AWS Native is in preview. AWS Classic is fully supported.
aws-native.cloudtrail.getEventDataStore
Explore with Pulumi AI
AWS Native is in preview. AWS Classic is fully supported.
A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 90 to 2555 days (about three months to up to seven years).
Using getEventDataStore
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEventDataStore(args: GetEventDataStoreArgs, opts?: InvokeOptions): Promise<GetEventDataStoreResult>
function getEventDataStoreOutput(args: GetEventDataStoreOutputArgs, opts?: InvokeOptions): Output<GetEventDataStoreResult>
def get_event_data_store(event_data_store_arn: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetEventDataStoreResult
def get_event_data_store_output(event_data_store_arn: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetEventDataStoreResult]
func LookupEventDataStore(ctx *Context, args *LookupEventDataStoreArgs, opts ...InvokeOption) (*LookupEventDataStoreResult, error)
func LookupEventDataStoreOutput(ctx *Context, args *LookupEventDataStoreOutputArgs, opts ...InvokeOption) LookupEventDataStoreResultOutput
> Note: This function is named LookupEventDataStore
in the Go SDK.
public static class GetEventDataStore
{
public static Task<GetEventDataStoreResult> InvokeAsync(GetEventDataStoreArgs args, InvokeOptions? opts = null)
public static Output<GetEventDataStoreResult> Invoke(GetEventDataStoreInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetEventDataStoreResult> getEventDataStore(GetEventDataStoreArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: aws-native:cloudtrail:getEventDataStore
arguments:
# arguments dictionary
The following arguments are supported:
- Event
Data stringStore Arn The ARN of the event data store.
- Event
Data stringStore Arn The ARN of the event data store.
- event
Data StringStore Arn The ARN of the event data store.
- event
Data stringStore Arn The ARN of the event data store.
- event_
data_ strstore_ arn The ARN of the event data store.
- event
Data StringStore Arn The ARN of the event data store.
getEventDataStore Result
The following output properties are available:
- Advanced
Event List<Pulumi.Selectors Aws Native. Cloud Trail. Outputs. Event Data Store Advanced Event Selector> The advanced event selectors that were used to select events for the data store.
- Created
Timestamp string The timestamp of the event data store's creation.
- Event
Data stringStore Arn The ARN of the event data store.
- Ingestion
Enabled bool Indicates whether the event data store is ingesting events.
- Kms
Key stringId Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- Multi
Region boolEnabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- Name string
The name of the event data store.
- Organization
Enabled bool Indicates that an event data store is collecting logged events for an organization.
- Retention
Period int The retention period, in days.
- Status string
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Pulumi.
Aws Native. Cloud Trail. Outputs. Event Data Store Tag> - Termination
Protection boolEnabled Indicates whether the event data store is protected from termination.
- Updated
Timestamp string The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- Advanced
Event []EventSelectors Data Store Advanced Event Selector The advanced event selectors that were used to select events for the data store.
- Created
Timestamp string The timestamp of the event data store's creation.
- Event
Data stringStore Arn The ARN of the event data store.
- Ingestion
Enabled bool Indicates whether the event data store is ingesting events.
- Kms
Key stringId Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- Multi
Region boolEnabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- Name string
The name of the event data store.
- Organization
Enabled bool Indicates that an event data store is collecting logged events for an organization.
- Retention
Period int The retention period, in days.
- Status string
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- []Event
Data Store Tag - Termination
Protection boolEnabled Indicates whether the event data store is protected from termination.
- Updated
Timestamp string The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event List<EventSelectors Data Store Advanced Event Selector> The advanced event selectors that were used to select events for the data store.
- created
Timestamp String The timestamp of the event data store's creation.
- event
Data StringStore Arn The ARN of the event data store.
- ingestion
Enabled Boolean Indicates whether the event data store is ingesting events.
- kms
Key StringId Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region BooleanEnabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name String
The name of the event data store.
- organization
Enabled Boolean Indicates that an event data store is collecting logged events for an organization.
- retention
Period Integer The retention period, in days.
- status String
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Event
Data Store Tag> - termination
Protection BooleanEnabled Indicates whether the event data store is protected from termination.
