Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. awsconnector
  5. getCloudTrailTrail
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.awsconnector.getCloudTrailTrail

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native

Get a CloudTrailTrail

Uses Azure REST API version 2024-12-01.

Using getCloudTrailTrail

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getCloudTrailTrail(args: GetCloudTrailTrailArgs, opts?: InvokeOptions): Promise<GetCloudTrailTrailResult>
function getCloudTrailTrailOutput(args: GetCloudTrailTrailOutputArgs, opts?: InvokeOptions): Output<GetCloudTrailTrailResult>
Copy
def get_cloud_trail_trail(name: Optional[str] = None,
                          resource_group_name: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetCloudTrailTrailResult
def get_cloud_trail_trail_output(name: Optional[pulumi.Input[str]] = None,
                          resource_group_name: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetCloudTrailTrailResult]
Copy
func LookupCloudTrailTrail(ctx *Context, args *LookupCloudTrailTrailArgs, opts ...InvokeOption) (*LookupCloudTrailTrailResult, error)
func LookupCloudTrailTrailOutput(ctx *Context, args *LookupCloudTrailTrailOutputArgs, opts ...InvokeOption) LookupCloudTrailTrailResultOutput
Copy

> Note: This function is named LookupCloudTrailTrail in the Go SDK.

public static class GetCloudTrailTrail 
{
    public static Task<GetCloudTrailTrailResult> InvokeAsync(GetCloudTrailTrailArgs args, InvokeOptions? opts = null)
    public static Output<GetCloudTrailTrailResult> Invoke(GetCloudTrailTrailInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetCloudTrailTrailResult> getCloudTrailTrail(GetCloudTrailTrailArgs args, InvokeOptions options)
public static Output<GetCloudTrailTrailResult> getCloudTrailTrail(GetCloudTrailTrailArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: azure-native:awsconnector:getCloudTrailTrail
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

Name
This property is required.
Changes to this property will trigger replacement.
string
Name of CloudTrailTrail
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
Name
This property is required.
Changes to this property will trigger replacement.
string
Name of CloudTrailTrail
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
name
This property is required.
Changes to this property will trigger replacement.
String
Name of CloudTrailTrail
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.
name
This property is required.
Changes to this property will trigger replacement.
string
Name of CloudTrailTrail
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
name
This property is required.
Changes to this property will trigger replacement.
str
Name of CloudTrailTrail
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group. The name is case insensitive.
name
This property is required.
Changes to this property will trigger replacement.
String
Name of CloudTrailTrail
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.

getCloudTrailTrail Result

The following output properties are available:

AzureApiVersion string
The Azure API version of the resource.
Id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
Location string
The geo-location where the resource lives
Name string
The name of the resource
Properties Pulumi.AzureNative.AwsConnector.Outputs.CloudTrailTrailPropertiesResponse
The resource-specific properties for this resource.
SystemData Pulumi.AzureNative.AwsConnector.Outputs.SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
Tags Dictionary<string, string>
Resource tags.
AzureApiVersion string
The Azure API version of the resource.
Id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
Location string
The geo-location where the resource lives
Name string
The name of the resource
Properties CloudTrailTrailPropertiesResponse
The resource-specific properties for this resource.
SystemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
Tags map[string]string
Resource tags.
azureApiVersion String
The Azure API version of the resource.
id String
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
location String
The geo-location where the resource lives
name String
The name of the resource
properties CloudTrailTrailPropertiesResponse
The resource-specific properties for this resource.
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
tags Map<String,String>
Resource tags.
azureApiVersion string
The Azure API version of the resource.
id string
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
location string
The geo-location where the resource lives
name string
The name of the resource
properties CloudTrailTrailPropertiesResponse
The resource-specific properties for this resource.
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
tags {[key: string]: string}
Resource tags.
azure_api_version str
The Azure API version of the resource.
id str
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
location str
The geo-location where the resource lives
name str
The name of the resource
properties CloudTrailTrailPropertiesResponse
The resource-specific properties for this resource.
system_data SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type str
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
tags Mapping[str, str]
Resource tags.
azureApiVersion String
The Azure API version of the resource.
id String
Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
location String
The geo-location where the resource lives
name String
The name of the resource
properties Property Map
The resource-specific properties for this resource.
systemData Property Map
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
tags Map<String>
Resource tags.

