We recommend new projects start with resources from the AWS provider.
aws-native.cloudtrail.getEventDataStore
Explore with Pulumi AI
We recommend new projects start with resources from the AWS provider.
A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 7 to 2557 or 3653 days (about seven or ten years) depending on the selected BillingMode.
Using getEventDataStore
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEventDataStore(args: GetEventDataStoreArgs, opts?: InvokeOptions): Promise<GetEventDataStoreResult>
function getEventDataStoreOutput(args: GetEventDataStoreOutputArgs, opts?: InvokeOptions): Output<GetEventDataStoreResult>
def get_event_data_store(event_data_store_arn: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetEventDataStoreResult
def get_event_data_store_output(event_data_store_arn: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetEventDataStoreResult]
func LookupEventDataStore(ctx *Context, args *LookupEventDataStoreArgs, opts ...InvokeOption) (*LookupEventDataStoreResult, error)
func LookupEventDataStoreOutput(ctx *Context, args *LookupEventDataStoreOutputArgs, opts ...InvokeOption) LookupEventDataStoreResultOutput
> Note: This function is named LookupEventDataStore
in the Go SDK.
public static class GetEventDataStore
{
public static Task<GetEventDataStoreResult> InvokeAsync(GetEventDataStoreArgs args, InvokeOptions? opts = null)
public static Output<GetEventDataStoreResult> Invoke(GetEventDataStoreInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetEventDataStoreResult> getEventDataStore(GetEventDataStoreArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: aws-native:cloudtrail:getEventDataStore
arguments:
# arguments dictionary
The following arguments are supported:
- Event
Data stringStore Arn - The ARN of the event data store.
- Event
Data stringStore Arn - The ARN of the event data store.
- event
Data StringStore Arn - The ARN of the event data store.
- event
Data stringStore Arn - The ARN of the event data store.
- event_
data_ strstore_ arn - The ARN of the event data store.
- event
Data StringStore Arn - The ARN of the event data store.
getEventDataStore Result
The following output properties are available:
- Advanced
Event List<Pulumi.Selectors Aws Native. Cloud Trail. Outputs. Event Data Store Advanced Event Selector> - The advanced event selectors that were used to select events for the data store.
- Billing
Mode string - The mode that the event data store will use to charge for event storage.
- Created
Timestamp string - The timestamp of the event data store's creation.
- Event
Data stringStore Arn - The ARN of the event data store.
- Federation
Enabled bool - Indicates whether federation is enabled on an event data store.
- Federation
Role stringArn - The ARN of the role used for event data store federation.
- Ingestion
Enabled bool - Indicates whether the event data store is ingesting events.
- Insight
Selectors List<Pulumi.Aws Native. Cloud Trail. Outputs. Event Data Store Insight Selector> - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- Insights
Destination string - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- Kms
Key stringId - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- Multi
Region boolEnabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- Name string
- The name of the event data store.
- Organization
Enabled bool - Indicates that an event data store is collecting logged events for an organization.
- Retention
Period int - The retention period, in days.
- Status string
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Pulumi.
Aws Native. Outputs. Tag> - A list of tags.
- Termination
Protection boolEnabled - Indicates whether the event data store is protected from termination.
- Updated
Timestamp string - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- Advanced
Event []EventSelectors Data Store Advanced Event Selector - The advanced event selectors that were used to select events for the data store.
- Billing
Mode string - The mode that the event data store will use to charge for event storage.
- Created
Timestamp string - The timestamp of the event data store's creation.
- Event
Data stringStore Arn - The ARN of the event data store.
- Federation
Enabled bool - Indicates whether federation is enabled on an event data store.
- Federation
Role stringArn - The ARN of the role used for event data store federation.
- Ingestion
Enabled bool - Indicates whether the event data store is ingesting events.
- Insight
Selectors []EventData Store Insight Selector - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- Insights
Destination string - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- Kms
Key stringId - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- Multi
Region boolEnabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- Name string
- The name of the event data store.
- Organization
Enabled bool - Indicates that an event data store is collecting logged events for an organization.
- Retention
Period int - The retention period, in days.
- Status string
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- Tag
- A list of tags.
- Termination
Protection boolEnabled - Indicates whether the event data store is protected from termination.
- Updated
Timestamp string - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event List<EventSelectors Data Store Advanced Event Selector> - The advanced event selectors that were used to select events for the data store.
- billing
Mode String - The mode that the event data store will use to charge for event storage.
- created
Timestamp String - The timestamp of the event data store's creation.
- event
Data StringStore Arn - The ARN of the event data store.
- federation
Enabled Boolean - Indicates whether federation is enabled on an event data store.
- federation
Role StringArn - The ARN of the role used for event data store federation.
- ingestion
Enabled Boolean - Indicates whether the event data store is ingesting events.
- insight
Selectors List<EventData Store Insight Selector> - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- insights
Destination String - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- kms
Key StringId - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region BooleanEnabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name String
- The name of the event data store.
- organization
Enabled Boolean - Indicates that an event data store is collecting logged events for an organization.
- retention
Period Integer - The retention period, in days.
- status String
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Tag>
- A list of tags.
- termination
Protection BooleanEnabled - Indicates whether the event data store is protected from termination.
- updated
Timestamp String - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event EventSelectors Data Store Advanced Event Selector[] - The advanced event selectors that were used to select events for the data store.
- billing
Mode string - The mode that the event data store will use to charge for event storage.
- created
Timestamp string - The timestamp of the event data store's creation.
