Interface TrailArgs

Specifies an advanced event selector for enabling data event logging. Fields documented below. Conflicts with event_selector.

Log group to which CloudTrail logs will be delivered.

Whether log file integrity validation is enabled. Defaults to false.

Enables logging for the trail. Defaults to true. Setting this to false will pause logging.

Specifies an event selector for enabling data event logging. Fields documented below. Please note the CloudTrail limits when configuring these. Conflicts with advanced_event_selector.

Whether the trail is publishing events from global services such as IAM to the log files. Defaults to true.

Configuration block for identifying unusual operational activity. See details below.

Whether the trail is created in the current region or in all regions. Defaults to false.

Whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to false.

KMS key ARN to use to encrypt the logs delivered by CloudTrail.

Name of the trail.

S3 bucket designated for publishing log files.

S3 key prefix that follows the name of the bucket you have designated for log file delivery.

Name of the Amazon SNS topic defined for notification of log file delivery.

Map of tags to assign to the trail. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.