@aws-sdk/client-cloudtrail 3.693.0 → 3.698.0

package/dist-types/models/models_0.d.ts

@@ -92,7 +92,7 @@ export declare class AccountRegisteredException extends __BaseException {
 }
 /**
  * <p>A custom key-value pair associated with a resource such as a CloudTrail
- *          trail, event data store, or channel.</p>
+ *          trail, event data store, dashboard, or channel.</p>
  * @public
  */
 export interface Tag {
@@ -110,12 +110,12 @@ export interface Tag {
     Value?: string | undefined;
 }
 /**
- * <p>Specifies the tags to add to a trail, event data store, or channel.</p>
+ * <p>Specifies the tags to add to a trail, event data store, dashboard, or channel.</p>
  * @public
  */
 export interface AddTagsRequest {
     /**
-     * <p>Specifies the ARN of the trail, event data store, or channel to which one or more tags will be
+     * <p>Specifies the ARN of the trail, event data store, dashboard, or channel to which one or more tags will be
      *          added.</p>
      *          <p>The format of a trail ARN is:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
@@ -123,6 +123,8 @@ export interface AddTagsRequest {
      *          <p>The format of an event data store ARN is:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
      *          </p>
+     *          <p>The format of a dashboard ARN is: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
      *          <p>The format of a channel ARN is:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
      *          </p>
@@ -183,6 +185,8 @@ export declare class ChannelNotFoundException extends __BaseException {
  *          <p>The following is the format of an event data store ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
  *          </p>
+ *          <p>The following is the format of a dashboard ARN: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+ *          </p>
  *          <p>The following is the format of a channel ARN:
  *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
  *          </p>
@@ -417,7 +421,7 @@ export declare class ResourceTypeNotSupportedException extends __BaseException {
     constructor(opts: __ExceptionOptionType<ResourceTypeNotSupportedException, __BaseException>);
 }
 /**
- * <p>The number of tags per trail, event data store, or channel has exceeded the permitted amount. Currently, the limit is
+ * <p>The number of tags per trail, event data store, dashboard, or channel has exceeded the permitted amount. Currently, the limit is
  *          50.</p>
  * @public
  */
@@ -877,6 +881,13 @@ export interface CancelQueryRequest {
      * @public
      */
     QueryId: string | undefined;
+    /**
+     * <p>
+     * The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * @public
@@ -909,6 +920,13 @@ export interface CancelQueryResponse {
      * @public
      */
     QueryStatus: QueryStatus | undefined;
+    /**
+     * <p>
+     *    The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * <p>The specified query cannot be canceled because it is in the <code>FINISHED</code>,
@@ -1181,6 +1199,329 @@ export declare class InvalidSourceException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<InvalidSourceException, __BaseException>);
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const RefreshScheduleFrequencyUnit: {
+    readonly DAYS: "DAYS";
+    readonly HOURS: "HOURS";
+};
+/**
+ * @public
+ */
+export type RefreshScheduleFrequencyUnit = (typeof RefreshScheduleFrequencyUnit)[keyof typeof RefreshScheduleFrequencyUnit];
+/**
+ * <p>
+ * Specifies the frequency for a dashboard refresh schedule.
+ * </p>
+ *          <p>
+ *       For a custom dashboard, you can schedule a refresh for every 1, 6, 12, or 24 hours, or every day.
+ *    </p>
+ * @public
+ */
+export interface RefreshScheduleFrequency {
+    /**
+     * <p>
+     *    The unit to use for the refresh.
+     * </p>
+     *          <p>For custom dashboards, the unit can be <code>HOURS</code> or <code>DAYS</code>.</p>
+     *          <p>For the Highlights dashboard, the <code>Unit</code> must be <code>HOURS</code>.</p>
+     * @public
+     */
+    Unit?: RefreshScheduleFrequencyUnit | undefined;
+    /**
+     * <p>
+     * The value for the refresh schedule.
+     * </p>
+     *          <p>
+     *    For custom dashboards, the following values are valid when the unit is <code>HOURS</code>: <code>1</code>, <code>6</code>, <code>12</code>, <code>24</code>
+     *          </p>
+     *          <p>For custom dashboards, the only valid value when the unit is <code>DAYS</code> is <code>1</code>.</p>
+     *          <p>For the Highlights dashboard, the <code>Value</code> must be <code>6</code>.</p>
+     * @public
+     */
+    Value?: number | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RefreshScheduleStatus: {
+    readonly DISABLED: "DISABLED";
+    readonly ENABLED: "ENABLED";
+};
+/**
+ * @public
+ */
+export type RefreshScheduleStatus = (typeof RefreshScheduleStatus)[keyof typeof RefreshScheduleStatus];
+/**
+ * <p>
+ * The schedule for a dashboard refresh.
