Class: Aws::CloudTrail::Types::AdvancedEventSelector

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-cloudtrail/types.rb

Overview

Advanced event selectors let you create fine-grained selectors for CloudTrail management and data events. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see [Logging management events] and [Logging data events] in the *CloudTrail User Guide*.

You cannot apply both event selectors and advanced event selectors to a trail.

**Supported CloudTrail event record fields for management events**

  • ‘eventCategory` (required)

  • ‘eventSource`

  • ‘readOnly`

**Supported CloudTrail event record fields for data events**

  • ‘eventCategory` (required)

  • ‘resources.type` (required)

  • ‘readOnly`

  • ‘eventName`

  • ‘resources.ARN`

<note markdown=“1”> For event data stores for CloudTrail Insights events, Config configuration items, Audit Manager evidence, or events outside of Amazon Web Services, the only supported field is ‘eventCategory`.

</note>

[1]: docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html [2]: docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#field_selectors ⇒ Array<Types::AdvancedFieldSelector>

Contains all selector statements in an advanced event selector.

Returns:



135
136
137
138
139
140
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 135

class AdvancedEventSelector < Struct.new(
  :name,
  :field_selectors)
  SENSITIVE = []
  include Aws::Structure
end

#name ⇒ String

An optional, descriptive name for an advanced event selector, such as “Log data events for only two S3 buckets”.

Returns:

  • (String) 


135
136
137
138
139
140
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 135

class AdvancedEventSelector < Struct.new(
  :name,
  :field_selectors)
  SENSITIVE = []
  include Aws::Structure
end