cloudtrail

package
v0.18.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 5, 2019 License: Apache-2.0 Imports: 2 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type GetServiceAccountArgs

type GetServiceAccountArgs struct {
	// Name of the region whose AWS CloudTrail account ID is desired.
	// Defaults to the region from the AWS provider configuration.
	Region interface{}
}

A collection of arguments for invoking getServiceAccount.

type GetServiceAccountResult

type GetServiceAccountResult struct {
	// The ARN of the AWS CloudTrail service account in the selected region.
	Arn interface{}
	// id is the provider-assigned unique ID for this managed resource.
	Id interface{}
}

A collection of values returned by getServiceAccount.

func LookupServiceAccount

func LookupServiceAccount(ctx *pulumi.Context, args *GetServiceAccountArgs) (*GetServiceAccountResult, error)

Use this data source to get the Account ID of the [AWS CloudTrail Service Account](http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-supported-regions.html) in a given region for the purpose of allowing CloudTrail to store trail data in S3.

type Trail

type Trail struct {
	// contains filtered or unexported fields
}

Provides a CloudTrail resource.

> *NOTE:* For a multi-region trail, this resource must be in the home region of the trail.

> *NOTE:* For an organization trail, this resource must be in the master account of the organization.

func GetTrail

func GetTrail(ctx *pulumi.Context,
	name string, id pulumi.ID, state *TrailState, opts ...pulumi.ResourceOpt) (*Trail, error)

GetTrail gets an existing Trail resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewTrail

func NewTrail(ctx *pulumi.Context,
	name string, args *TrailArgs, opts ...pulumi.ResourceOpt) (*Trail, error)

NewTrail registers a new resource with the given unique name, arguments, and options.

func (*Trail) Arn

func (r *Trail) Arn() *pulumi.StringOutput

The Amazon Resource Name of the trail.

func (*Trail) CloudWatchLogsGroupArn

func (r *Trail) CloudWatchLogsGroupArn() *pulumi.StringOutput

Specifies a log group name using an Amazon Resource Name (ARN), that represents the log group to which CloudTrail logs will be delivered.

func (*Trail) CloudWatchLogsRoleArn

func (r *Trail) CloudWatchLogsRoleArn() *pulumi.StringOutput

Specifies the role for the CloudWatch Logs endpoint to assume to write to a user’s log group.

func (*Trail) EnableLogFileValidation

func (r *Trail) EnableLogFileValidation() *pulumi.BoolOutput

Specifies whether log file integrity validation is enabled. Defaults to `false`.

func (*Trail) EnableLogging

func (r *Trail) EnableLogging() *pulumi.BoolOutput

Enables logging for the trail. Defaults to `true`. Setting this to `false` will pause logging.

func (*Trail) EventSelectors

func (r *Trail) EventSelectors() *pulumi.ArrayOutput

Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these.

func (*Trail) HomeRegion

func (r *Trail) HomeRegion() *pulumi.StringOutput

The region in which the trail was created.

func (*Trail) ID

func (r *Trail) ID() *pulumi.IDOutput

ID is this resource's unique identifier assigned by its provider.

func (*Trail) IncludeGlobalServiceEvents

func (r *Trail) IncludeGlobalServiceEvents() *pulumi.BoolOutput

Specifies whether the trail is publishing events from global services such as IAM to the log files. Defaults to `true`.

func (*Trail) IsMultiRegionTrail

func (r *Trail) IsMultiRegionTrail() *pulumi.BoolOutput

Specifies whether the trail is created in the current region or in all regions. Defaults to `false`.

func (*Trail) IsOrganizationTrail added in v0.16.4

func (r *Trail) IsOrganizationTrail() *pulumi.BoolOutput

Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.

func (*Trail) KmsKeyId

func (r *Trail) KmsKeyId() *pulumi.StringOutput

Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail.

func (*Trail) Name

func (r *Trail) Name() *pulumi.StringOutput

Specifies the name of the trail.

func (*Trail) S3BucketName

func (r *Trail) S3BucketName() *pulumi.StringOutput

Specifies the name of the S3 bucket designated for publishing log files.

