@ -59,12 +64,9 @@ export interface GetInsightSelectorsCommandOutput extends GetInsightSelectorsRes
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>
@@ -73,10 +75,17 @@ export interface GetInsightSelectorsCommandOutput extends GetInsightSelectorsRes
  *          </p>
  *
  * @throws {@link InsightNotEnabledException} (client fault)
- *  <p>If you run <code>GetInsightSelectors</code> on a trail that does not have Insights
+ *  <p>If you run <code>GetInsightSelectors</code> on a trail or event data store that does not have Insights
  *          events enabled, the operation throws the exception
  *          <code>InsightNotEnabledException</code>.</p>
  *
+ * @throws {@link InvalidParameterCombinationException} (client fault)
+ *  <p>This exception is thrown when the combination of parameters provided is not
+ *          valid.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
+ *
  * @throws {@link InvalidTrailNameException} (client fault)
  *  <p>This exception is thrown when the provided trail name is not valid. Trail names must
  *          meet the following requirements:</p>

package/dist-types/commands/GetTrailCommand.d.ts

@@ -65,12 +65,9 @@ export interface GetTrailCommandOutput extends GetTrailResponse, __MetadataBeare
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/GetTrailStatusCommand.d.ts

@@ -68,12 +68,9 @@ export interface GetTrailStatusCommandOutput extends GetTrailStatusResponse, __M
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/ListTagsCommand.d.ts

@@ -66,12 +66,9 @@ export interface ListTagsCommandOutput extends ListTagsResponse, __MetadataBeare
  *          valid.</p>
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/LookupEventsCommand.d.ts

@@ -24,8 +24,13 @@ export interface LookupEventsCommandOutput extends LookupEventsResponse, __Metad
 /**
  * @public
  * <p>Looks up <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-management-events">management events</a> or <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-insights-events">CloudTrail Insights events</a> that are captured by CloudTrail.
- *          You can look up events that occurred in a Region within the last 90 days. Lookup supports
- *          the following attributes for management events:</p>
+ *          You can look up events that occurred in a Region within the last 90 days.</p>
+ *          <note>
+ *             <p>
+ *                <code>LookupEvents</code> returns recent Insights events for trails that enable Insights. To view Insights events for an event data store, you can run queries on your
+ *             Insights event data store, and you can also view the Lake dashboard for Insights.</p>
+ *          </note>
+ *          <p>Lookup supports the following attributes for management events:</p>
  *          <ul>
  *             <li>
  *                <p>Amazon Web Services access key</p>

package/dist-types/commands/PutEventSelectorsCommand.d.ts

@@ -178,12 +178,9 @@ export interface PutEventSelectorsCommandOutput extends PutEventSelectorsRespons
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/PutInsightSelectorsCommand.d.ts

@@ -24,15 +24,21 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
 /**
  * @public
  * <p>Lets you enable Insights event logging by specifying the Insights selectors that you
- *          want to enable on an existing trail. You also use <code>PutInsightSelectors</code> to turn
- *          off Insights event logging, by passing an empty list of insight types. The valid Insights
- *          event types in this release are <code>ApiErrorRateInsight</code> and
+ *          want to enable on an existing trail or event data store. You also use <code>PutInsightSelectors</code> to turn
+ *          off Insights event logging, by passing an empty list of Insights types. The valid Insights
+ *          event types are <code>ApiErrorRateInsight</code> and
  *             <code>ApiCallRateInsight</code>.</p>
- *          <p>To log CloudTrail Insights events on API call volume, the trail
+ *          <p>To enable Insights on an event data store, you must specify the ARNs (or ID suffix of the ARNs) for the source event data store (<code>EventDataStore</code>) and the destination event data store (<code>InsightsDestination</code>). The source event data store logs management events and enables Insights.
