Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. awsconnector
  5. getCloudTrailTrail
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.awsconnector.getCloudTrailTrail

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

    Get a CloudTrailTrail Azure REST API version: 2024-12-01.

    Using getCloudTrailTrail

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCloudTrailTrail(args: GetCloudTrailTrailArgs, opts?: InvokeOptions): Promise<GetCloudTrailTrailResult>
function getCloudTrailTrailOutput(args: GetCloudTrailTrailOutputArgs, opts?: InvokeOptions): Output<GetCloudTrailTrailResult>
    def get_cloud_trail_trail(name: Optional[str] = None,
                          resource_group_name: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetCloudTrailTrailResult
def get_cloud_trail_trail_output(name: Optional[pulumi.Input[str]] = None,
                          resource_group_name: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetCloudTrailTrailResult]
    func LookupCloudTrailTrail(ctx *Context, args *LookupCloudTrailTrailArgs, opts ...InvokeOption) (*LookupCloudTrailTrailResult, error)
func LookupCloudTrailTrailOutput(ctx *Context, args *LookupCloudTrailTrailOutputArgs, opts ...InvokeOption) LookupCloudTrailTrailResultOutput

    > Note: This function is named LookupCloudTrailTrail in the Go SDK.

    public static class GetCloudTrailTrail 
{
    public static Task<GetCloudTrailTrailResult> InvokeAsync(GetCloudTrailTrailArgs args, InvokeOptions? opts = null)
    public static Output<GetCloudTrailTrailResult> Invoke(GetCloudTrailTrailInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCloudTrailTrailResult> getCloudTrailTrail(GetCloudTrailTrailArgs args, InvokeOptions options)
public static Output<GetCloudTrailTrailResult> getCloudTrailTrail(GetCloudTrailTrailArgs args, InvokeOptions options)

    fn::invoke:
  function: azure-native:awsconnector:getCloudTrailTrail
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Name string
    Name of CloudTrailTrail
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    Name string
    Name of CloudTrailTrail
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    name String
    Name of CloudTrailTrail
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    name string
    Name of CloudTrailTrail
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    name str
    Name of CloudTrailTrail
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    name String
    Name of CloudTrailTrail
    resourceGroupName String
    The name of the resource group. The name is case insensitive.

    getCloudTrailTrail Result

    The following output properties are available:

    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Location string
    The geo-location where the resource lives
    Name string
    The name of the resource
    Properties Pulumi.AzureNative.AwsConnector.Outputs.CloudTrailTrailPropertiesResponse
    The resource-specific properties for this resource.
    SystemData Pulumi.AzureNative.AwsConnector.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Tags Dictionary<string, string>
    Resource tags.
    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Location string
    The geo-location where the resource lives
    Name string
    The name of the resource
    Properties CloudTrailTrailPropertiesResponse
    The resource-specific properties for this resource.
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Tags map[string]string
    Resource tags.
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location String
    The geo-location where the resource lives
    name String
    The name of the resource
    properties CloudTrailTrailPropertiesResponse
    The resource-specific properties for this resource.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    tags Map<String,String>
    Resource tags.
    id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location string
    The geo-location where the resource lives
    name string
    The name of the resource
    properties CloudTrailTrailPropertiesResponse
    The resource-specific properties for this resource.
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    tags {[key: string]: string}
    Resource tags.
    id str
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location str
    The geo-location where the resource lives
    name str
    The name of the resource
    properties CloudTrailTrailPropertiesResponse
    The resource-specific properties for this resource.
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    tags Mapping[str, str]
    Resource tags.
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location String
    The geo-location where the resource lives
    name String
    The name of the resource
    properties Property Map
    The resource-specific properties for this resource.
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    tags Map<String>
    Resource tags.

    Supporting Types

    AdvancedEventSelectorResponse

    FieldSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.AdvancedFieldSelectorResponse>
    Contains all selector statements in an advanced event selector.
    Name string
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
    FieldSelectors []AdvancedFieldSelectorResponse
    Contains all selector statements in an advanced event selector.
    Name string
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
    fieldSelectors List<AdvancedFieldSelectorResponse>
    Contains all selector statements in an advanced event selector.
    name String
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
    fieldSelectors AdvancedFieldSelectorResponse[]
    Contains all selector statements in an advanced event selector.
    name string
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
    field_selectors Sequence[AdvancedFieldSelectorResponse]
    Contains all selector statements in an advanced event selector.
    name str
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.
    fieldSelectors List<Property Map>
    Contains all selector statements in an advanced event selector.
    name String
    An optional, descriptive name for an advanced event selector, such as 'Log data events for only two S3 buckets'.

