Package com.pulumi.aws.cloudtrail.inputs

Class TrailState

  • public final class TrailState
extends com.pulumi.resources.ResourceArgs

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  TrailState.Builder  

      • Nested classes/interfaces inherited from class com.pulumi.resources.InputArgs

        com.pulumi.resources.InputArgs.InputArgsInternal

    • Field Summary

      Fields 
      Modifier and Type Field Description
      static TrailState Empty  

    • Method Detail

      • advancedEventSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailAdvancedEventSelectorArgs>>> advancedEventSelectors()
        Returns:
        Specifies an advanced event selector for enabling data event logging. Fields documented below. Conflicts with `eventSelector`.

      • arn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> arn()
        Returns:
        ARN of the trail.

      • cloudWatchLogsGroupArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> cloudWatchLogsGroupArn()
        Returns:
        Log group name using an ARN that represents the log group to which CloudTrail logs will be delivered. Note that CloudTrail requires the Log Stream wildcard.

      • cloudWatchLogsRoleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> cloudWatchLogsRoleArn()
        Returns:
        Role for the CloudWatch Logs endpoint to assume to write to a user’s log group.

      • enableLogFileValidation

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enableLogFileValidation()
        Returns:
        Whether log file integrity validation is enabled. Defaults to `false`.

      • enableLogging

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enableLogging()
        Returns:
        Enables logging for the trail. When set to `true`, logging is started by calling the [`StartLogging`](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StartLogging.html) API. When set to `false`, logging is stopped by calling the [`StopLogging`](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_StopLogging.html) API. Defaults to `true`.

      • eventSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailEventSelectorArgs>>> eventSelectors()
        Returns:
        Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these. Conflicts with `advancedEventSelector`.

      • homeRegion

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> homeRegion()
        Returns:
        Region in which the trail was created.

      • includeGlobalServiceEvents

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> includeGlobalServiceEvents()
        Returns:
        Whether the trail is publishing events from global services such as IAM to the log files. Defaults to `true`.

      • insightSelectors

        public java.util.Optional<com.pulumi.core.Output<java.util.List<TrailInsightSelectorArgs>>> insightSelectors()
        Returns:
        Configuration block for identifying unusual operational activity. See details below.

      • isMultiRegionTrail

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> isMultiRegionTrail()
        Returns:
        Whether the trail is created in the current region or in all regions. Defaults to `false`.

      • isOrganizationTrail

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> isOrganizationTrail()
        Returns:
        Whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.

      • kmsKeyId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> kmsKeyId()
        Returns:
        KMS key ARN to use to encrypt the logs delivered by CloudTrail.

      • name

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> name()
        Returns:
        Name of the trail.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • s3BucketName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> s3BucketName()
        Returns:
        Name of the S3 bucket designated for publishing log files. The following arguments are optional:

      • s3KeyPrefix

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> s3KeyPrefix()
        Returns:
        S3 key prefix that follows the name of the bucket you have designated for log file delivery.

      • snsTopicArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> snsTopicArn()
        Returns:
        ARN of the Amazon SNS topic that CloudTrail uses to send notifications when log files are delivered.

      • snsTopicName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> snsTopicName()
        Returns:
        Name of the Amazon SNS topic defined for notification of log file delivery. Specify the SNS topic ARN if it resides in another region.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of tags to assign to the trail. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.