+ *          The destination event data store logs Insights events based upon the management event activity of the source event data store. The source and destination event data stores must belong to the same Amazon Web Services account.</p>
+ *          <p>To log Insights events for a trail, you must specify the name (<code>TrailName</code>) of the CloudTrail trail for which you want to change or add Insights
+ *          selectors.</p>
+ *          <p>To log CloudTrail Insights events on API call volume, the trail or event data store
  *          must log <code>write</code> management events. To log CloudTrail
- *          Insights events on API error rate, the trail must log <code>read</code> or
+ *          Insights events on API error rate, the trail or event data store must log <code>read</code> or
  *             <code>write</code> management events. You can call <code>GetEventSelectors</code> on a trail
- *          to check whether the trail logs management events.</p>
+ *          to check whether the trail logs management events. You can call <code>GetEventDataStore</code> on an
+ *       event data store to check whether the event data store logs management events.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging CloudTrail Insights events</a> in the <i>CloudTrail User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -40,12 +46,14 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
  * // const { CloudTrailClient, PutInsightSelectorsCommand } = require("@aws-sdk/client-cloudtrail"); // CommonJS import
  * const client = new CloudTrailClient(config);
  * const input = { // PutInsightSelectorsRequest
- *   TrailName: "STRING_VALUE", // required
+ *   TrailName: "STRING_VALUE",
  *   InsightSelectors: [ // InsightSelectors // required
  *     { // InsightSelector
  *       InsightType: "ApiCallRateInsight" || "ApiErrorRateInsight",
  *     },
  *   ],
+ *   EventDataStore: "STRING_VALUE",
+ *   InsightsDestination: "STRING_VALUE",
  * };
  * const command = new PutInsightSelectorsCommand(input);
  * const response = await client.send(command);
@@ -56,6 +64,8 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
  * //       InsightType: "ApiCallRateInsight" || "ApiErrorRateInsight",
  * //     },
  * //   ],
+ * //   EventDataStoreArn: "STRING_VALUE",
+ * //   InsightsDestination: "STRING_VALUE",
  * // };
  *
  * ```
@@ -67,12 +77,9 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>
@@ -92,10 +99,22 @@ export interface PutInsightSelectorsCommandOutput extends PutInsightSelectorsRes
  *          the Region in which the trail was created.</p>
  *
  * @throws {@link InvalidInsightSelectorsException} (client fault)
- *  <p>The formatting or syntax of the <code>InsightSelectors</code> JSON statement in your
- *             <code>PutInsightSelectors</code> or <code>GetInsightSelectors</code> request is not
- *          valid, or the specified insight type in the <code>InsightSelectors</code> statement is not
- *          a valid insight type.</p>
+ *  <p>For <code>PutInsightSelectors</code>, this exception is thrown when the formatting or syntax of the <code>InsightSelectors</code> JSON statement is not
+ *          valid, or the specified <code>InsightType</code> in the <code>InsightSelectors</code> statement is not
+ *          valid. Valid values for <code>InsightType</code> are <code>ApiCallRateInsight</code> and <code>ApiErrorRateInsight</code>. To enable Insights on an event data store, the destination event data store specified by the
+ *          <code>InsightsDestination</code> parameter must log Insights events and the source event data
+ *          store specified by the <code>EventDataStore</code> parameter must log management events.</p>
+ *          <p>For <code>UpdateEventDataStore</code>, this exception is thrown if Insights are enabled on the event data store and the updated
+ *          advanced event selectors are not compatible with the configured <code>InsightSelectors</code>.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiCallRateInsight</code>, the source event data store must log <code>write</code> management events.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiErrorRateInsight</code>, the source event data store must log management events.</p>
+ *
+ * @throws {@link InvalidParameterCombinationException} (client fault)
+ *  <p>This exception is thrown when the combination of parameters provided is not
+ *          valid.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The request includes a parameter that is not valid.</p>
  *
  * @throws {@link InvalidTrailNameException} (client fault)
  *  <p>This exception is thrown when the provided trail name is not valid. Trail names must

package/dist-types/commands/RegisterOrganizationDelegatedAdminCommand.d.ts

@@ -23,8 +23,7 @@ export interface RegisterOrganizationDelegatedAdminCommandOutput extends Registe
 }
 /**
  * @public
- * <p>Registers an organization’s member account as the CloudTrail delegated
- *          administrator.</p>
+ * <p>Registers an organization’s member account as the CloudTrail <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-delegated-administrator.html">delegated administrator</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/RemoveTagsCommand.d.ts

@@ -59,12 +59,9 @@ export interface RemoveTagsCommandOutput extends RemoveTagsResponse, __MetadataB
  *  <p>This exception is thrown when CloudTrail cannot find the specified channel.</p>
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/StartLoggingCommand.d.ts

@@ -49,12 +49,9 @@ export interface StartLoggingCommandOutput extends StartLoggingResponse, __Metad
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/StopLoggingCommand.d.ts

@@ -52,12 +52,9 @@ export interface StopLoggingCommandOutput extends StopLoggingResponse, __Metadat
  * @see {@link CloudTrailClientResolvedConfig | config} for CloudTrailClient's `config` shape.