    AdvancedFieldSelectorResponse

    EndsWith List<string>
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    Equals List<string>
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    Field string
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    NotEndsWith List<string>
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    NotEquals List<string>
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    NotStartsWith List<string>
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    StartsWith List<string>
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.
    EndsWith []string
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    Equals []string
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    Field string
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    NotEndsWith []string
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    NotEquals []string
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    NotStartsWith []string
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    StartsWith []string
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.
    endsWith List<String>
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    equals_ List<String>
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    field String
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    notEndsWith List<String>
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    notEquals List<String>
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    notStartsWith List<String>
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    startsWith List<String>
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.
    endsWith string[]
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    equals string[]
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    field string
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    notEndsWith string[]
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    notEquals string[]
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    notStartsWith string[]
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    startsWith string[]
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.
    ends_with Sequence[str]
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    equals Sequence[str]
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    field str
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    not_ends_with Sequence[str]
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    not_equals Sequence[str]
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    not_starts_with Sequence[str]
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    starts_with Sequence[str]
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.
    endsWith List<String>
    An operator that includes events that match the last few characters of the event record field specified as the value of Field.
    equals List<String>
    An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
    field String
    A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
    notEndsWith List<String>
    An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
    notEquals List<String>
    An operator that excludes events that match the exact value of the event record field specified as the value of Field.
    notStartsWith List<String>
    An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
    startsWith List<String>
    An operator that includes events that match the first few characters of the event record field specified as the value of Field.