+ * </p>
+ * @public
+ */
+export interface RefreshSchedule {
+    /**
+     * <p>
+     * The frequency at which you want the dashboard refreshed.
+     * </p>
+     * @public
+     */
+    Frequency?: RefreshScheduleFrequency | undefined;
+    /**
+     * <p>
+     * Specifies whether the refresh schedule is enabled. Set the value to <code>ENABLED</code> to enable the refresh schedule, or to <code>DISABLED</code> to turn off the refresh schedule.
+     * </p>
+     * @public
+     */
+    Status?: RefreshScheduleStatus | undefined;
+    /**
+     * <p>
+     *    The time of day in UTC to run the schedule; for hourly only refer to minutes; default is 00:00.
+     * </p>
+     * @public
+     */
+    TimeOfDay?: string | undefined;
+}
+/**
+ * <p>
+ * Contains information about a widget on a CloudTrail Lake dashboard.
+ * </p>
+ * @public
+ */
+export interface RequestWidget {
+    /**
+     * <p>
+     * The query statement for the widget. For custom dashboard widgets, you can query across multiple event data stores as long as all event data stores exist in your account.
+     * </p>
+     *          <note>
+     *             <p>When a query uses <code>?</code> with <code>eventTime</code>, <code>?</code> must be surrounded by single quotes as follows: <code>'?'</code>.</p>
+     *          </note>
+     * @public
+     */
+    QueryStatement: string | undefined;
+    /**
+     * <p>
+     *    The optional query parameters. The following query parameters are valid: <code>$StartTime$</code>, <code>$EndTime$</code>, and <code>$Period$</code>.
+     * </p>
+     * @public
+     */
+    QueryParameters?: string[] | undefined;
+    /**
+     * <p>
+     *    The view properties for the widget. For more information about view properties, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-widget-properties.html">
+     *       View properties for widgets
+     *    </a> in the <i>CloudTrail User Guide</i>.
+     * </p>
+     * @public
+     */
+    ViewProperties: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDashboardRequest {
+    /**
+     * <p>
+     *    The name of the dashboard. The name must be unique to your account.
+     * </p>
+     *          <p>To create the Highlights dashboard, the name must be <code>AWSCloudTrail-Highlights</code>.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>
+     *    The refresh schedule configuration for the dashboard.
+     * </p>
+     *          <p>To create the Highlights dashboard, you must set a refresh schedule and set the <code>Status</code> to <code>ENABLED</code>. The <code>Unit</code> for the refresh schedule must be <code>HOURS</code>
+     *    and the <code>Value</code> must be <code>6</code>.</p>
+     * @public
+     */
+    RefreshSchedule?: RefreshSchedule | undefined;
+    /**
+     * <p>A list of tags.</p>
+     * @public
+     */
+    TagsList?: Tag[] | undefined;
+    /**
+     * <p>
+     *    Specifies whether termination protection is enabled for the dashboard. If termination protection is enabled, you cannot delete the dashboard until termination protection is disabled.
+     * </p>
+     * @public
+     */
+    TerminationProtectionEnabled?: boolean | undefined;
+    /**
+     * <p>
+     * An array of widgets for a custom dashboard. A custom dashboard can have a maximum of ten widgets.
+     * </p>
+     *          <p>You do not need to specify widgets for the Highlights dashboard.</p>
+     * @public
+     */
+    Widgets?: RequestWidget[] | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const DashboardType: {
+    readonly CUSTOM: "CUSTOM";
+    readonly MANAGED: "MANAGED";
+};
+/**
+ * @public
+ */
+export type DashboardType = (typeof DashboardType)[keyof typeof DashboardType];
+/**
+ * <p>
+ *    A widget on a CloudTrail Lake dashboard.
+ * </p>
+ * @public
+ */
+export interface Widget {
+    /**
+     * <p>The query alias used to identify the query for the widget.
+     * </p>
+     * @public
+     */
+    QueryAlias?: string | undefined;
+    /**
+     * <p>
+     * The SQL query statement for the widget.
+     * </p>
+     * @public
+     */
+    QueryStatement?: string | undefined;
+    /**
+     * <p>
+     *    The query parameters for the widget.