Supporting Types

AdvancedEventSelectorResponse

FieldSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.AdvancedFieldSelectorResponse>
Contains all selector statements in an advanced event selector.
Name string
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
FieldSelectors []AdvancedFieldSelectorResponse
Contains all selector statements in an advanced event selector.
Name string
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
fieldSelectors List<AdvancedFieldSelectorResponse>
Contains all selector statements in an advanced event selector.
name String
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
fieldSelectors AdvancedFieldSelectorResponse[]
Contains all selector statements in an advanced event selector.
name string
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
field_selectors Sequence[AdvancedFieldSelectorResponse]
Contains all selector statements in an advanced event selector.
name str
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
fieldSelectors List<Property Map>
Contains all selector statements in an advanced event selector.
name String
An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.

AdvancedFieldSelectorResponse

EndsWith List<string>
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
Equals List<string>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
Field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
NotEndsWith List<string>
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
NotEquals List<string>
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
NotStartsWith List<string>
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
StartsWith List<string>
An operator that includes events that match the first few characters of the event record field specified as the value of Field.
EndsWith []string
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
Equals []string
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
Field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
NotEndsWith []string
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
NotEquals []string
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
NotStartsWith []string
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
StartsWith []string
An operator that includes events that match the first few characters of the event record field specified as the value of Field.
endsWith List<String>
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals_ List<String>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
field String
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
notEndsWith List<String>
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals List<String>
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith List<String>
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith List<String>
An operator that includes events that match the first few characters of the event record field specified as the value of Field.
endsWith string[]
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals string[]
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
field string
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
notEndsWith string[]
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals string[]
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith string[]
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith string[]
An operator that includes events that match the first few characters of the event record field specified as the value of Field.
ends_with Sequence[str]
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals Sequence[str]
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
field str
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
not_ends_with Sequence[str]
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
not_equals Sequence[str]
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
not_starts_with Sequence[str]
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
starts_with Sequence[str]
An operator that includes events that match the first few characters of the event record field specified as the value of Field.
endsWith List<String>
An operator that includes events that match the last few characters of the event record field specified as the value of Field.
equals List<String>
An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
field String
A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
notEndsWith List<String>
An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
notEquals List<String>
An operator that excludes events that match the exact value of the event record field specified as the value of Field.
notStartsWith List<String>
An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
startsWith List<String>
An operator that includes events that match the first few characters of the event record field specified as the value of Field.

