PutAuditEvents

$result = $client->putAuditEvents([/* ... */]);
$promise = $client->putAuditEventsAsync([/* ... */]);

Ingests your application events into CloudTrail Lake. A required parameter, auditEvents, accepts the JSON records (also called payload) of events that you want CloudTrail to ingest. You can add up to 100 of these events (or up to 1 MB) per PutAuditEvents request.

Parameter Syntax

$result = $client->putAuditEvents([
    'auditEvents' => [ // REQUIRED
        [
            'eventData' => '<string>', // REQUIRED
            'eventDataChecksum' => '<string>',
            'id' => '<string>', // REQUIRED
        ],
        // ...
    ],
    'channelArn' => '<string>', // REQUIRED
    'externalId' => '<string>',
]);

Parameter Details

Result Syntax

[
    'failed' => [
        [
            'errorCode' => '<string>',
            'errorMessage' => '<string>',
            'id' => '<string>',
        ],
        // ...
    ],
    'successful' => [
        [
            'eventID' => '<string>',
            'id' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

ChannelInsufficientPermission:

The caller's account ID must be the same as the channel owner's account ID.

ChannelNotFound:

The channel could not be found.

InvalidChannelARN:

The specified channel ARN is not a valid channel ARN.

ChannelUnsupportedSchema:

The schema type of the event is not supported.

DuplicatedAuditEventId:

Two or more entries in the request have the same event ID.

UnsupportedOperationException:

The operation requested is not supported in this region or account.