+     * </p>
+     * @public
+     */
+    QueryParameters?: string[] | undefined;
+    /**
+     * <p>
+     *    The view properties for the widget. For more information about view properties, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/lake-widget-properties.html">
+     *       View properties for widgets
+     * </a> in the <i>CloudTrail User Guide</i>..
+     * </p>
+     * @public
+     */
+    ViewProperties?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDashboardResponse {
+    /**
+     * <p>
+     * The ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardArn?: string | undefined;
+    /**
+     * <p>
+     * The name of the dashboard.
+     * </p>
+     * @public
+     */
+    Name?: string | undefined;
+    /**
+     * <p>
+     * The dashboard type.
+     * </p>
+     * @public
+     */
+    Type?: DashboardType | undefined;
+    /**
+     * <p>
+     * An array of widgets for the dashboard.
+     * </p>
+     * @public
+     */
+    Widgets?: Widget[] | undefined;
+    /**
+     * <p>A list of tags.</p>
+     * @public
+     */
+    TagsList?: Tag[] | undefined;
+    /**
+     * <p>
+     * The refresh schedule for the dashboard, if configured.
+     * </p>
+     * @public
+     */
+    RefreshSchedule?: RefreshSchedule | undefined;
+    /**
+     * <p>
+     *    Indicates whether termination protection is enabled for the dashboard.
+     * </p>
+     * @public
+     */
+    TerminationProtectionEnabled?: boolean | undefined;
+}
+/**
+ * <p>For the <code>CreateTrail</code>
+ *             <code>PutInsightSelectors</code>, <code>UpdateTrail</code>, <code>StartQuery</code>, and <code>StartImport</code> operations, this exception is thrown
+ *          when the policy on the S3 bucket or KMS key does
+ *          not have sufficient permissions for the operation.</p>
+ *          <p>For all other operations, this exception is thrown when the policy for the KMS key does
+ *          not have sufficient permissions for the operation.</p>
+ * @public
+ */
+export declare class InsufficientEncryptionPolicyException extends __BaseException {
+    readonly name: "InsufficientEncryptionPolicyException";
+    readonly $fault: "client";
+    /**
+     * <p>Brief description of the exception returned by the request.</p>
+     * @public
+     */
+    Message?: string | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
+}
+/**
+ * <p>The query that was submitted has validation errors, or uses incorrect syntax or
+ *          unsupported keywords. For more information about writing a query, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-create-edit-query.html">Create or edit a query</a> in the <i>CloudTrail User
+ *             Guide</i>.</p>
+ * @public
+ */
+export declare class InvalidQueryStatementException extends __BaseException {
+    readonly name: "InvalidQueryStatementException";
+    readonly $fault: "client";
+    /**
+     * <p>Brief description of the exception returned by the request.</p>
+     * @public
+     */
+    Message?: string | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidQueryStatementException, __BaseException>);
+}
+/**
+ * <p>
+ *    This exception is thrown when the quota is exceeded. For information about CloudTrail quotas, see <a href="https://docs.aws.amazon.com/general/latest/gr/ct.html#limits_cloudtrail">Service quotas</a>
+ *    in the <i>Amazon Web Services General Reference</i>.
+ * </p>
+ * @public
+ */
+export declare class ServiceQuotaExceededException extends __BaseException {
+    readonly name: "ServiceQuotaExceededException";
+    readonly $fault: "client";
+    /**
+     * <p>Brief description of the exception returned by the request.</p>
+     * @public
+     */
+    Message?: string | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
+}
 /**
  * <p>This exception is thrown when trusted access has not been enabled between CloudTrail and Organizations. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_how-to-enable-disable-trusted-access">How to enable or disable trusted access</a> in the <i>Organizations User Guide</i> and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html">Prepare For Creating a Trail For Your Organization</a> in the <i>CloudTrail User Guide</i>.</p>
  * @public
@@ -1478,24 +1819,6 @@ export declare class InsufficientDependencyServiceAccessPermissionException exte
      */
     constructor(opts: __ExceptionOptionType<InsufficientDependencyServiceAccessPermissionException, __BaseException>);
 }
-/**
- * <p>This exception is thrown when the policy on the S3 bucket or KMS key does
- *          not have sufficient permissions for the operation.</p>
- * @public
- */
-export declare class InsufficientEncryptionPolicyException extends __BaseException {
-    readonly name: "InsufficientEncryptionPolicyException";
-    readonly $fault: "client";
-    /**
-     * <p>Brief description of the exception returned by the request.</p>
-     * @public
-     */
-    Message?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InsufficientEncryptionPolicyException, __BaseException>);
-}
 /**
  * <p>This exception is thrown when the <code>PutEventSelectors</code> operation is called
  *          with a number of event selectors, advanced event selectors, or data resources that is not
@@ -2155,6 +2478,23 @@ export interface DeleteChannelRequest {
  */
 export interface DeleteChannelResponse {
 }
+/**
+ * @public
+ */
+export interface DeleteDashboardRequest {
+    /**
+     * <p>
+     * The name or ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardId: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteDashboardResponse {
+}
 /**
  * @public
  */
@@ -2232,10 +2572,15 @@ export declare class EventDataStoreTerminationProtectedException extends __BaseE
 export interface DeleteResourcePolicyRequest {
     /**
      * <p>
-     *          The Amazon Resource Name (ARN) of the CloudTrail channel you're deleting the resource-based policy from.