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/commands/UpdateEventDataStoreCommand.d.ts

@@ -29,9 +29,8 @@ export interface UpdateEventDataStoreCommandOutput extends UpdateEventDataStoreR
  *             <code>RetentionPeriod</code> is in days, and valid values are integers between 90 and
  *          2557. By default, <code>TerminationProtection</code> is enabled.</p>
  *          <p>For event data stores for CloudTrail events, <code>AdvancedEventSelectors</code>
- *          includes or excludes management and data events in your event data store. For more
- *          information about <code>AdvancedEventSelectors</code>, see
- *          <a href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html">AdvancedEventSelectors</a>.</p>
+ *          includes or excludes management, data, or Insights events in your event data store. For more
+ *          information about <code>AdvancedEventSelectors</code>, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html">AdvancedEventSelectors</a>.</p>
  *          <p> For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events,
  *             <code>AdvancedEventSelectors</code> includes events of that type in your event data store.</p>
  * @example
@@ -183,6 +182,17 @@ export interface UpdateEventDataStoreCommandOutput extends UpdateEventDataStoreR
  *             </li>
  *          </ul>
  *
+ * @throws {@link InvalidInsightSelectorsException} (client fault)
+ *  <p>For <code>PutInsightSelectors</code>, this exception is thrown when the formatting or syntax of the <code>InsightSelectors</code> JSON statement is not
+ *          valid, or the specified <code>InsightType</code> in the <code>InsightSelectors</code> statement is not
+ *          valid. Valid values for <code>InsightType</code> are <code>ApiCallRateInsight</code> and <code>ApiErrorRateInsight</code>. To enable Insights on an event data store, the destination event data store specified by the
+ *          <code>InsightsDestination</code> parameter must log Insights events and the source event data
+ *          store specified by the <code>EventDataStore</code> parameter must log management events.</p>
+ *          <p>For <code>UpdateEventDataStore</code>, this exception is thrown if Insights are enabled on the event data store and the updated
+ *          advanced event selectors are not compatible with the configured <code>InsightSelectors</code>.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiCallRateInsight</code>, the source event data store must log <code>write</code> management events.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiErrorRateInsight</code>, the source event data store must log management events.</p>
+ *
  * @throws {@link InvalidKmsKeyIdException} (client fault)
  *  <p>This exception is thrown when the KMS key ARN is not valid.</p>
  *

package/dist-types/commands/UpdateTrailCommand.d.ts

@@ -78,12 +78,9 @@ export interface UpdateTrailCommandOutput extends UpdateTrailResponse, __Metadat
  *  <p>This exception is thrown when trusted access has not been enabled between CloudTrail and Organizations. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Enabling Trusted Access with Other Amazon Web Services Services</a> and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a>. </p>
  *
  * @throws {@link CloudTrailARNInvalidException} (client fault)
- *  <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ *  <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>

package/dist-types/index.d.ts

@@ -21,6 +21,8 @@
 export * from "./CloudTrailClient";
 export * from "./CloudTrail";
 export { ClientInputEndpointParameters } from "./endpoint/EndpointParameters";
+export { RuntimeExtension } from "./runtimeExtensions";
+export { CloudTrailExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export * from "./pagination";
 export * from "./models";

package/dist-types/models/models_0.d.ts

@@ -159,12 +159,9 @@ export declare class ChannelNotFoundException extends __BaseException {
 }
 /**
  * @public
- * <p>This exception is thrown when an operation is called with a trail ARN that is not valid.