- updated
Timestamp String The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event EventSelectors Data Store Advanced Event Selector[] The advanced event selectors that were used to select events for the data store.
- created
Timestamp string The timestamp of the event data store's creation.
- event
Data stringStore Arn The ARN of the event data store.
- ingestion
Enabled boolean Indicates whether the event data store is ingesting events.
- kms
Key stringId Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region booleanEnabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name string
The name of the event data store.
- organization
Enabled boolean Indicates that an event data store is collecting logged events for an organization.
- retention
Period number The retention period, in days.
- status string
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- Event
Data Store Tag[] - termination
Protection booleanEnabled Indicates whether the event data store is protected from termination.
- updated
Timestamp string The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced_
event_ Sequence[Eventselectors Data Store Advanced Event Selector] The advanced event selectors that were used to select events for the data store.
- created_
timestamp str The timestamp of the event data store's creation.
- event_
data_ strstore_ arn The ARN of the event data store.
- ingestion_
enabled bool Indicates whether the event data store is ingesting events.
- kms_
key_ strid Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi_
region_ boolenabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name str
The name of the event data store.
- organization_
enabled bool Indicates that an event data store is collecting logged events for an organization.
- retention_
period int The retention period, in days.
- status str
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- Sequence[Event
Data Store Tag] - termination_
protection_ boolenabled Indicates whether the event data store is protected from termination.
- updated_
timestamp str The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event List<Property Map>Selectors The advanced event selectors that were used to select events for the data store.
- created
Timestamp String The timestamp of the event data store's creation.
- event
Data StringStore Arn The ARN of the event data store.
- ingestion
Enabled Boolean Indicates whether the event data store is ingesting events.
- kms
Key StringId Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region BooleanEnabled Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name String
The name of the event data store.
- organization
Enabled Boolean Indicates that an event data store is collecting logged events for an organization.
- retention
Period Number The retention period, in days.
- status String
The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Property Map>
- termination
Protection BooleanEnabled Indicates whether the event data store is protected from termination.
- updated
Timestamp String The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
Supporting Types
EventDataStoreAdvancedEventSelector
- Field
Selectors List<Pulumi.Aws Native. Cloud Trail. Inputs. Event Data Store Advanced Field Selector> Contains all selector statements in an advanced event selector.
- Name string
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- Field
Selectors []EventData Store Advanced Field Selector Contains all selector statements in an advanced event selector.
- Name string
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors List<EventData Store Advanced Field Selector> Contains all selector statements in an advanced event selector.
- name String
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors EventData Store Advanced Field Selector[] Contains all selector statements in an advanced event selector.
- name string
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field_
selectors Sequence[EventData Store Advanced Field Selector] Contains all selector statements in an advanced event selector.
- name str
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors List<Property Map> Contains all selector statements in an advanced event selector.
- name String
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
EventDataStoreAdvancedFieldSelector
- Field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- Ends
With List<string> An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- Equals List<string>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- Not
Ends List<string>With An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- Not
Equals List<string> An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- Not
Starts List<string>With An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- Starts
With List<string> An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- Field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- Ends
With []string An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- Equals []string
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- Not
Ends []stringWith An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- Not
Equals []string An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- Not
Starts []stringWith An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- Starts
With []string An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field String
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With List<String> An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals_ List<String>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends List<String>With An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals List<String> An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts List<String>With An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With List<String> An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With string[] An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals string[]
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends string[]With An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals string[] An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts string[]With An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With string[] An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field str
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends_
with Sequence[str] An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals Sequence[str]
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not_
ends_ Sequence[str]with An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not_
equals Sequence[str] An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not_
starts_ Sequence[str]with An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts_
with Sequence[str] An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field String
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With List<String> An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals List<String>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends List<String>With An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals List<String> An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts List<String>With An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With List<String> An operator that includes events that match the first few characters of the event record field specified as the value of Field.
EventDataStoreTag
- Key string
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- Value string
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- Key string
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- Value string
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- key String
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- value String
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- key string
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- value string
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- key str
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- value str
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- key String
The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
- value String
The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
AWS Native is in preview. AWS Classic is fully supported.