-     *          The following is the format of a resource ARN:
-     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel</code>.
-     *       </p>
+     *          The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel you're deleting the resource-based policy from.</p>
+     *          <p>Example event data store ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+     *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
+     *          <p>Example channel ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+     *          </p>
      * @public
      */
     ResourceArn: string | undefined;
@@ -2247,9 +2592,16 @@ export interface DeleteResourcePolicyResponse {
 }
 /**
  * <p>
- *          This exception is thrown when the provided resource does not exist, or the ARN format of the resource is not valid. The following is the valid format for a resource ARN:
- *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel</code>.
+ *          This exception is thrown when the provided resource does not exist, or the ARN format of the resource is not valid.
  *       </p>
+ *          <p>The following is the format of an event data store ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+ *          </p>
+ *          <p>The following is the format of a dashboard ARN: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+ *          </p>
+ *          <p>The following is the format of a channel ARN:
+ *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+ *          </p>
  * @public
  */
 export declare class ResourceARNNotValidException extends __BaseException {
@@ -2402,6 +2754,20 @@ export interface DescribeQueryRequest {
      * @public
      */
     QueryAlias?: string | undefined;
+    /**
+     * <p>
+     * The ID of the dashboard refresh.
+     * </p>
+     * @public
+     */
+    RefreshId?: string | undefined;
+    /**
+     * <p>
+     * The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * @public
@@ -2511,6 +2877,13 @@ export interface DescribeQueryResponse {
      * @public
      */
     Prompt?: string | undefined;
+    /**
+     * <p>
+     *    The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * <p>Returns information about the trail.</p>
@@ -2830,6 +3203,13 @@ export interface GenerateQueryResponse {
      * @public
      */
     QueryAlias?: string | undefined;
+    /**
+     * <p>
+     *    The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * <p>
@@ -2925,31 +3305,133 @@ export interface GetChannelResponse {
      *             Amazon Web Services service. </p>
      * @public
      */
-    Name?: string | undefined;
+    Name?: string | undefined;
+    /**
+     * <p>The source for the CloudTrail channel.</p>
+     * @public
+     */
+    Source?: string | undefined;
+    /**
+     * <p> Provides information about the advanced event selectors configured for the channel, and
+     *          whether the channel applies to all Regions or a single Region. </p>
+     * @public
+     */
+    SourceConfig?: SourceConfig | undefined;
+    /**
+     * <p>The destinations for the channel. For channels created for integrations,
+     *          the destinations are the event data stores that log events arriving through the channel.
+     *          For service-linked channels, the destination is the Amazon Web Services service that created the service-linked channel to receive events.</p>
+     * @public
+     */
+    Destinations?: Destination[] | undefined;
+    /**
+     * <p>A table showing information about the most recent successful and failed attempts
+     *       to ingest events.</p>
+     * @public
+     */
+    IngestionStatus?: IngestionStatus | undefined;
+}
+/**
+ * @public
+ */
+export interface GetDashboardRequest {
+    /**
+     * <p>
+     * The name or ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardId: string | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const DashboardStatus: {
+    readonly CREATED: "CREATED";
+    readonly CREATING: "CREATING";
+    readonly DELETING: "DELETING";
+    readonly UPDATED: "UPDATED";
+    readonly UPDATING: "UPDATING";
+};
+/**
+ * @public
+ */
+export type DashboardStatus = (typeof DashboardStatus)[keyof typeof DashboardStatus];
+/**
+ * @public
+ */
+export interface GetDashboardResponse {
+    /**
+     * <p>
+     *    The ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardArn?: string | undefined;
+    /**
+     * <p>
+     * The type of dashboard.