- *          The following is the format of a trail ARN.</p>
- *          <p>
- *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+ * <p>This exception is thrown when an operation is called with an ARN that is not valid.</p>
+ *          <p>The following is the format of a trail ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
  *          </p>
- *          <p>This exception is also thrown when you call <code>AddTags</code> or <code>RemoveTags</code> on a trail, event data store, or channel with a resource ARN that is not valid.</p>
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>
@@ -467,8 +464,9 @@ export interface AdvancedFieldSelector {
      *                   <b>
      *                      <code>eventSource</code>
      *                   </b> - For filtering
-     *                management events only. This can be set only to <code>NotEquals</code>
-     *                   <code>kms.amazonaws.com</code>.</p>
+     *                management events only. This can be set to <code>NotEquals</code>
+     *                   <code>kms.amazonaws.com</code> or <code>NotEquals</code>
+     *                   <code>rdsdata.amazonaws.com</code>.</p>
      *             </li>
      *             <li>
      *                <p>
@@ -495,6 +493,12 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                      For CloudTrail Insights event records, the value
+     *                      must be <code>Insight</code>.
+     *                   </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                      For Config
      *                      configuration items, the value must be <code>ConfigurationItem</code>.
      *                   </p>
@@ -542,6 +546,11 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                         <code>AWS::CodeWhisperer::Customization</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                         <code>AWS::CodeWhisperer::Profile</code>
      *                      </p>
      *                   </li>
@@ -587,6 +596,11 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                         <code>AWS::KinesisVideo::Stream</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                         <code>AWS::ManagedBlockchain::Network</code>
      *                      </p>
      *                   </li>
@@ -602,6 +616,16 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                         <code>AWS::PCAConnectorAD::Connector</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <code>AWS::SageMaker::Endpoint</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                         <code>AWS::SageMaker::ExperimentTrialComponent</code>
      *                      </p>
      *                   </li>
@@ -612,6 +636,16 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                         <code>AWS::SNS::PlatformEndpoint</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <code>AWS::SNS::Topic</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                         <code>AWS::S3::AccessPoint</code>
      *                      </p>
      *                   </li>
@@ -632,6 +666,16 @@ export interface AdvancedFieldSelector {
      *                   </li>
      *                   <li>
      *                      <p>
+     *                         <code>AWS::Timestream::Database</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <code>AWS::Timestream::Table</code>
+     *                      </p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
      *                         <code>AWS::VerifiedPermissions::PolicyStore</code>
      *                      </p>
      *                   </li>
@@ -695,6 +739,16 @@ export interface AdvancedFieldSelector {
      *                      </p>
      *                   </li>
      *                </ul>
+     *                <p>When resources.type equals <code>AWS::CodeWhisperer::Customization</code>, and the operator is
+     *                set to <code>Equals</code> or <code>NotEquals</code>, the ARN must be in the
+     *                following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:codewhisperer:<region>:<account_ID>:customization/<customization_ID></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
      *                <p>When resources.type equals <code>AWS::CodeWhisperer::Profile</code>, and the operator is
      *                set to <code>Equals</code> or <code>NotEquals</code>, the ARN must be in the
      *                following format:</p>
@@ -785,6 +839,16 @@ export interface AdvancedFieldSelector {
      *                      </p>
      *                   </li>
      *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::KinesisVideo::Stream</code>, and the
+     *                operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN must be in
+     *                the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:kinesisvideo:<region>:<account_ID>:stream/<stream_name/<creation_time></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
      *                <p>When <code>resources.type</code> equals <code>AWS::ManagedBlockchain::Network</code>,
      *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
      *                must be in the following format:</p>
@@ -815,6 +879,25 @@ export interface AdvancedFieldSelector {
      *                      </p>
      *                   </li>
      *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::PCAConnectorAD::Connector</code>,
+     *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
+     *                must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:pca-connector-ad:<region>:<account_ID>:connector/<connector_ID></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::SageMaker::Endpoint</code>, and the operator is set to
