Specifies the tags to add to a trail.

Advanced event selectors let you create fine-grained selectors for the following CloudTrail event record fields. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see Logging data events for trails in the CloudTrail User Guide.

A single selector statement in an advanced event selector.

Specifies the settings for each trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.

The Amazon S3 buckets, Lambda functions, or Amazon DynamoDB tables that you specify in your event selectors for your trail to log data events. Data events provide information about the resource operations performed on or within a resource itself. These are also known as data plane operations. You can specify up to 250 data resources for a trail.

The request that specifies the name of a trail to delete.

Returns information about the trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Contains information about an event that was returned by a lookup request. The result includes a representation of a CloudTrail event.

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 90 to 2555 days (about three months to up to seven years). To select events for an event data store, use advanced event selectors.

Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event.

The name of a trail about which you want the current status.

Returns the objects or data listed below if successful. Otherwise, returns an error.

A JSON string that contains a list of insight types that are logged on a trail.

Requests the public keys for a specified time range.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Specifies a list of trail tags to return.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Specifies an attribute and value that filter the events returned.

Contains a request for LookupEvents.

Contains a response to a LookupEvents action.

Contains information about a returned public key.

A SQL string of criteria about events that you want to collect in an event data store.

Metadata about a query, such as the number of results.

Gets metadata about a query, including the number of events that were matched, the total number of events scanned, the query run time in milliseconds, and the query's creation time.

Specifies the tags to remove from a trail.

Specifies the type and name of a resource referenced by an event.

A resource tag.

The request to CloudTrail to start logging Amazon Web Services API calls for an account.

Passes the request to CloudTrail to stop logging Amazon Web Services API calls for the specified account.

A custom key-value pair associated with a resource such as a CloudTrail trail.

The settings for a trail.

Information about a CloudTrail trail, including the trail's name, home region, and Amazon Resource Name (ARN).

Specifies settings to update for the trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.