AWS Native v0.63.0, May 25 23

aws-native.cloudtrail.EventDataStore

Explore with Pulumi AI

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 90 to 2555 days (about three months to up to seven years).

Create EventDataStore Resource

new EventDataStore(name: string, args?: EventDataStoreArgs, opts?: CustomResourceOptions);

@overload
def EventDataStore(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   advanced_event_selectors: Optional[Sequence[EventDataStoreAdvancedEventSelectorArgs]] = None,
                   kms_key_id: Optional[str] = None,
                   multi_region_enabled: Optional[bool] = None,
                   name: Optional[str] = None,
                   organization_enabled: Optional[bool] = None,
                   retention_period: Optional[int] = None,
                   tags: Optional[Sequence[EventDataStoreTagArgs]] = None,
                   termination_protection_enabled: Optional[bool] = None)
@overload
def EventDataStore(resource_name: str,
                   args: Optional[EventDataStoreArgs] = None,
                   opts: Optional[ResourceOptions] = None)

func NewEventDataStore(ctx *Context, name string, args *EventDataStoreArgs, opts ...ResourceOption) (*EventDataStore, error)

public EventDataStore(string name, EventDataStoreArgs? args = null, CustomResourceOptions? opts = null)

public EventDataStore(String name, EventDataStoreArgs args)
public EventDataStore(String name, EventDataStoreArgs args, CustomResourceOptions options)

type: aws-native:cloudtrail:EventDataStore
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args EventDataStoreArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args EventDataStoreArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args EventDataStoreArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args EventDataStoreArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args EventDataStoreArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

EventDataStore Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The EventDataStore resource accepts the following input properties:

AdvancedEventSelectors List<Pulumi.AwsNative.CloudTrail.Inputs.EventDataStoreAdvancedEventSelectorArgs>: The advanced event selectors that were used to select events for the data store.
KmsKeyId string: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
MultiRegionEnabled bool: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
Name string: The name of the event data store.
OrganizationEnabled bool: Indicates that an event data store is collecting logged events for an organization.
RetentionPeriod int: The retention period, in days.
Tags List<Pulumi.AwsNative.CloudTrail.Inputs.EventDataStoreTagArgs>
TerminationProtectionEnabled bool: Indicates whether the event data store is protected from termination.

AdvancedEventSelectors []EventDataStoreAdvancedEventSelectorArgs: The advanced event selectors that were used to select events for the data store.
KmsKeyId string: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
MultiRegionEnabled bool: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
Name string: The name of the event data store.
OrganizationEnabled bool: Indicates that an event data store is collecting logged events for an organization.
RetentionPeriod int: The retention period, in days.
Tags []EventDataStoreTagArgs
TerminationProtectionEnabled bool: Indicates whether the event data store is protected from termination.

advancedEventSelectors List<EventDataStoreAdvancedEventSelectorArgs>: The advanced event selectors that were used to select events for the data store.
kmsKeyId String: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
multiRegionEnabled Boolean: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
name String: The name of the event data store.
organizationEnabled Boolean: Indicates that an event data store is collecting logged events for an organization.
retentionPeriod Integer: The retention period, in days.
tags List<EventDataStoreTagArgs>
terminationProtectionEnabled Boolean: Indicates whether the event data store is protected from termination.

advancedEventSelectors EventDataStoreAdvancedEventSelectorArgs[]: The advanced event selectors that were used to select events for the data store.
kmsKeyId string: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
multiRegionEnabled boolean: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
name string: The name of the event data store.
organizationEnabled boolean: Indicates that an event data store is collecting logged events for an organization.
retentionPeriod number: The retention period, in days.
tags EventDataStoreTagArgs[]
terminationProtectionEnabled boolean: Indicates whether the event data store is protected from termination.

advanced_event_selectors Sequence[EventDataStoreAdvancedEventSelectorArgs]: The advanced event selectors that were used to select events for the data store.
kms_key_id str: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
multi_region_enabled bool: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
name str: The name of the event data store.
organization_enabled bool: Indicates that an event data store is collecting logged events for an organization.
retention_period int: The retention period, in days.
tags Sequence[EventDataStoreTagArgs]
termination_protection_enabled bool: Indicates whether the event data store is protected from termination.

advancedEventSelectors List<Property Map>: The advanced event selectors that were used to select events for the data store.
kmsKeyId String: Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
multiRegionEnabled Boolean: Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
name String: The name of the event data store.
organizationEnabled Boolean: Indicates that an event data store is collecting logged events for an organization.
retentionPeriod Number: The retention period, in days.
tags List<Property Map>
terminationProtectionEnabled Boolean: Indicates whether the event data store is protected from termination.