+     * </p>
+     * @public
+     */
+    Type?: DashboardType | undefined;
+    /**
+     * <p>
+     * The status of the dashboard.
+     * </p>
+     * @public
+     */
+    Status?: DashboardStatus | undefined;
+    /**
+     * <p>
+     * An array of widgets for the dashboard.
+     * </p>
+     * @public
+     */
+    Widgets?: Widget[] | undefined;
+    /**
+     * <p>
+     * The refresh schedule for the dashboard, if configured.
+     * </p>
+     * @public
+     */
+    RefreshSchedule?: RefreshSchedule | undefined;
     /**
-     * <p>The source for the CloudTrail channel.</p>
+     * <p>
+     *    The timestamp that shows when the dashboard was created.
+     * </p>
      * @public
      */
-    Source?: string | undefined;
+    CreatedTimestamp?: Date | undefined;
     /**
-     * <p> Provides information about the advanced event selectors configured for the channel, and
-     *          whether the channel applies to all Regions or a single Region. </p>
+     * <p>
+     *    The timestamp that shows when the dashboard was last updated.
+     * </p>
      * @public
      */
-    SourceConfig?: SourceConfig | undefined;
+    UpdatedTimestamp?: Date | undefined;
     /**
-     * <p>The destinations for the channel. For channels created for integrations,
-     *          the destinations are the event data stores that log events arriving through the channel.
-     *          For service-linked channels, the destination is the Amazon Web Services service that created the service-linked channel to receive events.</p>
+     * <p>
+     * The ID of the last dashboard refresh.
+     * </p>
      * @public
      */
-    Destinations?: Destination[] | undefined;
+    LastRefreshId?: string | undefined;
     /**
-     * <p>A table showing information about the most recent successful and failed attempts
-     *       to ingest events.</p>
+     * <p>
+     * Provides information about failures for the last scheduled refresh.
+     * </p>
      * @public
      */
-    IngestionStatus?: IngestionStatus | undefined;
+    LastRefreshFailureReason?: string | undefined;
+    /**
+     * <p>
+     * Indicates whether termination protection is enabled for the dashboard.
+     * </p>
+     * @public
+     */
+    TerminationProtectionEnabled?: boolean | undefined;
 }
 /**
  * @public
@@ -3669,6 +4151,13 @@ export interface GetQueryResultsRequest {
      * @public
      */
     MaxQueryResults?: number | undefined;
+    /**
+     * <p>
+     * The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * <p>Metadata about a query, such as the number of results.</p>
@@ -3766,10 +4255,15 @@ export declare class InvalidNextTokenException extends __BaseException {
 export interface GetResourcePolicyRequest {
     /**
      * <p>
-     *          The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy.
-     *          The following is the format of a resource ARN:
-     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel</code>.
-     *       </p>
+     *          The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy.</p>
+     *          <p>Example event data store ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+     *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
+     *          <p>Example channel ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+     *          </p>
      * @public
      */
     ResourceArn: string | undefined;
@@ -3780,18 +4274,35 @@ export interface GetResourcePolicyRequest {
 export interface GetResourcePolicyResponse {
     /**
      * <p>
-     *          The Amazon Resource Name (ARN) of the CloudTrail channel attached to resource-based policy.
+     *          The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to resource-based policy.
      *       </p>
+     *          <p>Example event data store ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+     *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
+     *          <p>Example channel ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+     *          </p>
      * @public
      */
     ResourceArn?: string | undefined;
     /**
      * <p>
-     *          A JSON-formatted string that contains the resource-based policy attached to the CloudTrail channel.
+     *          A JSON-formatted string that contains the resource-based policy attached to the CloudTrail event data store, dashboard, or channel.
      *       </p>
      * @public
      */
     ResourcePolicy?: string | undefined;
+    /**
+     * <p>
+     *          The default resource-based policy that is automatically generated for the delegated administrator of an Organizations organization.
+     *          This policy will be evaluated in tandem with any policy you submit for the resource. For more information about this policy,
+     *          see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-organizations.html#cloudtrail-lake-organizations-eds-rbp">Default resource policy for delegated administrators</a>.
