Interface EventSelector.Builder

  • Method Details

    • readWriteType

      EventSelector.Builder readWriteType(String readWriteType)

      Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

      By default, the value is All.

      Parameters:
      readWriteType - Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

      By default, the value is All.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • readWriteType

      EventSelector.Builder readWriteType(ReadWriteType readWriteType)

      Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

      By default, the value is All.

      Parameters:
      readWriteType - Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.

      By default, the value is All.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • includeManagementEvents

      EventSelector.Builder includeManagementEvents(Boolean includeManagementEvents)

      Specify if you want your event selector to include management events for your trail.

      For more information, see Management Events in the CloudTrail User Guide.

      By default, the value is true.

      The first copy of management events is free. You are charged for additional copies of management events that you are logging on any subsequent trail in the same Region. For more information about CloudTrail pricing, see CloudTrail Pricing.

      Parameters:
      includeManagementEvents - Specify if you want your event selector to include management events for your trail.

      For more information, see Management Events in the CloudTrail User Guide.

      By default, the value is true.

      The first copy of management events is free. You are charged for additional copies of management events that you are logging on any subsequent trail in the same Region. For more information about CloudTrail pricing, see CloudTrail Pricing.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • dataResources

      EventSelector.Builder dataResources(Collection<DataResource> dataResources)

      CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

      For more information, see Data Events and Limits in CloudTrail in the CloudTrail User Guide.

      To log data events for all other resource types including objects stored in directory buckets, you must use AdvancedEventSelectors. You must also use AdvancedEventSelectors if you want to filter on the eventName field.

      Parameters:
      dataResources - CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

      For more information, see Data Events and Limits in CloudTrail in the CloudTrail User Guide.

      To log data events for all other resource types including objects stored in directory buckets, you must use AdvancedEventSelectors. You must also use AdvancedEventSelectors if you want to filter on the eventName field.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • dataResources

      EventSelector.Builder dataResources(DataResource... dataResources)

      CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

      For more information, see Data Events and Limits in CloudTrail in the CloudTrail User Guide.

      To log data events for all other resource types including objects stored in directory buckets, you must use AdvancedEventSelectors. You must also use AdvancedEventSelectors if you want to filter on the eventName field.

      Parameters:
      dataResources - CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

      For more information, see Data Events and Limits in CloudTrail in the CloudTrail User Guide.

      To log data events for all other resource types including objects stored in directory buckets, you must use AdvancedEventSelectors. You must also use AdvancedEventSelectors if you want to filter on the eventName field.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • dataResources

      EventSelector.Builder dataResources(Consumer<DataResource.Builder>... dataResources)

      CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.

      For more information, see Data Events and Limits in CloudTrail in the CloudTrail User Guide.

      To log data events for all other resource types including objects stored in directory buckets, you must use AdvancedEventSelectors. You must also use AdvancedEventSelectors if you want to filter on the eventName field.

      This is a convenience method that creates an instance of the DataResource.Builder avoiding the need to create one manually via DataResource.builder().

      When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to dataResources(List<DataResource>).

      Parameters:
      dataResources - a consumer that will call methods on DataResource.Builder
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:
    • excludeManagementEventSources

      EventSelector.Builder excludeManagementEventSources(Collection<String> excludeManagementEventSources)

      An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out Key Management Service or Amazon RDS Data API events by containing kms.amazonaws.com or rdsdata.amazonaws.com. By default, ExcludeManagementEventSources is empty, and KMS and Amazon RDS Data API events are logged to your trail. You can exclude management event sources only in Regions that support the event source.

      Parameters:
      excludeManagementEventSources - An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out Key Management Service or Amazon RDS Data API events by containing kms.amazonaws.com or rdsdata.amazonaws.com. By default, ExcludeManagementEventSources is empty, and KMS and Amazon RDS Data API events are logged to your trail. You can exclude management event sources only in Regions that support the event source.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
    • excludeManagementEventSources

      EventSelector.Builder excludeManagementEventSources(String... excludeManagementEventSources)

      An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out Key Management Service or Amazon RDS Data API events by containing kms.amazonaws.com or rdsdata.amazonaws.com. By default, ExcludeManagementEventSources is empty, and KMS and Amazon RDS Data API events are logged to your trail. You can exclude management event sources only in Regions that support the event source.

      Parameters:
      excludeManagementEventSources - An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out Key Management Service or Amazon RDS Data API events by containing kms.amazonaws.com or rdsdata.amazonaws.com. By default, ExcludeManagementEventSources is empty, and KMS and Amazon RDS Data API events are logged to your trail. You can exclude management event sources only in Regions that support the event source.
      Returns:
      Returns a reference to this object so that method calls can be chained together.