    AwsCloudTrailTrailPropertiesResponse

    AdvancedEventSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.AdvancedEventSelectorResponse>
    The advanced event selectors that were used to select events for the data store.
    Arn string
    Property arn
    CloudWatchLogsLogGroupArn string
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    CloudWatchLogsRoleArn string
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    EnableLogFileValidation bool
    Specifies whether log file validation is enabled. The default is false.
    EventSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.EventSelectorResponse>
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    IncludeGlobalServiceEvents bool
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    InsightSelectors List<Pulumi.AzureNative.AwsConnector.Inputs.InsightSelectorResponse>
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    IsLogging bool
    Whether the CloudTrail is currently logging AWS API calls.
    IsMultiRegionTrail bool
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    IsOrganizationTrail bool
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    KmsKeyId string
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    S3BucketName string
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    S3KeyPrefix string
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    SnsTopicArn string
    Property snsTopicArn
    SnsTopicName string
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    Tags List<Pulumi.AzureNative.AwsConnector.Inputs.TagResponse>
    Property tags
    TrailName string
    Property trailName
    AdvancedEventSelectors []AdvancedEventSelectorResponse
    The advanced event selectors that were used to select events for the data store.
    Arn string
    Property arn
    CloudWatchLogsLogGroupArn string
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    CloudWatchLogsRoleArn string
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    EnableLogFileValidation bool
    Specifies whether log file validation is enabled. The default is false.
    EventSelectors []EventSelectorResponse
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    IncludeGlobalServiceEvents bool
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    InsightSelectors []InsightSelectorResponse
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    IsLogging bool
    Whether the CloudTrail is currently logging AWS API calls.
    IsMultiRegionTrail bool
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    IsOrganizationTrail bool
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    KmsKeyId string
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    S3BucketName string
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    S3KeyPrefix string
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    SnsTopicArn string
    Property snsTopicArn
    SnsTopicName string
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    Tags []TagResponse
    Property tags
    TrailName string
    Property trailName
    advancedEventSelectors List<AdvancedEventSelectorResponse>
    The advanced event selectors that were used to select events for the data store.
    arn String
    Property arn
    cloudWatchLogsLogGroupArn String
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    cloudWatchLogsRoleArn String
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    enableLogFileValidation Boolean
    Specifies whether log file validation is enabled. The default is false.
    eventSelectors List<EventSelectorResponse>
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    includeGlobalServiceEvents Boolean
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    insightSelectors List<InsightSelectorResponse>
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    isLogging Boolean
    Whether the CloudTrail is currently logging AWS API calls.
    isMultiRegionTrail Boolean
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    isOrganizationTrail Boolean
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    kmsKeyId String
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    s3BucketName String
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    s3KeyPrefix String
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    snsTopicArn String
    Property snsTopicArn
    snsTopicName String
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    tags List<TagResponse>
    Property tags
    trailName String
    Property trailName
    advancedEventSelectors AdvancedEventSelectorResponse[]
    The advanced event selectors that were used to select events for the data store.
    arn string
    Property arn
    cloudWatchLogsLogGroupArn string
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    cloudWatchLogsRoleArn string
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    enableLogFileValidation boolean
    Specifies whether log file validation is enabled. The default is false.
    eventSelectors EventSelectorResponse[]
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    includeGlobalServiceEvents boolean
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    insightSelectors InsightSelectorResponse[]
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    isLogging boolean
    Whether the CloudTrail is currently logging AWS API calls.
    isMultiRegionTrail boolean
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    isOrganizationTrail boolean
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    kmsKeyId string
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    s3BucketName string
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    s3KeyPrefix string
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    snsTopicArn string
    Property snsTopicArn
    snsTopicName string
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    tags TagResponse[]
    Property tags
    trailName string
    Property trailName
    advanced_event_selectors Sequence[AdvancedEventSelectorResponse]
    The advanced event selectors that were used to select events for the data store.
    arn str
    Property arn
    cloud_watch_logs_log_group_arn str
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    cloud_watch_logs_role_arn str
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    enable_log_file_validation bool
    Specifies whether log file validation is enabled. The default is false.
    event_selectors Sequence[EventSelectorResponse]
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    include_global_service_events bool
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    insight_selectors Sequence[InsightSelectorResponse]
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    is_logging bool
    Whether the CloudTrail is currently logging AWS API calls.
    is_multi_region_trail bool
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    is_organization_trail bool
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    kms_key_id str
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    s3_bucket_name str
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    s3_key_prefix str
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    sns_topic_arn str
    Property snsTopicArn
    sns_topic_name str
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    tags Sequence[TagResponse]
    Property tags
    trail_name str
    Property trailName
    advancedEventSelectors List<Property Map>
    The advanced event selectors that were used to select events for the data store.
    arn String
    Property arn
    cloudWatchLogsLogGroupArn String
    Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.
    cloudWatchLogsRoleArn String
    Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.
    enableLogFileValidation Boolean
    Specifies whether log file validation is enabled. The default is false.
    eventSelectors List<Property Map>
    Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.
    includeGlobalServiceEvents Boolean
    Specifies whether the trail is publishing events from global services such as IAM to the log files.
    insightSelectors List<Property Map>
    Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.
    isLogging Boolean
    Whether the CloudTrail is currently logging AWS API calls.
    isMultiRegionTrail Boolean
    Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.
    isOrganizationTrail Boolean
    Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.
    kmsKeyId String
    Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
    s3BucketName String
    Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.
    s3KeyPrefix String
    Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.
    snsTopicArn String
    Property snsTopicArn
    snsTopicName String
    Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.
    tags List<Property Map>
    Property tags
    trailName String
    Property trailName