+     *       </p>
+     * @public
+     */
+    DelegatedAdminResourcePolicy?: string | undefined;
 }
 /**
  * @public
@@ -3822,11 +4333,14 @@ export interface GetTrailStatusRequest {
     /**
      * <p>Specifies the name or the CloudTrail ARN of the trail for which you are
      *          requesting status. To get the status of a shadow trail (a replication of the trail in
-     *          another Region), you must specify its ARN. The following is the format of a trail
-     *          ARN.</p>
+     *          another Region), you must specify its ARN.</p>
      *          <p>
-     *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
+     *          The following is the format of a trail
+     *          ARN: <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
      *          </p>
+     *          <note>
+     *             <p>If the trail is an organization trail and you are a member account in the organization in Organizations, you must provide the full ARN of that trail, and not just the name.</p>
+     *          </note>
      * @public
      */
     Name: string | undefined;
@@ -3983,6 +4497,80 @@ export interface ListChannelsResponse {
      */
     NextToken?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface ListDashboardsRequest {
+    /**
+     * <p>
+     * Specify a name prefix to filter on.
+     * </p>
+     * @public
+     */
+    NamePrefix?: string | undefined;
+    /**
+     * <p>
+     * Specify a dashboard type to filter on: <code>CUSTOM</code> or <code>MANAGED</code>.
+     * </p>
+     * @public
+     */
+    Type?: DashboardType | undefined;
+    /**
+     * <p>
+     *    A token you can use to get the next page of dashboard results.
+     * </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>
+     *    The maximum number of dashboards to display on a single page.
+     * </p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
+/**
+ * <p>
+ * Provides information about a CloudTrail Lake dashboard.
+ * </p>
+ * @public
+ */
+export interface DashboardDetail {
+    /**
+     * <p>
+     * The ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardArn?: string | undefined;
+    /**
+     * <p>
+     * The type of dashboard.
+     * </p>
+     * @public
+     */
+    Type?: DashboardType | undefined;
+}
+/**
+ * @public
+ */
+export interface ListDashboardsResponse {
+    /**
+     * <p>
+     *    Contains information about dashboards in the account, in the current Region that match the applied filters.
+     * </p>
+     * @public
+     */
+    Dashboards?: DashboardDetail[] | undefined;
+    /**
+     * <p>
+     *    A token you can use to get the next page of dashboard results.
+     * </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
 /**
  * @public
  */
@@ -4303,13 +4891,13 @@ export interface ListInsightsMetricDataRequest {
      */
     Period?: number | undefined;
     /**
-     * <p>Type of datapoints to return. Valid values are <code>NonZeroData</code> and
+     * <p>Type of data points to return. Valid values are <code>NonZeroData</code> and
      *          <code>FillWithZeros</code>. The default is <code>NonZeroData</code>.</p>
      * @public
      */
     DataType?: InsightsMetricDataType | undefined;
     /**
-     * <p>The maximum number of datapoints to return. Valid values are integers from 1 to 21600.
+     * <p>The maximum number of data points to return. Valid values are integers from 1 to 21600.
      *          The default value is 21600.</p>
      * @public
      */
@@ -4593,7 +5181,7 @@ export interface ListQueriesResponse {
  */
 export interface ListTagsRequest {
     /**
-     * <p>Specifies a list of trail, event data store, or channel ARNs whose tags will be listed. The list
+     * <p>Specifies a list of trail, event data store, dashboard, or channel ARNs whose tags will be listed. The list
      *          has a limit of 20 ARNs.</p>
      *          <p> Example trail ARN format:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
@@ -4601,6 +5189,8 @@ export interface ListTagsRequest {
      *          <p>Example event data store ARN format:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
      *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
      *          <p>Example channel ARN format:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
      *          </p>
@@ -5130,10 +5720,15 @@ export interface PutInsightSelectorsResponse {
 export interface PutResourcePolicyRequest {
     /**
      * <p>
-     *          The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy.
-     *          The following is the format of a resource ARN:
-     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/MyChannel</code>.
-     *       </p>
+     *          The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy.</p>
+     *          <p>Example event data store ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+     *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
+     *          <p>Example channel ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+     *          </p>
      * @public
      */
     ResourceArn: string | undefined;
@@ -5141,24 +5736,9 @@ export interface PutResourcePolicyRequest {
      * <p>
      *          A JSON-formatted string for an Amazon Web Services resource-based policy.
      *       </p>
-     *          <p>The following are requirements for the resource policy:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                Contains only one action: cloudtrail-data:PutAuditEvents
-     *             </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                Contains at least one statement. The policy can have a maximum of 20 statements.
-     *             </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                Each statement contains at least one principal. A statement can have a maximum of 50 principals.
