Package com.pulumi.aws.cloudtrail

Class TrailArgs

  • public final class TrailArgs
extends com.pulumi.resources.ResourceArgs

    • Field Detail

    • Method Detail

      • advancedEventSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailAdvancedEventSelectorArgs>>> advancedEventSelectors()
        Returns:
        Specifies an advanced event selector for enabling data event logging. Fields documented below. Conflicts with `eventSelector`.

      • cloudWatchLogsGroupArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> cloudWatchLogsGroupArn()
        Returns:
        Log group name using an ARN that represents the log group to which CloudTrail logs will be delivered. Note that CloudTrail requires the Log Stream wildcard.

      • cloudWatchLogsRoleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> cloudWatchLogsRoleArn()
        Returns:
        Role for the CloudWatch Logs endpoint to assume to write to a user’s log group.

      • enableLogFileValidation

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enableLogFileValidation()
        Returns:
        Whether log file integrity validation is enabled. Defaults to `false`.

      • enableLogging

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enableLogging()
        Returns:
        Enables logging for the trail. When set to `true`, logging is started by calling the [`StartLogging`](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartLogging.html) API. When set to `false`, logging is stopped by calling the [`StopLogging`](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StopLogging.html) API. Defaults to `true`.

      • eventSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailEventSelectorArgs>>> eventSelectors()
        Returns:
        Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these. Conflicts with `advancedEventSelector`.

      • includeGlobalServiceEvents

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> includeGlobalServiceEvents()
        Returns:
        Whether the trail is publishing events from global services such as IAM to the log files. Defaults to `true`.

      • insightSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailInsightSelectorArgs>>> insightSelectors()
        Returns:
        Configuration block for identifying unusual operational activity. See details below.

      • isMultiRegionTrail

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> isMultiRegionTrail()
        Returns:
        Whether the trail is created in the current region or in all regions. Defaults to `false`.

      • isOrganizationTrail

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> isOrganizationTrail()
        Returns:
        Whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.

      • kmsKeyId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> kmsKeyId()
        Returns:
        KMS key ARN to use to encrypt the logs delivered by CloudTrail.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        Name of the trail.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • s3BucketName

        public com.pulumi.core.Output<java.lang.String> s3BucketName()
        Returns:
        Name of the S3 bucket designated for publishing log files. The following arguments are optional:

      • s3KeyPrefix

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> s3KeyPrefix()
        Returns:
        S3 key prefix that follows the name of the bucket you have designated for log file delivery.

      • snsTopicName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> snsTopicName()
        Returns:
        Name of the Amazon SNS topic defined for notification of log file delivery. Specify the SNS topic ARN if it resides in another region.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of tags to assign to the trail. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.