+     *                <code>Equals</code> or <code>NotEquals</code>, the ARN must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:sagemaker:<region>:<account_ID>:endpoint/<endpoint_name></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
      *                <p>When <code>resources.type</code> equals <code>AWS::SageMaker::ExperimentTrialComponent</code>, and the operator is set to
      *                <code>Equals</code> or <code>NotEquals</code>, the ARN must be in the following format:</p>
      *                <ul>
@@ -833,6 +916,26 @@ export interface AdvancedFieldSelector {
      *                      </p>
      *                   </li>
      *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::SNS::PlatformEndpoint</code>,
+     *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
+     *                must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:sns:<region>:<account_ID>:endpoint/<endpoint_type>/<endpoint_name>/<endpoint_ID></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::SNS::Topic</code>,
+     *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
+     *                must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:sns:<region>:<account_ID>:<topic_name></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
      *                <p>When <code>resources.type</code> equals <code>AWS::S3::AccessPoint</code>, and the
      *                operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN must be in
      *                one of the following formats. To log events on all objects in an S3 access point, we
@@ -881,6 +984,26 @@ export interface AdvancedFieldSelector {
      *                      </p>
      *                   </li>
      *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::Timestream::Database</code>,
+     *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
+     *                must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:timestream:<region>:<account_ID>:database/<database_name></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
+     *                <p>When <code>resources.type</code> equals <code>AWS::Timestream::Table</code>,
+     *                and the operator is set to <code>Equals</code> or <code>NotEquals</code>, the ARN
+     *                must be in the following format:</p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <code>arn:<partition>:timestream:<region>:<account_ID>:database/<database_name>/table/<table_name></code>
+     *                      </p>
+     *                   </li>
+     *                </ul>
      *                <p>When resources.type equals <code>AWS::VerifiedPermissions::PolicyStore</code>, and the operator is
      *                set to <code>Equals</code> or <code>NotEquals</code>, the ARN must be in the
      *                following format:</p>
@@ -1848,6 +1971,9 @@ export interface CreateTrailRequest {
      *          represents the log group to which CloudTrail logs will be delivered. You must use a
      *          log group that exists in your account.</p>
      *          <p>Not required unless you specify <code>CloudWatchLogsRoleArn</code>.</p>
+     *          <note>
+     *             <p>Only the management account can configure a CloudWatch Logs log group for an organization trail. </p>
+     *          </note>
      */
     CloudWatchLogsLogGroupArn?: string;
     /**
@@ -3059,6 +3185,11 @@ export interface DataResource {
      *             </li>
      *             <li>
      *                <p>
+     *                   <code>AWS::CodeWhisperer::Customization</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
      *                   <code>AWS::CodeWhisperer::Profile</code>
      *                </p>
      *             </li>
@@ -3104,6 +3235,11 @@ export interface DataResource {
      *             </li>
      *             <li>
      *                <p>
+     *                   <code>AWS::KinesisVideo::Stream</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
      *                   <code>AWS::ManagedBlockchain::Network</code>
      *                </p>
      *             </li>
@@ -3119,6 +3255,16 @@ export interface DataResource {
      *             </li>
      *             <li>
      *                <p>
+     *                   <code>AWS::PCAConnectorAD::Connector</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>AWS::SageMaker::Endpoint</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
      *                   <code>AWS::SageMaker::ExperimentTrialComponent</code>
      *                </p>
      *             </li>
@@ -3129,6 +3275,16 @@ export interface DataResource {
      *             </li>
      *             <li>
      *                <p>
+     *                   <code>AWS::SNS::PlatformEndpoint</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>AWS::SNS::Topic</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
      *                   <code>AWS::S3::AccessPoint</code>
      *                </p>
      *             </li>
@@ -3149,6 +3305,16 @@ export interface DataResource {
      *             </li>
      *             <li>
      *                <p>
+     *                   <code>AWS::Timestream::Database</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>AWS::Timestream::Table</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
      *                   <code>AWS::VerifiedPermissions::PolicyStore</code>
      *                </p>
      *             </li>
@@ -3489,8 +3655,18 @@ export interface GetInsightSelectorsRequest {
      *          <p>
      *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
      *          </p>
+     *          <p>You cannot use this parameter with the <code>EventDataStore</code> parameter.</p>
      */
-    TrailName: string | undefined;
+    TrailName?: string;
+    /**
+     * @public
+     * <p>
+     *          Specifies the ARN (or ID suffix of the ARN) of the event data store for which you want to get Insights
+     *          selectors.