func (*Trail) S3KeyPrefix

func (r *Trail) S3KeyPrefix() *pulumi.StringOutput

Specifies the S3 key prefix that follows the name of the bucket you have designated for log file delivery.

func (*Trail) SnsTopicName

func (r *Trail) SnsTopicName() *pulumi.StringOutput

Specifies the name of the Amazon SNS topic defined for notification of log file delivery.

func (*Trail) Tags

func (r *Trail) Tags() *pulumi.MapOutput

A mapping of tags to assign to the trail

func (*Trail) URN

func (r *Trail) URN() *pulumi.URNOutput

URN is this resource's unique name assigned by Pulumi.

type TrailArgs

type TrailArgs struct {
	// Specifies a log group name using an Amazon Resource Name (ARN),
	// that represents the log group to which CloudTrail logs will be delivered.
	CloudWatchLogsGroupArn interface{}
	// Specifies the role for the CloudWatch Logs
	// endpoint to assume to write to a user’s log group.
	CloudWatchLogsRoleArn interface{}
	// Specifies whether log file integrity validation is enabled.
	// Defaults to `false`.
	EnableLogFileValidation interface{}
	// Enables logging for the trail. Defaults to `true`.
	// Setting this to `false` will pause logging.
	EnableLogging interface{}
	// Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these.
	EventSelectors interface{}
	// Specifies whether the trail is publishing events
	// from global services such as IAM to the log files. Defaults to `true`.
	IncludeGlobalServiceEvents interface{}
	// Specifies whether the trail is created in the current
	// region or in all regions. Defaults to `false`.
	IsMultiRegionTrail interface{}
	// Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.
	IsOrganizationTrail interface{}
	// Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail.
	KmsKeyId interface{}
	// Specifies the name of the trail.
	Name interface{}
	// Specifies the name of the S3 bucket designated for publishing log files.
	S3BucketName interface{}
	// Specifies the S3 key prefix that follows
	// the name of the bucket you have designated for log file delivery.
	S3KeyPrefix interface{}
	// Specifies the name of the Amazon SNS topic
	// defined for notification of log file delivery.
	SnsTopicName interface{}
	// A mapping of tags to assign to the trail
	Tags interface{}
}

The set of arguments for constructing a Trail resource.

type TrailState

type TrailState struct {
	// The Amazon Resource Name of the trail.
	Arn interface{}
	// Specifies a log group name using an Amazon Resource Name (ARN),
	// that represents the log group to which CloudTrail logs will be delivered.
	CloudWatchLogsGroupArn interface{}
	// Specifies the role for the CloudWatch Logs
	// endpoint to assume to write to a user’s log group.
	CloudWatchLogsRoleArn interface{}
	// Specifies whether log file integrity validation is enabled.
	// Defaults to `false`.
	EnableLogFileValidation interface{}
	// Enables logging for the trail. Defaults to `true`.
	// Setting this to `false` will pause logging.
	EnableLogging interface{}
	// Specifies an event selector for enabling data event logging. Fields documented below. Please note the [CloudTrail limits](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) when configuring these.
	EventSelectors interface{}
	// The region in which the trail was created.
	HomeRegion interface{}
	// Specifies whether the trail is publishing events
	// from global services such as IAM to the log files. Defaults to `true`.
	IncludeGlobalServiceEvents interface{}
	// Specifies whether the trail is created in the current
	// region or in all regions. Defaults to `false`.
	IsMultiRegionTrail interface{}
	// Specifies whether the trail is an AWS Organizations trail. Organization trails log events for the master account and all member accounts. Can only be created in the organization master account. Defaults to `false`.
	IsOrganizationTrail interface{}
	// Specifies the KMS key ARN to use to encrypt the logs delivered by CloudTrail.
	KmsKeyId interface{}
	// Specifies the name of the trail.
	Name interface{}
	// Specifies the name of the S3 bucket designated for publishing log files.
	S3BucketName interface{}
	// Specifies the S3 key prefix that follows
	// the name of the bucket you have designated for log file delivery.
	S3KeyPrefix interface{}
	// Specifies the name of the Amazon SNS topic
	// defined for notification of log file delivery.
	SnsTopicName interface{}
	// A mapping of tags to assign to the trail
	Tags interface{}
}

Input properties used for looking up and filtering Trail resources.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL