/**
 * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 * SPDX-License-Identifier: Apache-2.0.
 */

#pragma once
#include <aws/cloudtrail/CloudTrail_EXPORTS.h>
#include <aws/core/utils/memory/stl/AWSString.h>
#include <aws/core/utils/memory/stl/AWSVector.h>
#include <utility>

namespace Aws
{
namespace Utils
{
namespace Json
{
  class JsonValue;
  class JsonView;
} // namespace Json
} // namespace Utils
namespace CloudTrail
{
namespace Model
{

  /**
   * <p>The Amazon S3 buckets, Lambda functions, or Amazon DynamoDB tables that you
   * specify in your event selectors for your trail to log data events. Data events
   * provide information about the resource operations performed on or within a
   * resource itself. These are also known as data plane operations. You can specify
   * up to 250 data resources for a trail.</p>  <p>The total number of allowed
   * data resources is 250. This number can be distributed between 1 and 5 event
   * selectors, but the total cannot exceed 250 across all selectors for the
   * trail.</p> <p>If you are using advanced event selectors, the maximum total
   * number of values for all conditions, across all advanced event selectors for the
   * trail, is 500.</p>  <p>The following example demonstrates how logging
   * works when you configure logging of all data events for an S3 bucket named
   * <code>bucket-1</code>. In this example, the CloudTrail user specified an empty
   * prefix, and the option to log both <code>Read</code> and <code>Write</code> data
   * events.</p> <ol> <li> <p>A user uploads an image file to
   * <code>bucket-1</code>.</p> </li> <li> <p>The <code>PutObject</code> API
   * operation is an Amazon S3 object-level API. It is recorded as a data event in
   * CloudTrail. Because the CloudTrail user specified an S3 bucket with an empty
   * prefix, events that occur on any object in that bucket are logged. The trail
   * processes and logs the event.</p> </li> <li> <p>A user uploads an object to an
   * Amazon S3 bucket named <code>arn:aws:s3:::bucket-2</code>.</p> </li> <li> <p>The
   * <code>PutObject</code> API operation occurred for an object in an S3 bucket that
   * the CloudTrail user didn't specify for the trail. The trail doesn’t log the
   * event.</p> </li> </ol> <p>The following example demonstrates how logging works
   * when you configure logging of Lambda data events for a Lambda function named
   * <i>MyLambdaFunction</i>, but not for all Lambda functions.</p> <ol> <li> <p>A
   * user runs a script that includes a call to the <i>MyLambdaFunction</i> function
   * and the <i>MyOtherLambdaFunction</i> function.</p> </li> <li> <p>The
   * <code>Invoke</code> API operation on <i>MyLambdaFunction</i> is an Lambda API.
   * It is recorded as a data event in CloudTrail. Because the CloudTrail user
   * specified logging data events for <i>MyLambdaFunction</i>, any invocations of
   * that function are logged. The trail processes and logs the event.</p> </li> <li>
   * <p>The <code>Invoke</code> API operation on <i>MyOtherLambdaFunction</i> is an
   * Lambda API. Because the CloudTrail user did not specify logging data events for
   * all Lambda functions, the <code>Invoke</code> operation for
   * <i>MyOtherLambdaFunction</i> does not match the function specified for the
   * trail. The trail doesn’t log the event. </p> </li> </ol><p><h3>See Also:</h3>  
   * <a
   * href="http://docs.aws.amazon.com/goto/WebAPI/cloudtrail-2013-11-01/DataResource">AWS
   * API Reference</a></p>
   */
  class DataResource
  {
  public:
    AWS_CLOUDTRAIL_API DataResource();
    AWS_CLOUDTRAIL_API DataResource(Aws::Utils::Json::JsonView jsonValue);
    AWS_CLOUDTRAIL_API DataResource& operator=(Aws::Utils::Json::JsonView jsonValue);
    AWS_CLOUDTRAIL_API Aws::Utils::Json::JsonValue Jsonize() const;


    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline const Aws::String& GetType() const{ return m_type; }

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline bool TypeHasBeenSet() const { return m_typeHasBeenSet; }

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline void SetType(const Aws::String& value) { m_typeHasBeenSet = true; m_type = value; }

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline void SetType(Aws::String&& value) { m_typeHasBeenSet = true; m_type = std::move(value); }

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline void SetType(const char* value) { m_typeHasBeenSet = true; m_type.assign(value); }

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline DataResource& WithType(const Aws::String& value) { SetType(value); return *this;}

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline DataResource& WithType(Aws::String&& value) { SetType(std::move(value)); return *this;}

