EventDataStore

cloudtrail.services.k8s.aws/v1alpha1

TypeLink
GoDoccloudtrail-controller/apis/v1alpha1#EventDataStore

Metadata

PropertyValue
ScopeNamespaced
KindEventDataStore
ListKindEventDataStoreList
Pluraleventdatastores
Singulareventdatastore

A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 90 to 2555 days (about three months to up to seven years). To select events for an event data store, use advanced event selectors (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-advanced).

Spec

advancedEventSelectors:
  fieldSelectors:
    endsWith:
    - string
    equals:
    - string
    field: string
    notEndsWith:
    - string
    notEquals:
    - string
    notStartsWith:
    - string
    startsWith:
    - string
  name: string
multiRegionEnabled: boolean
name: string
organizationEnabled: boolean
retentionPeriod: integer
tags:
- key: string
  value: string
terminationProtectionEnabled: boolean
FieldDescription
advancedEventSelectors
Optional
array
The advanced event selectors to use to select the events for the data store. For more information about how to use advanced event selectors, see Log events by using advanced event selectors (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-advanced) in the CloudTrail User Guide.
advancedEventSelectors.[]
Required
object
Advanced event selectors let you create fine-grained selectors for the following CloudTrail event record fields. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see Logging data events for trails (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html) in the CloudTrail User Guide.
  • readOnly
  • eventSource
  • eventName
  • eventCategory
  • resources.type
  • resources.ARN You cannot apply both event selectors and advanced event selectors to a trail. || advancedEventSelectors.[].fieldSelectors
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[]
    Required | object
    A single selector statement in an advanced event selector. || advancedEventSelectors.[].fieldSelectors.[].endsWith
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].endsWith.[]
    Required | string
    || advancedEventSelectors.[].fieldSelectors.[].equals
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].equals.[]
    Required | string
    || advancedEventSelectors.[].fieldSelectors.[].field
    Optional | string
    | | advancedEventSelectors.[].fieldSelectors.[].notEndsWith
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].notEndsWith.[]
    Required | string
    || advancedEventSelectors.[].fieldSelectors.[].notEquals
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].notEquals.[]
    Required | string
    || advancedEventSelectors.[].fieldSelectors.[].notStartsWith
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].notStartsWith.[]
    Required | string
    || advancedEventSelectors.[].fieldSelectors.[].startsWith
    Optional | array
    | | advancedEventSelectors.[].fieldSelectors.[].startsWith.[]
    Required | string
    || advancedEventSelectors.[].name
    Optional | string
    | | multiRegionEnabled
    Optional | boolean
    Specifies whether the event data store includes events from all regions, or only from the region in which the event data store is created. | | name
    Required | string
    The name of the event data store. | | organizationEnabled
    Optional | boolean
    Specifies whether an event data store collects events logged for an organization in Organizations. | | retentionPeriod
    Optional | integer
    The retention period of the event data store, in days. You can set a retention period of up to 2555 days, the equivalent of seven years. | | tags
    Optional | array
    | | tags.[]
    Required | object
    A custom key-value pair associated with a resource such as a CloudTrail trail. || tags.[].key
    Optional | string
    | | tags.[].value
    Optional | string
    | | terminationProtectionEnabled
    Optional | boolean
    Specifies whether termination protection is enabled for the event data store. If termination protection is enabled, you cannot delete the event data store until termination protection is disabled. |

Status

ackResourceMetadata: 
  arn: string
  ownerAccountID: string
  region: string
conditions:
- lastTransitionTime: string
  message: string
  reason: string
  status: string
  type: string
createdTimestamp: string
status: string
updatedTimestamp: string
FieldDescription
ackResourceMetadata
Optional
object
All CRs managed by ACK have a common Status.ACKResourceMetadata member that is used to contain resource sync state, account ownership, constructed ARN for the resource
ackResourceMetadata.arn
Optional
string
ARN is the Amazon Resource Name for the resource. This is a globally-unique identifier and is set only by the ACK service controller once the controller has orchestrated the creation of the resource OR when it has verified that an “adopted” resource (a resource where the ARN annotation was set by the Kubernetes user on the CR) exists and matches the supplied CR’s Spec field values. TODO(vijat@): Find a better strategy for resources that do not have ARN in CreateOutputResponse https://github.com/aws/aws-controllers-k8s/issues/270
ackResourceMetadata.ownerAccountID
Required
string
OwnerAccountID is the AWS Account ID of the account that owns the backend AWS service API resource.
ackResourceMetadata.region
Required
string
Region is the AWS region in which the resource exists or will exist.
conditions
Optional
array
All CRS managed by ACK have a common Status.Conditions member that contains a collection of ackv1alpha1.Condition objects that describe the various terminal states of the CR and its backend AWS service API resource
conditions.[]
Required
object
Condition is the common struct used by all CRDs managed by ACK service controllers to indicate terminal states of the CR and its backend AWS service API resource
conditions.[].message
Optional
string
A human readable message indicating details about the transition.
conditions.[].reason
Optional
string
The reason for the condition’s last transition.
conditions.[].status
Optional
string
Status of the condition, one of True, False, Unknown.
conditions.[].type
Optional
string
Type is the type of the Condition
createdTimestamp
Optional
string
The timestamp that shows when the event data store was created.
status
Optional
string
The status of event data store creation.
updatedTimestamp
Optional
string
The timestamp that shows when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.