+     *       </p>
+     *          <p>You cannot use this parameter with the <code>TrailName</code> parameter.</p>
+     */
+    EventDataStore?: string;
 }
 /**
  * @public
@@ -3506,12 +3682,12 @@ export declare const InsightType: {
 export type InsightType = (typeof InsightType)[keyof typeof InsightType];
 /**
  * @public
- * <p>A JSON string that contains a list of Insights types that are logged on a trail.</p>
+ * <p>A JSON string that contains a list of Insights types that are logged on a trail or event data store.</p>
  */
 export interface InsightSelector {
     /**
      * @public
-     * <p>The type of Insights events to log on a trail. <code>ApiCallRateInsight</code> and
+     * <p>The type of Insights events to log on a trail or event data store. <code>ApiCallRateInsight</code> and
      *             <code>ApiErrorRateInsight</code> are valid Insight types.</p>
      *          <p>The <code>ApiCallRateInsight</code> Insights type analyzes write-only
      *          management API calls that are aggregated per minute against a baseline API call volume.</p>
@@ -3533,15 +3709,28 @@ export interface GetInsightSelectorsResponse {
     TrailARN?: string;
     /**
      * @public
-     * <p>A JSON string that contains the insight types you want to log on a trail. In this
-     *          release, <code>ApiErrorRateInsight</code> and <code>ApiCallRateInsight</code> are supported
-     *          as insight types.</p>
+     * <p>A JSON string that contains the Insight types you want to log on a trail or event data store. <code>ApiErrorRateInsight</code> and <code>ApiCallRateInsight</code> are supported
+     *          as Insights types.</p>
      */
     InsightSelectors?: InsightSelector[];
+    /**
+     * @public
+     * <p>
+     *          The ARN of the source event data store that enabled Insights events.
+     *       </p>
+     */
+    EventDataStoreArn?: string;
+    /**
+     * @public
+     * <p>
+     *          The ARN of the destination event data store that logs Insights events.
+     *       </p>
+     */
+    InsightsDestination?: string;
 }
 /**
  * @public
- * <p>If you run <code>GetInsightSelectors</code> on a trail that does not have Insights
+ * <p>If you run <code>GetInsightSelectors</code> on a trail or event data store that does not have Insights
  *          events enabled, the operation throws the exception
  *          <code>InsightNotEnabledException</code>.</p>
  */
@@ -4799,10 +4988,15 @@ export interface PutEventSelectorsResponse {
 }
 /**
  * @public
- * <p>The formatting or syntax of the <code>InsightSelectors</code> JSON statement in your
- *             <code>PutInsightSelectors</code> or <code>GetInsightSelectors</code> request is not
- *          valid, or the specified insight type in the <code>InsightSelectors</code> statement is not
- *          a valid insight type.</p>
+ * <p>For <code>PutInsightSelectors</code>, this exception is thrown when the formatting or syntax of the <code>InsightSelectors</code> JSON statement is not
+ *          valid, or the specified <code>InsightType</code> in the <code>InsightSelectors</code> statement is not
+ *          valid. Valid values for <code>InsightType</code> are <code>ApiCallRateInsight</code> and <code>ApiErrorRateInsight</code>. To enable Insights on an event data store, the destination event data store specified by the
+ *          <code>InsightsDestination</code> parameter must log Insights events and the source event data
+ *          store specified by the <code>EventDataStore</code> parameter must log management events.</p>
+ *          <p>For <code>UpdateEventDataStore</code>, this exception is thrown if Insights are enabled on the event data store and the updated
+ *          advanced event selectors are not compatible with the configured <code>InsightSelectors</code>.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiCallRateInsight</code>, the source event data store must log <code>write</code> management events.
