You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* <p>Configures an event selector or advanced event selectors for your trail. Use event
32
-
* selectors or advanced event selectors to specify management and data event settings for
33
-
* your trail. If you want your trail to log Insights events, be sure the event selector
34
-
* enables logging of the Insights event types you want configured for your trail. For more information about logging Insights events, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging Insights events</a> in the <i>CloudTrail User Guide</i>.
31
+
* <p>Configures event selectors (also referred to as <i>basic event selectors</i>) or advanced event selectors for your trail. You can use
32
+
* either <code>AdvancedEventSelectors</code> or <code>EventSelectors</code>, but not both. If
33
+
* you apply <code>AdvancedEventSelectors</code> to a trail, any existing
34
+
* <code>EventSelectors</code> are overwritten.</p>
35
+
* <p>You can use <code>AdvancedEventSelectors</code> to
36
+
* log management events, data events for all resource types, and network activity events.</p>
37
+
* <p>You can use <code>EventSelectors</code> to log management events and data events for the following resource types:</p>
38
+
* <ul>
39
+
* <li>
40
+
* <p>
41
+
* <code>AWS::DynamoDB::Table</code>
42
+
* </p>
43
+
* </li>
44
+
* <li>
45
+
* <p>
46
+
* <code>AWS::Lambda::Function</code>
47
+
* </p>
48
+
* </li>
49
+
* <li>
50
+
* <p>
51
+
* <code>AWS::S3::Object</code>
52
+
* </p>
53
+
* </li>
54
+
* </ul>
55
+
* <p>You can't use <code>EventSelectors</code> to log network activity events.</p>
56
+
* <p>If you want your trail to log Insights events, be sure the event selector or advanced event selector enables
57
+
* logging of the Insights event types you want configured for your trail. For more information about logging Insights events, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-insights-events-with-cloudtrail.html">Logging Insights events</a> in the <i>CloudTrail User Guide</i>.
35
58
* By default, trails created without specific event selectors are configured to
36
-
* log all read and write management events, and no data events.</p>
59
+
* log all read and write management events, and no data events or network activity events.</p>
37
60
* <p>When an event occurs in your account, CloudTrail evaluates the event selectors or
38
61
* advanced event selectors in all trails. For each trail, if the event matches any event
39
62
* selector, the trail processes and logs the event. If the event doesn't match any event
40
63
* selector, the trail doesn't log the event.</p>
41
64
* <p>Example</p>
42
65
* <ol>
43
66
* <li>
44
-
* <p>You create an event selector for a trail and specify that you want write-only
67
+
* <p>You create an event selector for a trail and specify that you want to log write-only
* data events</a>, and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html">Quotas in CloudTrail</a> in the <i>CloudTrail User
69
-
* Guide</i>.</p>
89
+
* <p>You can configure up to five event selectors for each trail.</p>
70
90
* <p>You can add advanced event selectors, and conditions for your advanced event selectors,
71
-
* up to a maximum of 500 values for all conditions and selectors on a trail. You can use
72
-
* either <code>AdvancedEventSelectors</code> or <code>EventSelectors</code>, but not both. If
73
-
* you apply <code>AdvancedEventSelectors</code> to a trail, any existing
74
-
* <code>EventSelectors</code> are overwritten. For more information about advanced event
75
-
* selectors, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html">Logging data events</a> in the <i>CloudTrail User Guide</i>.</p>
91
+
* up to a maximum of 500 values for all conditions and selectors on a trail. For more information, see
* data events</a>, <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html">Logging
94
+
* network activity events</a>, and <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html">Quotas in CloudTrail</a> in the <i>CloudTrail User
95
+
* Guide</i>.</p>
76
96
* @example
77
97
* Use a bare-bones client and the command you need to make an API call.
* <p>Starts the ingestion of live events on an event data store specified as either an ARN or the ID portion of the ARN. To start ingestion, the event data store <code>Status</code> must be <code>STOPPED_INGESTION</code>
37
-
* and the <code>eventCategory</code> must be <code>Management</code>, <code>Data</code>, or <code>ConfigurationItem</code>.</p>
37
+
* and the <code>eventCategory</code> must be <code>Management</code>, <code>Data</code>, <code>NetworkActivity</code>, or <code>ConfigurationItem</code>.</p>
38
38
* @example
39
39
* Use a bare-bones client and the command you need to make an API call.
* <p>Stops the ingestion of live events on an event data store specified as either an ARN or the ID portion of the ARN. To stop ingestion, the event data store <code>Status</code> must be <code>ENABLED</code>
34
-
* and the <code>eventCategory</code> must be <code>Management</code>, <code>Data</code>, or <code>ConfigurationItem</code>.</p>
34
+
* and the <code>eventCategory</code> must be <code>Management</code>, <code>Data</code>, <code>NetworkActivity</code>, or <code>ConfigurationItem</code>.</p>
35
35
* @example
36
36
* Use a bare-bones client and the command you need to make an API call.
* <code>RetentionPeriod</code> is in days, and valid values are integers between 7 and
35
35
* 3653 if the <code>BillingMode</code> is set to <code>EXTENDABLE_RETENTION_PRICING</code>, or between 7 and 2557 if <code>BillingMode</code> is set to <code>FIXED_RETENTION_PRICING</code>. By default, <code>TerminationProtection</code> is enabled.</p>
36
36
* <p>For event data stores for CloudTrail events, <code>AdvancedEventSelectors</code>
37
-
* includes or excludes managementor data events in your event data store. For more
37
+
* includes or excludes management, data, or network activity events in your event data store. For more
38
38
* information about <code>AdvancedEventSelectors</code>, see <a href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html">AdvancedEventSelectors</a>.</p>
39
39
* <p> For event data stores for CloudTrail Insights events, Config configuration items, Audit Manager evidence, or non-Amazon Web Services events,
40
40
* <code>AdvancedEventSelectors</code> includes events of that type in your event data store.</p>
0 commit comments