    /**
     * <p>The resource type in which you want to log data events. You can specify the
     * following <i>basic</i> event selector resource types:</p> <ul> <li> <p>
     * <code>AWS::DynamoDB::Table</code> </p> </li> <li> <p>
     * <code>AWS::Lambda::Function</code> </p> </li> <li> <p>
     * <code>AWS::S3::Object</code> </p> </li> </ul> <p>The following resource types
     * are also available through <i>advanced</i> event selectors. Basic event selector
     * resource types are valid in advanced event selectors, but advanced event
     * selector resource types are not valid in basic event selectors. For more
     * information, see <a
     * href="https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html">AdvancedFieldSelector</a>.</p>
     * <ul> <li> <p> <code>AWS::CloudTrail::Channel</code> </p> </li> <li> <p>
     * <code>AWS::CodeWhisperer::Profile</code> </p> </li> <li> <p>
     * <code>AWS::Cognito::IdentityPool</code> </p> </li> <li> <p>
     * <code>AWS::DynamoDB::Stream</code> </p> </li> <li> <p>
     * <code>AWS::EC2::Snapshot</code> </p> </li> <li> <p>
     * <code>AWS::EMRWAL::Workspace</code> </p> </li> <li> <p>
     * <code>AWS::FinSpace::Environment</code> </p> </li> <li> <p>
     * <code>AWS::Glue::Table</code> </p> </li> <li> <p>
     * <code>AWS::GuardDuty::Detector</code> </p> </li> <li> <p>
     * <code>AWS::KendraRanking::ExecutionPlan</code> </p> </li> <li> <p>
     * <code>AWS::ManagedBlockchain::Node</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::ExperimentTrialComponent</code> </p> </li> <li> <p>
     * <code>AWS::SageMaker::FeatureGroup</code> </p> </li> <li> <p>
     * <code>AWS::S3::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3ObjectLambda::AccessPoint</code> </p> </li> <li> <p>
     * <code>AWS::S3Outposts::Object</code> </p> </li> </ul>
     */
    inline DataResource& WithType(const char* value) { SetType(value); return *this;}


    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline const Aws::Vector<Aws::String>& GetValues() const{ return m_values; }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline bool ValuesHasBeenSet() const { return m_valuesHasBeenSet; }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline void SetValues(const Aws::Vector<Aws::String>& value) { m_valuesHasBeenSet = true; m_values = value; }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline void SetValues(Aws::Vector<Aws::String>&& value) { m_valuesHasBeenSet = true; m_values = std::move(value); }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline DataResource& WithValues(const Aws::Vector<Aws::String>& value) { SetValues(value); return *this;}

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline DataResource& WithValues(Aws::Vector<Aws::String>&& value) { SetValues(std::move(value)); return *this;}

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline DataResource& AddValues(const Aws::String& value) { m_valuesHasBeenSet = true; m_values.push_back(value); return *this; }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline DataResource& AddValues(Aws::String&& value) { m_valuesHasBeenSet = true; m_values.push_back(std::move(value)); return *this; }

    /**
     * <p>An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
     * specified objects.</p> <ul> <li> <p>To log data events for all objects in all S3
     * buckets in your Amazon Web Services account, specify the prefix as
     * <code>arn:aws:s3</code>.</p>  <p>This also enables logging of data event
     * activity performed by any user or role in your Amazon Web Services account, even
     * if that activity is performed on a bucket that belongs to another Amazon Web
     * Services account.</p>  </li> <li> <p>To log data events for all objects
     * in an S3 bucket, specify the bucket and an empty object prefix such as
     * <code>arn:aws:s3:::bucket-1/</code>. The trail logs data events for all objects
     * in this S3 bucket.</p> </li> <li> <p>To log data events for specific objects,
     * specify the S3 bucket and object prefix such as
     * <code>arn:aws:s3:::bucket-1/example-images</code>. The trail logs data events
     * for objects in this S3 bucket that match the prefix.</p> </li> <li> <p>To log
     * data events for all Lambda functions in your Amazon Web Services account,
     * specify the prefix as <code>arn:aws:lambda</code>.</p>  <p>This also
     * enables logging of <code>Invoke</code> activity performed by any user or role in
     * your Amazon Web Services account, even if that activity is performed on a
     * function that belongs to another Amazon Web Services account. </p>  </li>
     * <li> <p>To log data events for a specific Lambda function, specify the function
     * ARN.</p>  <p>Lambda function ARNs are exact. For example, if you specify a
     * function ARN <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>,
     * data events will only be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld</i>. They will not
     * be logged for
     * <i>arn:aws:lambda:us-west-2:111111111111:function:helloworld2</i>.</p> 
     * </li> <li> <p>To log data events for all DynamoDB tables in your Amazon Web
     * Services account, specify the prefix as <code>arn:aws:dynamodb</code>.</p> </li>
     * </ul>
     */
    inline DataResource& AddValues(const char* value) { m_valuesHasBeenSet = true; m_values.push_back(value); return *this; }

  private:

    Aws::String m_type;
    bool m_typeHasBeenSet = false;

    Aws::Vector<Aws::String> m_values;
    bool m_valuesHasBeenSet = false;
  };

} // namespace Model
} // namespace CloudTrail
} // namespace Aws