405 lines
24 KiB
C
405 lines
24 KiB
C
|
|
/**
|
|||
|
|
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|||
|
|
* SPDX-License-Identifier: Apache-2.0.
|
|||
|
|
*/
|
|||
|
|
|
|||
|
|
#pragma once
|
|||
|
|
#include <aws/cloudtrail/CloudTrail_EXPORTS.h>
|
|||
|
|
#include <aws/core/utils/memory/stl/AWSString.h>
|
|||
|
|
#include <aws/core/utils/memory/stl/AWSVector.h>
|
|||
|
|
#include <utility>
|
|||
|
|
|
|||
|
|
namespace Aws
|
|||
|
|
{
|
|||
|
|
namespace Utils
|
|||
|
|
{
|
|||
|
|
namespace Json
|
|||
|
|
{
|
|||
|
|
class JsonValue;
|
|||
|
|
class JsonView;
|
|||
|
|
} // namespace Json
|
|||
|
|
} // namespace Utils
|
|||
|
|
namespace CloudTrail
|
|||
|
|
{
|
|||
|
|
namespace Model
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The Amazon S3 buckets or AWS Lambda functions that you specify in your event
|
|||
|
|
* selectors for your trail to log data events. Data events provide information
|
|||
|
|
* about the resource operations performed on or within a resource itself. These
|
|||
|
|
* are also known as data plane operations. You can specify up to 250 data
|
|||
|
|
* resources for a trail.</p> <p>The total number of allowed data resources
|
|||
|
|
* is 250. This number can be distributed between 1 and 5 event selectors, but the
|
|||
|
|
* total cannot exceed 250 across all selectors.</p> <p>The following
|
|||
|
|
* example demonstrates how logging works when you configure logging of all data
|
|||
|
|
* events for an S3 bucket named <code>bucket-1</code>. In this example, the
|
|||
|
|
* CloudTrail user specified an empty prefix, and the option to log both
|
|||
|
|
* <code>Read</code> and <code>Write</code> data events.</p> <ol> <li> <p>A user
|
|||
|
|
* uploads an image file to <code>bucket-1</code>.</p> </li> <li> <p>The
|
|||
|
|
* <code>PutObject</code> API operation is an Amazon S3 object-level API. It is
|
|||
|
|
* recorded as a data event in CloudTrail. Because the CloudTrail user specified an
|
|||
|
|
* S3 bucket with an empty prefix, events that occur on any object in that bucket
|
|||
|
|
* are logged. The trail processes and logs the event.</p> </li> <li> <p>A user
|
|||
|
|
* uploads an object to an Amazon S3 bucket named
|
|||
|
|
* <code>arn:aws:s3:::bucket-2</code>.</p> </li> <li> <p>The <code>PutObject</code>
|
|||
|
|
* API operation occurred for an object in an S3 bucket that the CloudTrail user
|
|||
|
|
* didn't specify for the trail. The trail doesn’t log the event.</p> </li> </ol>
|
|||
|
|
* <p>The following example demonstrates how logging works when you configure
|
|||
|
|
* logging of AWS Lambda data events for a Lambda function named
|
|||
|
|
* <i>MyLambdaFunction</i>, but not for all AWS Lambda functions.</p> <ol> <li>
|
|||
|
|
* <p>A user runs a script that includes a call to the <i>MyLambdaFunction</i>
|
|||
|
|
* function and the <i>MyOtherLambdaFunction</i> function.</p> </li> <li> <p>The
|
|||
|
|
* <code>Invoke</code> API operation on <i>MyLambdaFunction</i> is an AWS Lambda
|
|||
|
|
* API. It is recorded as a data event in CloudTrail. Because the CloudTrail user
|
|||
|
|
* specified logging data events for <i>MyLambdaFunction</i>, any invocations of
|
|||
|
|
* that function are logged. The trail processes and logs the event. </p> </li>
|
|||
|
|
* <li> <p>The <code>Invoke</code> API operation on <i>MyOtherLambdaFunction</i> is
|
|||
|
|
* an AWS Lambda API. Because the CloudTrail user did not specify logging data
|
|||
|
|
* events for all Lambda functions, the <code>Invoke</code> operation for
|
|||
|
|
* <i>MyOtherLambdaFunction</i> does not match the function specified for the
|
|||
|
|
* trail. The trail doesn’t log the event. </p> </li> </ol><p><h3>See Also:</h3>
|
|||
|
|
* <a
|
|||
|
|
* href="http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/DataResource">AWS
|
|||
|
|
* API Reference</a></p>
|
|||
|
|
*/
|
|||
|
|
class AWS_CLOUDTRAIL_API DataResource
|
|||
|
|
{
|
|||
|
|
public:
|
|||
|
|
DataResource();
|
|||
|
|
DataResource(Aws::Utils::Json::JsonView jsonValue);
|
|||
|
|
DataResource& operator=(Aws::Utils::Json::JsonView jsonValue);
|
|||
|
|
Aws::Utils::Json::JsonValue Jsonize() const;