+ *          If the <code>InsightSelectors</code> includes an <code>InsightType</code> of <code>ApiErrorRateInsight</code>, the source event data store must log management events.</p>
  */
 export declare class InvalidInsightSelectorsException extends __BaseException {
     readonly name: "InvalidInsightSelectorsException";
@@ -4825,11 +5019,12 @@ export interface PutInsightSelectorsRequest {
      * @public
      * <p>The name of the CloudTrail trail for which you want to change or add Insights
      *          selectors.</p>
+     *          <p>You cannot use this parameter with the <code>EventDataStore</code> and <code>InsightsDestination</code> parameters.</p>
      */
-    TrailName: string | undefined;
+    TrailName?: string;
     /**
      * @public
-     * <p>A JSON string that contains the insight types you want to log on a trail.
+     * <p>A JSON string that contains the Insights types you want to log on a trail or event data store.
      *             <code>ApiCallRateInsight</code> and <code>ApiErrorRateInsight</code> are valid Insight
      *          types.</p>
      *          <p>The <code>ApiCallRateInsight</code> Insights type analyzes write-only
@@ -4839,6 +5034,23 @@ export interface PutInsightSelectorsRequest {
      *          unsuccessful.</p>
      */
     InsightSelectors: InsightSelector[] | undefined;
+    /**
+     * @public
+     * <p>The ARN (or ID suffix of the ARN) of the source event data store for which you want to change or add Insights
+     *          selectors. To enable Insights on an event data store, you must provide both the
+     *          <code>EventDataStore</code> and <code>InsightsDestination</code> parameters.</p>
+     *          <p>You cannot use this parameter with the <code>TrailName</code> parameter.</p>
+     */
+    EventDataStore?: string;
+    /**
+     * @public
+     * <p>
+     *          The ARN (or ID suffix of the ARN) of the destination event data store that logs Insights events. To enable Insights on an event data store, you must provide both the
+     *          <code>EventDataStore</code> and <code>InsightsDestination</code> parameters.
+     *       </p>
+     *          <p>You cannot use this parameter with the <code>TrailName</code> parameter.</p>
+     */
+    InsightsDestination?: string;
 }
 /**
  * @public
@@ -4852,11 +5064,24 @@ export interface PutInsightSelectorsResponse {
     TrailARN?: string;
     /**
      * @public
-     * <p>A JSON string that contains the Insights event types that you want to log on a trail.
-     *          The valid Insights types in this release are <code>ApiErrorRateInsight</code> and
+     * <p>A JSON string that contains the Insights event types that you want to log on a trail or event data store.
+     *          The valid Insights types are <code>ApiErrorRateInsight</code> and
      *             <code>ApiCallRateInsight</code>.</p>
      */
     InsightSelectors?: InsightSelector[];
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the source event data store for which you want to change or add Insights
+     *          selectors.</p>
+     */
+    EventDataStoreArn?: string;
+    /**
+     * @public
+     * <p>
+     *             The ARN of the destination event data store that logs Insights events.