- event
Data stringStore Arn - The ARN of the event data store.
- federation
Enabled boolean - Indicates whether federation is enabled on an event data store.
- federation
Role stringArn - The ARN of the role used for event data store federation.
- ingestion
Enabled boolean - Indicates whether the event data store is ingesting events.
- insight
Selectors EventData Store Insight Selector[] - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- insights
Destination string - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- kms
Key stringId - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region booleanEnabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name string
- The name of the event data store.
- organization
Enabled boolean - Indicates that an event data store is collecting logged events for an organization.
- retention
Period number - The retention period, in days.
- status string
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- Tag[]
- A list of tags.
- termination
Protection booleanEnabled - Indicates whether the event data store is protected from termination.
- updated
Timestamp string - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced_
event_ Sequence[Eventselectors Data Store Advanced Event Selector] - The advanced event selectors that were used to select events for the data store.
- billing_
mode str - The mode that the event data store will use to charge for event storage.
- created_
timestamp str - The timestamp of the event data store's creation.
- event_
data_ strstore_ arn - The ARN of the event data store.
- federation_
enabled bool - Indicates whether federation is enabled on an event data store.
- federation_
role_ strarn - The ARN of the role used for event data store federation.
- ingestion_
enabled bool - Indicates whether the event data store is ingesting events.
- insight_
selectors Sequence[EventData Store Insight Selector] - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- insights_
destination str - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- kms_
key_ strid - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi_
region_ boolenabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name str
- The name of the event data store.
- organization_
enabled bool - Indicates that an event data store is collecting logged events for an organization.
- retention_
period int - The retention period, in days.
- status str
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- Sequence[root_Tag]
- A list of tags.
- termination_
protection_ boolenabled - Indicates whether the event data store is protected from termination.
- updated_
timestamp str - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
- advanced
Event List<Property Map>Selectors - The advanced event selectors that were used to select events for the data store.
- billing
Mode String - The mode that the event data store will use to charge for event storage.
- created
Timestamp String - The timestamp of the event data store's creation.
- event
Data StringStore Arn - The ARN of the event data store.
- federation
Enabled Boolean - Indicates whether federation is enabled on an event data store.
- federation
Role StringArn - The ARN of the role used for event data store federation.
- ingestion
Enabled Boolean - Indicates whether the event data store is ingesting events.
- insight
Selectors List<Property Map> - Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.
- insights
Destination String - Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store
- kms
Key StringId - Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
- multi
Region BooleanEnabled - Indicates whether the event data store includes events from all regions, or only from the region in which it was created.
- name String
- The name of the event data store.
- organization
Enabled Boolean - Indicates that an event data store is collecting logged events for an organization.
- retention
Period Number - The retention period, in days.
- status String
- The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.
- List<Property Map>
- A list of tags.
- termination
Protection BooleanEnabled - Indicates whether the event data store is protected from termination.
- updated
Timestamp String - The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.
Supporting Types
EventDataStoreAdvancedEventSelector
- Field
Selectors List<Pulumi.Aws Native. Cloud Trail. Inputs. Event Data Store Advanced Field Selector> - Contains all selector statements in an advanced event selector.
- Name string
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- Field
Selectors []EventData Store Advanced Field Selector - Contains all selector statements in an advanced event selector.
- Name string
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors List<EventData Store Advanced Field Selector> - Contains all selector statements in an advanced event selector.
- name String
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors EventData Store Advanced Field Selector[] - Contains all selector statements in an advanced event selector.
- name string
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field_
selectors Sequence[EventData Store Advanced Field Selector] - Contains all selector statements in an advanced event selector.
- name str
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
- field
Selectors List<Property Map> - Contains all selector statements in an advanced event selector.
- name String
- An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
EventDataStoreAdvancedFieldSelector
- Field string
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- Ends
With List<string> - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- Equals List<string>
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- Not
Ends List<string>With - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- Not
Equals List<string> - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- Not
Starts List<string>With - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- Starts
With List<string> - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- Field string
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- Ends
With []string - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- Equals []string
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- Not
Ends []stringWith - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- Not
Equals []string - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- Not
Starts []stringWith - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- Starts
With []string - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field String
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With List<String> - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals_ List<String>
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends List<String>With - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals List<String> - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts List<String>With - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With List<String> - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field string
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With string[] - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals string[]
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends string[]With - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals string[] - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts string[]With - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With string[] - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field str
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends_
with Sequence[str] - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals Sequence[str]
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not_
ends_ Sequence[str]with - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not_
equals Sequence[str] - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not_
starts_ Sequence[str]with - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts_
with Sequence[str] - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
- field String
- A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
- ends
With List<String> - An operator that includes events that match the last few characters of the event record field specified as the value of Field.
- equals List<String>
- An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
- not
Ends List<String>With - An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
- not
Equals List<String> - An operator that excludes events that match the exact value of the event record field specified as the value of Field.
- not
Starts List<String>With - An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
- starts
With List<String> - An operator that includes events that match the first few characters of the event record field specified as the value of Field.
EventDataStoreInsightSelector
- Insight
Type string - The type of Insights to log on an event data store.
- Insight
Type string - The type of Insights to log on an event data store.
- insight
Type String - The type of Insights to log on an event data store.
- insight
Type string - The type of Insights to log on an event data store.
- insight_
type str - The type of Insights to log on an event data store.
- insight
Type String - The type of Insights to log on an event data store.
Tag
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.