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline const Aws::String& GetType() const{ return m_type; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline bool TypeHasBeenSet() const { return m_typeHasBeenSet; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline void SetType(const Aws::String& value) { m_typeHasBeenSet = true; m_type = value; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline void SetType(Aws::String&& value) { m_typeHasBeenSet = true; m_type = std::move(value); }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline void SetType(const char* value) { m_typeHasBeenSet = true; m_type.assign(value); }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& WithType(const Aws::String& value) { SetType(value); return *this;}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& WithType(Aws::String&& value) { SetType(std::move(value)); return *this;}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>The resource type in which you want to log data events. You can specify
|
|||
|
|
* <code>AWS::S3::Object</code> or <code>AWS::Lambda::Function</code>
|
|||
|
|
* resources.</p>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& WithType(const char* value) { SetType(value); return *this;}
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline const Aws::Vector<Aws::String>& GetValues() const{ return m_values; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline bool ValuesHasBeenSet() const { return m_valuesHasBeenSet; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline void SetValues(const Aws::Vector<Aws::String>& value) { m_valuesHasBeenSet = true; m_values = value; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline void SetValues(Aws::Vector<Aws::String>&& value) { m_valuesHasBeenSet = true; m_values = std::move(value); }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& WithValues(const Aws::Vector<Aws::String>& value) { SetValues(value); return *this;}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& WithValues(Aws::Vector<Aws::String>&& value) { SetValues(std::move(value)); return *this;}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& AddValues(const Aws::String& value) { m_valuesHasBeenSet = true; m_values.push_back(value); return *this; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& AddValues(Aws::String&& value) { m_valuesHasBeenSet = true; m_values.push_back(std::move(value)); return *this; }
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
|
|||
|
|
* specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
|
|||
|
|
* buckets in your AWS account, specify the prefix as <code>arn:aws:s3:::</code>.
|
|||
|
|
* </p> <p>This will also enable logging of data event activity performed by
|
|||
|
|
* any user or role in your AWS account, even if that activity is performed on a
|
|||
|
|
* bucket that belongs to another AWS account. </p> </li> <li> <p>To log
|
|||
|
|
* data events for all objects in an S3 bucket, specify the bucket and an empty
|
|||
|
|
* object prefix such as <code>arn:aws:s3:::bucket-1/</code>. The trail logs data
|
|||
|
|
* events for all objects in this S3 bucket.</p> </li> <li> <p>To log data events
|
|||
|
|
* for specific objects, specify the S3 bucket and object prefix such as
|
|||
|
|
* <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
|
|||
|
|
* for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
|
|||
|
|
* data events for all functions in your AWS account, specify the prefix as
|
|||
|
|
* <code>arn:aws:lambda</code>.</p> <p>This will also enable logging of
|
|||
|
|
* <code>Invoke</code> activity performed by any user or role in your AWS account,
|
|||
|
|
* even if that activity is performed on a function that belongs to another AWS
|
|||
|
|
* account. </p> </li> <li> <p>To log data events for a specific Lambda
|
|||
|
|
* function, specify the function ARN.</p> <p>Lambda function ARNs are
|
|||
|
|
* exact. For example, if you specify a function ARN
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>, data events
|
|||
|
|
* will only be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
|
|||
|
|
* be logged for
|
|||
|
|
* <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p>
|
|||
|
|
* </li> </ul>
|
|||
|
|
*/
|
|||
|
|
inline DataResource& AddValues(const char* value) { m_valuesHasBeenSet = true; m_values.push_back(value); return *this; }
|
|||
|
|
|
|||
|
|
private:
|
|||
|
|
|
|||
|
|
Aws::String m_type;
|
|||
|
|
bool m_typeHasBeenSet;
|
|||
|
|
|
|||
|
|
Aws::Vector<Aws::String> m_values;
|
|||
|
|
bool m_valuesHasBeenSet;
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
} // namespace Model
|
|||
|
|
} // namespace CloudTrail
|
|||
|
|
} // namespace Aws
|