+     *       </p>
+     */
+    InsightsDestination?: string;
 }
 /**
  * @public
@@ -5523,6 +5748,10 @@ export interface UpdateEventDataStoreRequest {
      * @public
      * <p>Specifies whether an event data store collects events logged for an organization in
      *             Organizations.</p>
+     *          <note>
+     *             <p>Only the management account for the organization can convert an organization event data store to a non-organization event data store, or convert a non-organization event data store to
+     *          an organization event data store.</p>
+     *          </note>
      */
     OrganizationEnabled?: boolean;
     /**
@@ -5743,6 +5972,9 @@ export interface UpdateTrailRequest {
      *          represents the log group to which CloudTrail logs are delivered. You must use a log
      *          group that exists in your account.</p>
      *          <p>Not required unless you specify <code>CloudWatchLogsRoleArn</code>.</p>
+     *          <note>
+     *             <p>Only the management account can configure a CloudWatch Logs log group for an organization trail. </p>
+     *          </note>
      */
     CloudWatchLogsLogGroupArn?: string;
     /**
@@ -5779,11 +6011,15 @@ export interface UpdateTrailRequest {
      * @public
      * <p>Specifies whether the trail is applied to all accounts in an organization in Organizations, or only for the current Amazon Web Services account. The default is false,
      *          and cannot be true unless the call is made on behalf of an Amazon Web Services account that
-     *          is the management account or delegated administrator account for an organization in Organizations. If the trail is not an organization trail and this is set to
+     *          is the management account for an organization in Organizations. If the trail is not an organization trail and this is set to
      *             <code>true</code>, the trail will be created in all Amazon Web Services accounts that
      *          belong to the organization. If the trail is an organization trail and this is set to
      *             <code>false</code>, the trail will remain in the current Amazon Web Services account but
      *          be deleted from all member accounts in the organization.</p>
+     *          <note>
+     *             <p>Only the management account for the organization can convert an organization trail to a non-organization trail, or convert a non-organization trail to
+     *             an organization trail.</p>
+     *          </note>
      */
     IsOrganizationTrail?: boolean;
 }

package/dist-types/ts3.4/index.d.ts

@@ -1,6 +1,8 @@
 export * from "./CloudTrailClient";
 export * from "./CloudTrail";
 export { ClientInputEndpointParameters } from "./endpoint/EndpointParameters";
+export { RuntimeExtension } from "./runtimeExtensions";
+export { CloudTrailExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export * from "./pagination";
 export * from "./models";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -901,7 +901,8 @@ export declare class ImportNotFoundException extends __BaseException {
   );
 }
 export interface GetInsightSelectorsRequest {
-  TrailName: string | undefined;
+  TrailName?: string;
+  EventDataStore?: string;
 }
 export declare const InsightType: {
   readonly ApiCallRateInsight: "ApiCallRateInsight";
@@ -914,6 +915,8 @@ export interface InsightSelector {
 export interface GetInsightSelectorsResponse {
   TrailARN?: string;
   InsightSelectors?: InsightSelector[];
+  EventDataStoreArn?: string;
+  InsightsDestination?: string;
 }
 export declare class InsightNotEnabledException extends __BaseException {
   readonly name: "InsightNotEnabledException";
@@ -1236,12 +1239,16 @@ export declare class InvalidInsightSelectorsException extends __BaseException {
   );
 }
 export interface PutInsightSelectorsRequest {
-  TrailName: string | undefined;
+  TrailName?: string;
   InsightSelectors: InsightSelector[] | undefined;
+  EventDataStore?: string;
+  InsightsDestination?: string;
 }
 export interface PutInsightSelectorsResponse {
   TrailARN?: string;
   InsightSelectors?: InsightSelector[];
+  EventDataStoreArn?: string;
+  InsightsDestination?: string;
 }
 export interface PutResourcePolicyRequest {
   ResourceArn: string | undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-cloudtrail",
   "description": "AWS SDK for JavaScript Cloudtrail Client for Node.js, Browser and React Native",
-  "version": "3.441.0",
+  "version": "3.448.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,9 +21,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.441.0",
-    "@aws-sdk/core": "3.441.0",
-    "@aws-sdk/credential-provider-node": "3.441.0",
+    "@aws-sdk/client-sts": "3.445.0",
+    "@aws-sdk/core": "3.445.0",
+    "@aws-sdk/credential-provider-node": "3.445.0",
     "@aws-sdk/middleware-host-header": "3.433.0",
     "@aws-sdk/middleware-logger": "3.433.0",
     "@aws-sdk/middleware-recursion-detection": "3.433.0",