Outputs

All input properties are implicitly available as output properties. Additionally, the EventDataStore resource produces the following output properties:

CreatedTimestamp string: The timestamp of the event data store's creation.
EventDataStoreArn string: The ARN of the event data store.
Id string: The provider-assigned unique ID for this managed resource.
Status string: The status of an event data store. Values are ENABLED and PENDING_DELETION.
UpdatedTimestamp string: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

CreatedTimestamp string: The timestamp of the event data store's creation.
EventDataStoreArn string: The ARN of the event data store.
Id string: The provider-assigned unique ID for this managed resource.
Status string: The status of an event data store. Values are ENABLED and PENDING_DELETION.
UpdatedTimestamp string: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

createdTimestamp String: The timestamp of the event data store's creation.
eventDataStoreArn String: The ARN of the event data store.
id String: The provider-assigned unique ID for this managed resource.
status String: The status of an event data store. Values are ENABLED and PENDING_DELETION.
updatedTimestamp String: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

createdTimestamp string: The timestamp of the event data store's creation.
eventDataStoreArn string: The ARN of the event data store.
id string: The provider-assigned unique ID for this managed resource.
status string: The status of an event data store. Values are ENABLED and PENDING_DELETION.
updatedTimestamp string: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

created_timestamp str: The timestamp of the event data store's creation.
event_data_store_arn str: The ARN of the event data store.
id str: The provider-assigned unique ID for this managed resource.
status str: The status of an event data store. Values are ENABLED and PENDING_DELETION.
updated_timestamp str: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

createdTimestamp String: The timestamp of the event data store's creation.
eventDataStoreArn String: The ARN of the event data store.
id String: The provider-assigned unique ID for this managed resource.
status String: The status of an event data store. Values are ENABLED and PENDING_DELETION.
updatedTimestamp String: The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.

Supporting Types

EventDataStoreAdvancedEventSelector

FieldSelectors List<Pulumi.AwsNative.CloudTrail.Inputs.EventDataStoreAdvancedFieldSelector>: Contains all selector statements in an advanced event selector.
Name string: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

FieldSelectors []EventDataStoreAdvancedFieldSelector: Contains all selector statements in an advanced event selector.
Name string: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

fieldSelectors List<EventDataStoreAdvancedFieldSelector>: Contains all selector statements in an advanced event selector.
name String: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

fieldSelectors EventDataStoreAdvancedFieldSelector[]: Contains all selector statements in an advanced event selector.
name string: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

field_selectors Sequence[EventDataStoreAdvancedFieldSelector]: Contains all selector statements in an advanced event selector.
name str: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

fieldSelectors List<Property Map>: Contains all selector statements in an advanced event selector.
name String: An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

EventDataStoreAdvancedFieldSelector

Field string: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
EndsWith List<string>: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
Equals List<string>: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
NotEndsWith List<string>: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
NotEquals List<string>: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
NotStartsWith List<string>: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
StartsWith List<string>: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

Field string: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
EndsWith []string: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
Equals []string: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
NotEndsWith []string: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
NotEquals []string: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
NotStartsWith []string: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
StartsWith []string: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

field String: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
endsWith List<String>: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals_ List<String>: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
notEndsWith List<String>: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals List<String>: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith List<String>: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith List<String>: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

field string: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
endsWith string[]: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals string[]: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
notEndsWith string[]: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals string[]: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith string[]: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith string[]: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

field str: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
ends_with Sequence[str]: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals Sequence[str]: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
not_ends_with Sequence[str]: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
not_equals Sequence[str]: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
not_starts_with Sequence[str]: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
starts_with Sequence[str]: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

field String: A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
endsWith List<String>: An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals List<String>: An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
notEndsWith List<String>: An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals List<String>: An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith List<String>: An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith List<String>: An operator that includes events that match the first few characters of the event record field specified as the value of Field.

EventDataStoreTag

Key string: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Value string: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

Key string: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Value string: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

key String: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value String: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

key string: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value string: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

key str: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value str: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

key String: The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value String: The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

Package Details

Repository: AWS Native pulumi/pulumi-aws-native
License: Apache-2.0