-     *             </p>
-     *             </li>
-     *          </ul>
+     *          <p> For example resource-based policies, see
+     *          <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/security_iam_resource-based-policy-examples.html">CloudTrail resource-based policy examples</a>
+     *          in the <i>CloudTrail User Guide</i>.</p>
      * @public
      */
     ResourcePolicy: string | undefined;
@@ -5169,41 +5749,40 @@ export interface PutResourcePolicyRequest {
 export interface PutResourcePolicyResponse {
     /**
      * <p>
-     *          The Amazon Resource Name (ARN) of the CloudTrail channel attached to the resource-based policy.
+     *          The Amazon Resource Name (ARN) of the CloudTrail event data store, dashboard, or channel attached to the resource-based policy.
      *       </p>
+     *          <p>Example event data store ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
+     *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
+     *          <p>Example channel ARN format:
+     *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
+     *          </p>
      * @public
      */
     ResourceArn?: string | undefined;
     /**
      * <p>
-     *          The JSON-formatted string of the Amazon Web Services resource-based policy attached to the CloudTrail channel.
+     *          The JSON-formatted string of the Amazon Web Services resource-based policy attached to the CloudTrail event data store, dashboard, or channel.
      *       </p>
      * @public
      */
     ResourcePolicy?: string | undefined;
+    /**
+     * <p>
+     *          The default resource-based policy that is automatically generated for the delegated administrator of an Organizations organization.
+     *          This policy will be evaluated in tandem with any policy you submit for the resource. For more information about this policy,
+     *          see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-organizations.html#cloudtrail-lake-organizations-eds-rbp">Default resource policy for delegated administrators</a>.
+     *       </p>
+     * @public
+     */
+    DelegatedAdminResourcePolicy?: string | undefined;
 }
 /**
  * <p>
  *          This exception is thrown when the resouce-based policy has syntax errors, or contains a principal that is not valid.
  *       </p>
- *          <p>The following are requirements for the resource policy:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                Contains only one action: cloudtrail-data:PutAuditEvents
- *             </p>
- *             </li>
- *             <li>
- *                <p>
- *                Contains at least one statement. The policy can have a maximum of 20 statements.
- *             </p>
- *             </li>
- *             <li>
- *                <p>
- *                Each statement contains at least one principal. A statement can have a maximum of 50 principals.
- *             </p>
- *             </li>
- *          </ul>
  * @public
  */
 export declare class ResourcePolicyNotValidException extends __BaseException {
@@ -5257,12 +5836,12 @@ export interface RegisterOrganizationDelegatedAdminRequest {
 export interface RegisterOrganizationDelegatedAdminResponse {
 }
 /**
- * <p>Specifies the tags to remove from a trail, event data store, or channel.</p>
+ * <p>Specifies the tags to remove from a trail, event data store, dashboard, or channel.</p>
  * @public
  */
 export interface RemoveTagsRequest {
     /**
-     * <p>Specifies the ARN of the trail, event data store, or channel from which tags should be
+     * <p>Specifies the ARN of the trail, event data store, dashboard, or channel from which tags should be
      *          removed.</p>
      *          <p> Example trail ARN format:
      *             <code>arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail</code>
@@ -5270,6 +5849,8 @@ export interface RemoveTagsRequest {
      *          <p>Example event data store ARN format:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE</code>
      *          </p>
+     *          <p>Example dashboard ARN format: <code>arn:aws:cloudtrail:us-east-1:123456789012:dashboard/exampleDash</code>
+     *          </p>
      *          <p>Example channel ARN format:
      *          <code>arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890</code>
      *          </p>
@@ -5391,6 +5972,41 @@ export interface RestoreEventDataStoreResponse {
      */
     BillingMode?: BillingMode | undefined;
 }
+/**
+ * @public
+ */
+export interface StartDashboardRefreshRequest {
+    /**
+     * <p>
+     * The name or ARN of the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardId: string | undefined;
+    /**
+     * <p>
+     *    The query parameter values for the dashboard
+     * </p>
+     *          <p>For custom dashboards, the following query parameters are valid: <code>$StartTime$</code>, <code>$EndTime$</code>, and <code>$Period$</code>.</p>
+     *          <p>For managed dashboards, the following query parameters are valid: <code>$StartTime$</code>,
+     *             <code>$EndTime$</code>, <code>$Period$</code>, and <code>$EventDataStoreId$</code>. The
+     *             <code>$EventDataStoreId$</code> query parameter is required.</p>
+     * @public
+     */
+    QueryParameterValues?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface StartDashboardRefreshResponse {
+    /**
+     * <p>
+     * The refresh ID for the dashboard.