    CloudTrailTrailPropertiesResponse

    ProvisioningState string
    The status of the last operation.
    Arn string
    Amazon Resource Name (ARN)
    AwsAccountId string
    AWS Account ID
    AwsProperties Pulumi.AzureNative.AwsConnector.Inputs.AwsCloudTrailTrailPropertiesResponse
    AWS Properties
    AwsRegion string
    AWS Region
    AwsSourceSchema string
    AWS Source Schema
    AwsTags Dictionary<string, string>
    AWS Tags
    PublicCloudConnectorsResourceId string
    Public Cloud Connectors Resource ID
    PublicCloudResourceName string
    Public Cloud Resource Name
    ProvisioningState string
    The status of the last operation.
    Arn string
    Amazon Resource Name (ARN)
    AwsAccountId string
    AWS Account ID
    AwsProperties AwsCloudTrailTrailPropertiesResponse
    AWS Properties
    AwsRegion string
    AWS Region
    AwsSourceSchema string
    AWS Source Schema
    AwsTags map[string]string
    AWS Tags
    PublicCloudConnectorsResourceId string
    Public Cloud Connectors Resource ID
    PublicCloudResourceName string
    Public Cloud Resource Name
    provisioningState String
    The status of the last operation.
    arn String
    Amazon Resource Name (ARN)
    awsAccountId String
    AWS Account ID
    awsProperties AwsCloudTrailTrailPropertiesResponse
    AWS Properties
    awsRegion String
    AWS Region
    awsSourceSchema String
    AWS Source Schema
    awsTags Map<String,String>
    AWS Tags
    publicCloudConnectorsResourceId String
    Public Cloud Connectors Resource ID
    publicCloudResourceName String
    Public Cloud Resource Name
    provisioningState string
    The status of the last operation.
    arn string
    Amazon Resource Name (ARN)
    awsAccountId string
    AWS Account ID
    awsProperties AwsCloudTrailTrailPropertiesResponse
    AWS Properties
    awsRegion string
    AWS Region
    awsSourceSchema string
    AWS Source Schema
    awsTags {[key: string]: string}
    AWS Tags
    publicCloudConnectorsResourceId string
    Public Cloud Connectors Resource ID
    publicCloudResourceName string
    Public Cloud Resource Name
    provisioning_state str
    The status of the last operation.
    arn str
    Amazon Resource Name (ARN)
    aws_account_id str
    AWS Account ID
    aws_properties AwsCloudTrailTrailPropertiesResponse
    AWS Properties
    aws_region str
    AWS Region
    aws_source_schema str
    AWS Source Schema
    aws_tags Mapping[str, str]
    AWS Tags
    public_cloud_connectors_resource_id str
    Public Cloud Connectors Resource ID
    public_cloud_resource_name str
    Public Cloud Resource Name
    provisioningState String
    The status of the last operation.
    arn String
    Amazon Resource Name (ARN)
    awsAccountId String
    AWS Account ID
    awsProperties Property Map
    AWS Properties
    awsRegion String
    AWS Region
    awsSourceSchema String
    AWS Source Schema
    awsTags Map<String>
    AWS Tags
    publicCloudConnectorsResourceId String
    Public Cloud Connectors Resource ID
    publicCloudResourceName String
    Public Cloud Resource Name

    DataResourceResponse

    Type string
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    Values List<string>
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
    Type string
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    Values []string
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
    type String
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    values List<String>
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
    type string
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    values string[]
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
    type str
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    values Sequence[str]
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.
    type String
    The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources.
    values List<String>
    An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects.

    EventSelectorResponse

    DataResources List<Pulumi.AzureNative.AwsConnector.Inputs.DataResourceResponse>
    Property dataResources
    ExcludeManagementEventSources List<string>
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    IncludeManagementEvents bool
    Specify if you want your event selector to include management events for your trail.
    ReadWriteType string
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
    DataResources []DataResourceResponse
    Property dataResources
    ExcludeManagementEventSources []string
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    IncludeManagementEvents bool
    Specify if you want your event selector to include management events for your trail.
    ReadWriteType string
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
    dataResources List<DataResourceResponse>
    Property dataResources
    excludeManagementEventSources List<String>
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    includeManagementEvents Boolean
    Specify if you want your event selector to include management events for your trail.
    readWriteType String
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
    dataResources DataResourceResponse[]
    Property dataResources
    excludeManagementEventSources string[]
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    includeManagementEvents boolean
    Specify if you want your event selector to include management events for your trail.
    readWriteType string
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
    data_resources Sequence[DataResourceResponse]
    Property dataResources
    exclude_management_event_sources Sequence[str]
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    include_management_events bool
    Specify if you want your event selector to include management events for your trail.
    read_write_type str
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.
    dataResources List<Property Map>
    Property dataResources
    excludeManagementEventSources List<String>
    An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing 'kms.amazonaws.com'. By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail.
    includeManagementEvents Boolean
    Specify if you want your event selector to include management events for your trail.
    readWriteType String
    Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

    InsightSelectorResponse

    InsightType string
    The type of insight to log on a trail.
    InsightType string
    The type of insight to log on a trail.
    insightType String
    The type of insight to log on a trail.
    insightType string
    The type of insight to log on a trail.
    insight_type str
    The type of insight to log on a trail.
    insightType String
    The type of insight to log on a trail.

    SystemDataResponse

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    TagResponse

    Key string
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    Value string
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    Key string
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    Value string
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    key String
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    value String
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    key string
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    value string
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    key str
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    value str
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    key String
    The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
    value String
    The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
    pulumi/pulumi-azure-native