public class CloudTrailEventData extends CloudTrailDataStore
Information provided includes what services were accessed, what action was performed, and any parameters for the action. The request also provides information about who made the request.
Constructor and Description |
---|
CloudTrailEventData() |
Modifier and Type | Method and Description |
---|---|
java.lang.String |
getAccountId()
Get the AWS account ID from UserIdentity.
|
Addendum |
getAddendum()
Get the addendum
|
java.lang.String |
getAdditionalEventData()
Get additional API data.
|
java.lang.String |
getAnnotation()
Get the annotation
|
java.lang.String |
getApiVersion()
Get the API version.
|
java.lang.String |
getAwsRegion()
Get the AWS region for this event.
|
java.lang.String |
getEdgeDeviceDetails()
Get the edge device details
|
java.lang.String |
getErrorCode()
Get the API call error code.
|
java.lang.String |
getErrorMessage()
Get API call error message.
|
java.lang.String |
getEventCategory()
Get the event category.
|
java.util.UUID |
getEventId()
Get the event ID.
|
java.lang.String |
getEventName()
Get the event name for this event.
|
java.lang.String |
getEventSource()
Get the event source for this event.
|
java.util.Date |
getEventTime()
Get the event timestamp for this event.
|
java.lang.String |
getEventType()
Get the event type.
|
java.lang.String |
getEventVersion()
Get the event version.
|
InsightDetails |
getInsightDetails()
Get the insight details
|
java.lang.String |
getRecipientAccountId()
Get the recipient account ID
|
java.lang.String |
getRequestId()
Get the request ID.
|
java.lang.String |
getRequestParameters()
Get API call request parameters.
|
java.util.List<Resource> |
getResources()
Get the resources used in the operation.
|
java.lang.String |
getResponseElements()
Get API call response elements.
|
java.lang.String |
getServiceEventDetails()
Get aws service event details
|
java.lang.String |
getSessionCredentialFromConsole()
Check whether an event originated from an AWS Management Console session.
|
java.lang.String |
getSharedEventId()
Get the shared event ID
|
java.lang.String |
getSourceIPAddress()
Get the source IP address for this event.
|
TlsDetails |
getTlsDetails()
Get the TLS details
|
java.lang.String |
getUserAgent()
Get the event user agent for this event.
|
UserIdentity |
getUserIdentity()
Get the UserIdentity object held by this instance.
|
java.lang.String |
getVpcEndpointId()
Get the vpc endpoint ID
|
java.lang.Boolean |
isManagementEvent()
Check whether the event is a management event.
|
java.lang.Boolean |
isReadOnly()
Check whether the operation is read-only.
|
public java.lang.String getEventVersion()
public UserIdentity getUserIdentity()
public java.util.Date getEventTime()
public java.lang.String getEventName()
public java.lang.String getEventSource()
public java.lang.String getAwsRegion()
public java.lang.String getSourceIPAddress()
For actions that originate from the service console, the address reported is for the underlying customer resource, not the console web server. For services in AWS, only the DNS name is displayed.
public java.lang.String getUserAgent()
public java.lang.String getRequestId()
public java.lang.String getErrorCode()
null
if no error was returned.public java.lang.String getErrorMessage()
This includes messages for authorization failures. For such messages, CloudTrail captures the message logged by the service in its exception handling.
null
if there was no
error.public java.lang.String getRequestParameters()
API Request parameters are specific to both the AWS service and the API action that is being called. Refer to the API reference for the service identified in the request for more details about the parameters.
public java.lang.String getResponseElements()
If an action does not change state (for example, a request to get
or list
objects),
this element is omitted. Response elements such as request parameters are documented in the API Reference
documentation for the AWS service identified in the response.
create
, update
,
or delete
actions).public java.lang.String getServiceEventDetails()
This field will only be visible to awsServiceEvent type, it indicates what trigger the event and what the result of this event.
public java.lang.String getAdditionalEventData()
public java.util.UUID getEventId()
You can use this value to identify a single event. For example, you can use the ID as a primary key to retrieve log data from a searchable database.
public java.lang.Boolean isReadOnly()
true
if the operation identified in the log is read-only.public java.lang.Boolean isManagementEvent()
true
if the event identified in the log is a management event.public java.util.List<Resource> getResources()
public java.lang.String getAccountId()
If the request was made using temporary security credentials, this is the account that owns the IAM user or role that was used to obtain credentials.
public java.lang.String getEventCategory()
public java.lang.String getEventType()
public java.lang.String getApiVersion()
public java.lang.String getRecipientAccountId()
public java.lang.String getSharedEventId()
public java.lang.String getAnnotation()
public java.lang.String getVpcEndpointId()
public InsightDetails getInsightDetails()
public Addendum getAddendum()
The Addendum block of an addendum event includes details to fill an auditing gap or update an older event. It only appears to update an older event.
public java.lang.String getEdgeDeviceDetails()
public TlsDetails getTlsDetails()
Shows information about the Transport Layer Security (TLS) version, cipher suites, and FQDN of the client-provided host name of the service API call.
public java.lang.String getSessionCredentialFromConsole()
The field is not shown unless the value is true, meaning that the client that was used to make the API call was either a proxy or an external client.
true
if the event originated from an AWS Management Console session.