Specifies the tags to add to a trail, event data store, or channel.

Advanced event selectors let you create fine-grained selectors for the following CloudTrail event record fields. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see Logging data events for trails in the CloudTrail User Guide.

A single selector statement in an advanced event selector.

Contains information about a returned CloudTrail channel.

Specifies the settings for each trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.

The Amazon S3 buckets, Lambda functions, or Amazon DynamoDB tables that you specify in your event selectors for your trail to log data events. Data events provide information about the resource operations performed on or within a resource itself. These are also known as data plane operations. You can specify up to 250 data resources for a trail.

The request that specifies the name of a trail to delete.

Removes CloudTrail delegated administrator permissions from a specified member account in an organization that is currently designated as a delegated administrator.

Returns information about the trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Contains information about the destination receiving events.

Contains information about an event that was returned by a lookup request. The result includes a representation of a CloudTrail event.

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 90 to 2557 days (about three months to up to seven years). To select events for an event data store, use advanced event selectors.

Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event.

The name of a trail about which you want the current status.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Provides information about an import failure.

Contains information about an import that was returned by a lookup request.

The import source.

Provides statistics for the specified ImportID. CloudTrail does not update import statistics in real-time. Returned values for parameters such as EventsCompleted may be lower than the actual value, because CloudTrail updates statistics incrementally over the course of the import.

A table showing information about the most recent successful and failed attempts to ingest events.

A JSON string that contains a list of insight types that are logged on a trail.

Requests the public keys for a specified time range.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Specifies a list of tags to return.

Returns the objects or data listed below if successful. Otherwise, returns an error.

Specifies an attribute and value that filter the events returned.

Contains a request for LookupEvents.

Contains a response to a LookupEvents action.

Contains information about a returned public key.

A SQL string of criteria about events that you want to collect in an event data store.

Metadata about a query, such as the number of results.

Gets metadata about a query, including the number of events that were matched, the total number of events scanned, the query run time in milliseconds, and the query's creation time.

Specifies an organization member account ID as a CloudTrail delegated administrator.

Specifies the tags to remove from a trail, event data store, or channel.

Specifies the type and name of a resource referenced by an event.

A resource tag.

The settings for the source S3 bucket.

Contains configuration information about the channel.

The request to CloudTrail to start logging Amazon Web Services API calls for an account.

Passes the request to CloudTrail to stop logging Amazon Web Services API calls for the specified account.

A custom key-value pair associated with a resource such as a CloudTrail trail, event data store, or channel.

The settings for a trail.

Information about a CloudTrail trail, including the trail's name, home region, and Amazon Resource Name (ARN).

Specifies settings to update for the trail.

Returns the objects or data listed below if successful. Otherwise, returns an error.