AwsCloudTrailTrailPropertiesResponse

AdvancedEventSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.AdvancedEventSelectorResponse>
The advanced event selectors that were used to select events for the data store.
Arn string
Property arn
CloudWatchLogsLogGroupArn string
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
CloudWatchLogsRoleArn string
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
EnableLogFileValidation bool
Specifies whether log file validation is enabled. The default is false.
EventSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.EventSelectorResponse>
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
IncludeGlobalServiceEvents bool
Specifies whether the trail is publishing events from global services such as IAM to the log files.
InsightSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.InsightSelectorResponse>
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
IsLogging bool
Whether the CloudTrail is currently logging AWS API calls.
IsMultiRegionTrail bool
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
IsOrganizationTrail bool
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
KmsKeyId string
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
S3BucketName string
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
S3KeyPrefix string
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
SnsTopicArn string
Property snsTopicArn
SnsTopicName string
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
Tags List<Pulumi.AzureNative.AwsConnector.Inputs.TagResponse>
Property tags
TrailName string
Property trailName
AdvancedEventSelectors []AdvancedEventSelectorResponse
The advanced event selectors that were used to select events for the data store.
Arn string
Property arn
CloudWatchLogsLogGroupArn string
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
CloudWatchLogsRoleArn string
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
EnableLogFileValidation bool
Specifies whether log file validation is enabled. The default is false.
EventSelectors []EventSelectorResponse
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
IncludeGlobalServiceEvents bool
Specifies whether the trail is publishing events from global services such as IAM to the log files.
InsightSelectors []InsightSelectorResponse
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
IsLogging bool
Whether the CloudTrail is currently logging AWS API calls.
IsMultiRegionTrail bool
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
IsOrganizationTrail bool
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
KmsKeyId string
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
S3BucketName string
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
S3KeyPrefix string
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
SnsTopicArn string
Property snsTopicArn
SnsTopicName string
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
Tags []TagResponse
Property tags
TrailName string
Property trailName
advancedEventSelectors List<AdvancedEventSelectorResponse>
The advanced event selectors that were used to select events for the data store.
arn String
Property arn
cloudWatchLogsLogGroupArn String
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
cloudWatchLogsRoleArn String
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
enableLogFileValidation Boolean
Specifies whether log file validation is enabled. The default is false.
eventSelectors List<EventSelectorResponse>
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
includeGlobalServiceEvents Boolean
Specifies whether the trail is publishing events from global services such as IAM to the log files.
insightSelectors List<InsightSelectorResponse>
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
isLogging Boolean
Whether the CloudTrail is currently logging AWS API calls.
isMultiRegionTrail Boolean
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
isOrganizationTrail Boolean
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
kmsKeyId String
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
s3BucketName String
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
s3KeyPrefix String
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
snsTopicArn String
Property snsTopicArn
snsTopicName String
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
tags List<TagResponse>
Property tags
trailName String
Property trailName
advancedEventSelectors AdvancedEventSelectorResponse[]
The advanced event selectors that were used to select events for the data store.
arn string
Property arn
cloudWatchLogsLogGroupArn string
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
cloudWatchLogsRoleArn string
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
enableLogFileValidation boolean
Specifies whether log file validation is enabled. The default is false.
eventSelectors EventSelectorResponse[]
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
includeGlobalServiceEvents boolean
Specifies whether the trail is publishing events from global services such as IAM to the log files.
insightSelectors InsightSelectorResponse[]
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
isLogging boolean
Whether the CloudTrail is currently logging AWS API calls.
isMultiRegionTrail boolean
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
isOrganizationTrail boolean
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
kmsKeyId string
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
s3BucketName string
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
s3KeyPrefix string
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
snsTopicArn string
Property snsTopicArn
snsTopicName string
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
tags TagResponse[]
Property tags
trailName string
Property trailName
advanced_event_selectors Sequence[AdvancedEventSelectorResponse]
The advanced event selectors that were used to select events for the data store.
arn str
Property arn
cloud_watch_logs_log_group_arn str
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
cloud_watch_logs_role_arn str
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
enable_log_file_validation bool
Specifies whether log file validation is enabled. The default is false.
event_selectors Sequence[EventSelectorResponse]
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
include_global_service_events bool
Specifies whether the trail is publishing events from global services such as IAM to the log files.
insight_selectors Sequence[InsightSelectorResponse]
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
is_logging bool
Whether the CloudTrail is currently logging AWS API calls.
is_multi_region_trail bool
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
is_organization_trail bool
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
kms_key_id str
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
s3_bucket_name str
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
s3_key_prefix str
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
sns_topic_arn str
Property snsTopicArn
sns_topic_name str
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
tags Sequence[TagResponse]
Property tags
trail_name str
Property trailName
advancedEventSelectors List<Property Map>
The advanced event selectors that were used to select events for the data store.
arn String
Property arn
cloudWatchLogsLogGroupArn String
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
cloudWatchLogsRoleArn String
Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
enableLogFileValidation Boolean
Specifies whether log file validation is enabled. The default is false.
eventSelectors List<Property Map>
Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
includeGlobalServiceEvents Boolean
Specifies whether the trail is publishing events from global services such as IAM to the log files.
insightSelectors List<Property Map>
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
isLogging Boolean
Whether the CloudTrail is currently logging AWS API calls.
isMultiRegionTrail Boolean
Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
isOrganizationTrail Boolean
Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
kmsKeyId String
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
s3BucketName String
Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
s3KeyPrefix String
Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
snsTopicArn String
Property snsTopicArn
snsTopicName String
Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
tags List<Property Map>
Property tags
trailName String
Property trailName

