Class: Aws::CloudTrail::Types::AdvancedEventSelector
- Inherits:
-
Struct
- Object
- Struct
- Aws::CloudTrail::Types::AdvancedEventSelector
- Defined in:
- gems/aws-sdk-cloudtrail/lib/aws-sdk-cloudtrail/types.rb
Overview
When making an API call, you may pass AdvancedEventSelector data as a hash:
{
name: "SelectorName",
field_selectors: [ # required
{
field: "SelectorField", # required
equals: ["OperatorValue"],
starts_with: ["OperatorValue"],
ends_with: ["OperatorValue"],
not_equals: ["OperatorValue"],
not_starts_with: ["OperatorValue"],
not_ends_with: ["OperatorValue"],
},
],
}
Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see Logging data events for trails in the AWS CloudTrail User Guide.
readOnly
eventSource
eventName
eventCategory
resources.type
resources.ARN
You cannot apply both event selectors and advanced event selectors to a trail.
Constant Summary collapse
- SENSITIVE =
[]
Instance Attribute Summary collapse
-
#field_selectors ⇒ Array<Types::AdvancedFieldSelector>
Contains all selector statements in an advanced event selector.
-
#name ⇒ String
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
Instance Attribute Details
#field_selectors ⇒ Array<Types::AdvancedFieldSelector>
Contains all selector statements in an advanced event selector.
109 110 111 112 113 114 |
# File 'gems/aws-sdk-cloudtrail/lib/aws-sdk-cloudtrail/types.rb', line 109 class AdvancedEventSelector < Struct.new( :name, :field_selectors) SENSITIVE = [] include Aws::Structure end |
#name ⇒ String
An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
109 110 111 112 113 114 |
# File 'gems/aws-sdk-cloudtrail/lib/aws-sdk-cloudtrail/types.rb', line 109 class AdvancedEventSelector < Struct.new( :name, :field_selectors) SENSITIVE = [] include Aws::Structure end |