+     * </p>
+     * @public
+     */
+    RefreshId?: string | undefined;
+}
 /**
  * @public
  */
@@ -5537,25 +6153,6 @@ export interface StartLoggingRequest {
  */
 export interface StartLoggingResponse {
 }
-/**
- * <p>The query that was submitted has validation errors, or uses incorrect syntax or
- *          unsupported keywords. For more information about writing a query, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-create-edit-query.html">Create or edit a query</a> in the <i>CloudTrail User
- *             Guide</i>.</p>
- * @public
- */
-export declare class InvalidQueryStatementException extends __BaseException {
-    readonly name: "InvalidQueryStatementException";
-    readonly $fault: "client";
-    /**
-     * <p>Brief description of the exception returned by the request.</p>
-     * @public
-     */
-    Message?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidQueryStatementException, __BaseException>);
-}
 /**
  * <p>You are already running the maximum number of concurrent queries. The maximum number of concurrent queries is 10. Wait a minute for some
  *          queries to finish, and then run the query again.</p>
@@ -5602,6 +6199,13 @@ export interface StartQueryRequest {
      * @public
      */
     QueryParameters?: string[] | undefined;
+    /**
+     * <p>
+     * The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * @public
@@ -5612,6 +6216,13 @@ export interface StartQueryResponse {
      * @public
      */
     QueryId?: string | undefined;
+    /**
+     * <p>
+     *    The account ID of the event data store owner.
+     * </p>
+     * @public
+     */
+    EventDataStoreOwnerAccountId?: string | undefined;
 }
 /**
  * @public
@@ -5763,6 +6374,102 @@ export interface UpdateChannelResponse {
      */
     Destinations?: Destination[] | undefined;
 }
+/**
+ * @public
+ */
+export interface UpdateDashboardRequest {
+    /**
+     * <p>
+     *    The name or ARN of the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardId: string | undefined;
+    /**
+     * <p>
+     * An array of widgets for the dashboard. A custom dashboard can have a maximum of 10 widgets.
+     * </p>
+     *          <p>To add new widgets, pass in an array that includes the existing widgets along with any new widgets. Run the <code>GetDashboard</code> operation to get the list of widgets for the dashboard.</p>
+     *          <p>To remove widgets, pass in an array that includes the existing widgets minus the widgets you want removed.</p>
+     * @public
+     */
+    Widgets?: RequestWidget[] | undefined;
+    /**
+     * <p>
+     * The refresh schedule configuration for the dashboard.
+     * </p>
+     * @public
+     */
+    RefreshSchedule?: RefreshSchedule | undefined;
+    /**
+     * <p>
+     *    Specifies whether termination protection is enabled for the dashboard. If termination protection is enabled, you cannot delete the dashboard until termination protection is disabled.
+     * </p>
+     * @public
+     */
+    TerminationProtectionEnabled?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateDashboardResponse {
+    /**
+     * <p>
+     * The ARN for the dashboard.
+     * </p>
+     * @public
+     */
+    DashboardArn?: string | undefined;
+    /**
+     * <p>
+     * The name for the dashboard.
+     * </p>
+     * @public
+     */
+    Name?: string | undefined;
+    /**
+     * <p>
+     * The type of dashboard.
+     * </p>
+     * @public
+     */
+    Type?: DashboardType | undefined;
+    /**
+     * <p>
+     * An array of widgets for the dashboard.
+     * </p>
+     * @public
+     */
+    Widgets?: Widget[] | undefined;
+    /**
+     * <p>
+     * The refresh schedule for the dashboard, if configured.
+     * </p>
+     * @public
+     */
+    RefreshSchedule?: RefreshSchedule | undefined;
+    /**
+     * <p>
+     *    Indicates whether termination protection is enabled for the dashboard.
+     * </p>
+     * @public
+     */
+    TerminationProtectionEnabled?: boolean | undefined;
+    /**
+     * <p>
+     *    The timestamp that shows when the dashboard was created.
+     * </p>
+     * @public
+     */
+    CreatedTimestamp?: Date | undefined;
+    /**
+     * <p>
+     *    The timestamp that shows when the dashboard was updated.
+     * </p>
+     * @public
+     */
+    UpdatedTimestamp?: Date | undefined;
+}
 /**
  * @public
  */