CloudTrailTrailPropertiesResponse

ProvisioningState This property is required. string
The status of the last operation.
Arn string
Amazon Resource Name (ARN)
AwsAccountId string
AWS Account ID
AwsProperties Pulumi.AzureNative.AwsConnector.Inputs.AwsCloudTrailTrailPropertiesResponse
AWS Properties
AwsRegion string
AWS Region
AwsSourceSchema string
AWS Source Schema
AwsTags Dictionary<string, string>
AWS Tags
PublicCloudConnectorsResourceId string
Public Cloud Connectors Resource ID
PublicCloudResourceName string
Public Cloud Resource Name
ProvisioningState This property is required. string
The status of the last operation.
Arn string
Amazon Resource Name (ARN)
AwsAccountId string
AWS Account ID
AwsProperties AwsCloudTrailTrailPropertiesResponse
AWS Properties
AwsRegion string
AWS Region
AwsSourceSchema string
AWS Source Schema
AwsTags map[string]string
AWS Tags
PublicCloudConnectorsResourceId string
Public Cloud Connectors Resource ID
PublicCloudResourceName string
Public Cloud Resource Name
provisioningState This property is required. String
The status of the last operation.
arn String
Amazon Resource Name (ARN)
awsAccountId String
AWS Account ID
awsProperties AwsCloudTrailTrailPropertiesResponse
AWS Properties
awsRegion String
AWS Region
awsSourceSchema String
AWS Source Schema
awsTags Map<String,String>
AWS Tags
publicCloudConnectorsResourceId String
Public Cloud Connectors Resource ID
publicCloudResourceName String
Public Cloud Resource Name
provisioningState This property is required. string
The status of the last operation.
arn string
Amazon Resource Name (ARN)
awsAccountId string
AWS Account ID
awsProperties AwsCloudTrailTrailPropertiesResponse
AWS Properties
awsRegion string
AWS Region
awsSourceSchema string
AWS Source Schema
awsTags {[key: string]: string}
AWS Tags
publicCloudConnectorsResourceId string
Public Cloud Connectors Resource ID
publicCloudResourceName string
Public Cloud Resource Name
provisioning_state This property is required. str
The status of the last operation.
arn str
Amazon Resource Name (ARN)
aws_account_id str
AWS Account ID
aws_properties AwsCloudTrailTrailPropertiesResponse
AWS Properties
aws_region str
AWS Region
aws_source_schema str
AWS Source Schema
aws_tags Mapping[str, str]
AWS Tags
public_cloud_connectors_resource_id str
Public Cloud Connectors Resource ID
public_cloud_resource_name str
Public Cloud Resource Name
provisioningState This property is required. String
The status of the last operation.
arn String
Amazon Resource Name (ARN)
awsAccountId String
AWS Account ID
awsProperties Property Map
AWS Properties
awsRegion String
AWS Region
awsSourceSchema String
AWS Source Schema
awsTags Map<String>
AWS Tags
publicCloudConnectorsResourceId String
Public Cloud Connectors Resource ID
publicCloudResourceName String
Public Cloud Resource Name

DataResourceResponse

Type string
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
Values List<string>
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
Type string
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
Values []string
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
type String
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
values List<String>
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
type string
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
values string[]
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
type str
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
values Sequence[str]
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
type String
The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
values List<String>
An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.

EventSelectorResponse

DataResources List<Pulumi.AzureNative.AwsConnector.Inputs.DataResourceResponse>
Property dataResources
ExcludeManagementEventSources List<string>
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
IncludeManagementEvents bool
Specify if you want your event selector to include management events for your trail.
ReadWriteType string
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
DataResources []DataResourceResponse
Property dataResources
ExcludeManagementEventSources []string
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
IncludeManagementEvents bool
Specify if you want your event selector to include management events for your trail.
ReadWriteType string
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
dataResources List<DataResourceResponse>
Property dataResources
excludeManagementEventSources List<String>
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
includeManagementEvents Boolean
Specify if you want your event selector to include management events for your trail.
readWriteType String
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
dataResources DataResourceResponse[]
Property dataResources
excludeManagementEventSources string[]
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
includeManagementEvents boolean
Specify if you want your event selector to include management events for your trail.
readWriteType string
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
data_resources Sequence[DataResourceResponse]
Property dataResources
exclude_management_event_sources Sequence[str]
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
include_management_events bool
Specify if you want your event selector to include management events for your trail.
read_write_type str
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
dataResources List<Property Map>
Property dataResources
excludeManagementEventSources List<String>
An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
includeManagementEvents Boolean
Specify if you want your event selector to include management events for your trail.
readWriteType String
Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

InsightSelectorResponse

InsightType string
The type of insight to log on a trail.
InsightType string
The type of insight to log on a trail.
insightType String
The type of insight to log on a trail.
insightType string
The type of insight to log on a trail.
insight_type str
The type of insight to log on a trail.
insightType String
The type of insight to log on a trail.

SystemDataResponse

CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.
createdAt string
The timestamp of resource creation (UTC).
createdBy string
The identity that created the resource.
createdByType string
The type of identity that created the resource.
lastModifiedAt string
The timestamp of resource last modification (UTC)
lastModifiedBy string
The identity that last modified the resource.
lastModifiedByType string
The type of identity that last modified the resource.
created_at str
The timestamp of resource creation (UTC).
created_by str
The identity that created the resource.
created_by_type str
The type of identity that created the resource.
last_modified_at str
The timestamp of resource last modification (UTC)
last_modified_by str
The identity that last modified the resource.
last_modified_by_type str
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.

TagResponse

Key string
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Value string
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Key string
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
Value string
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
key String
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value String
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
key string
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value string
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
key str
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value str
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
key String
The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
value String
The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native