/**
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
* SPDX-License-Identifier: Apache-2.0.
*/
#pragma once
#include Specifies settings to update for the trail.See Also:
AWS
* API Reference
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If Name
is a trail
* name, the string must meet the following requirements:
Contain * only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or * dashes (-)
Start with a letter or number, and end with a * letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like
* my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If Name
is a trail ARN, it must be in the following
* format.
* arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline const Aws::String& GetS3BucketName() const{ return m_s3BucketName; } /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline bool S3BucketNameHasBeenSet() const { return m_s3BucketNameHasBeenSet; } /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline void SetS3BucketName(const Aws::String& value) { m_s3BucketNameHasBeenSet = true; m_s3BucketName = value; } /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline void SetS3BucketName(Aws::String&& value) { m_s3BucketNameHasBeenSet = true; m_s3BucketName = std::move(value); } /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline void SetS3BucketName(const char* value) { m_s3BucketNameHasBeenSet = true; m_s3BucketName.assign(value); } /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline UpdateTrailRequest& WithS3BucketName(const Aws::String& value) { SetS3BucketName(value); return *this;} /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline UpdateTrailRequest& WithS3BucketName(Aws::String&& value) { SetS3BucketName(std::move(value)); return *this;} /** *Specifies the name of the Amazon S3 bucket designated for publishing log * files. See Amazon * S3 Bucket Naming Requirements.
*/ inline UpdateTrailRequest& WithS3BucketName(const char* value) { SetS3BucketName(value); return *this;} /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline const Aws::String& GetS3KeyPrefix() const{ return m_s3KeyPrefix; } /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline bool S3KeyPrefixHasBeenSet() const { return m_s3KeyPrefixHasBeenSet; } /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline void SetS3KeyPrefix(const Aws::String& value) { m_s3KeyPrefixHasBeenSet = true; m_s3KeyPrefix = value; } /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline void SetS3KeyPrefix(Aws::String&& value) { m_s3KeyPrefixHasBeenSet = true; m_s3KeyPrefix = std::move(value); } /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline void SetS3KeyPrefix(const char* value) { m_s3KeyPrefixHasBeenSet = true; m_s3KeyPrefix.assign(value); } /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline UpdateTrailRequest& WithS3KeyPrefix(const Aws::String& value) { SetS3KeyPrefix(value); return *this;} /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline UpdateTrailRequest& WithS3KeyPrefix(Aws::String&& value) { SetS3KeyPrefix(std::move(value)); return *this;} /** *Specifies the Amazon S3 key prefix that comes after the name of the bucket * you have designated for log file delivery. For more information, see Finding * Your CloudTrail Log Files. The maximum length is 200 characters.
*/ inline UpdateTrailRequest& WithS3KeyPrefix(const char* value) { SetS3KeyPrefix(value); return *this;} /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline const Aws::String& GetSnsTopicName() const{ return m_snsTopicName; } /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline bool SnsTopicNameHasBeenSet() const { return m_snsTopicNameHasBeenSet; } /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline void SetSnsTopicName(const Aws::String& value) { m_snsTopicNameHasBeenSet = true; m_snsTopicName = value; } /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline void SetSnsTopicName(Aws::String&& value) { m_snsTopicNameHasBeenSet = true; m_snsTopicName = std::move(value); } /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline void SetSnsTopicName(const char* value) { m_snsTopicNameHasBeenSet = true; m_snsTopicName.assign(value); } /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline UpdateTrailRequest& WithSnsTopicName(const Aws::String& value) { SetSnsTopicName(value); return *this;} /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline UpdateTrailRequest& WithSnsTopicName(Aws::String&& value) { SetSnsTopicName(std::move(value)); return *this;} /** *Specifies the name of the Amazon SNS topic defined for notification of log * file delivery. The maximum length is 256 characters.
*/ inline UpdateTrailRequest& WithSnsTopicName(const char* value) { SetSnsTopicName(value); return *this;} /** *Specifies whether the trail is publishing events from global services such as * IAM to the log files.
*/ inline bool GetIncludeGlobalServiceEvents() const{ return m_includeGlobalServiceEvents; } /** *Specifies whether the trail is publishing events from global services such as * IAM to the log files.
*/ inline bool IncludeGlobalServiceEventsHasBeenSet() const { return m_includeGlobalServiceEventsHasBeenSet; } /** *Specifies whether the trail is publishing events from global services such as * IAM to the log files.
*/ inline void SetIncludeGlobalServiceEvents(bool value) { m_includeGlobalServiceEventsHasBeenSet = true; m_includeGlobalServiceEvents = value; } /** *Specifies whether the trail is publishing events from global services such as * IAM to the log files.
*/ inline UpdateTrailRequest& WithIncludeGlobalServiceEvents(bool value) { SetIncludeGlobalServiceEvents(value); return *this;} /** *Specifies whether the trail applies only to the current Region or to all * Regions. The default is false. If the trail exists only in the current Region * and this value is set to true, shadow trails (replications of the trail) will be * created in the other Regions. If the trail exists in all Regions and this value * is set to false, the trail will remain in the Region where it was created, and * its shadow trails in other Regions will be deleted. As a best practice, consider * using trails that log events in all Regions.
*/ inline bool GetIsMultiRegionTrail() const{ return m_isMultiRegionTrail; } /** *Specifies whether the trail applies only to the current Region or to all * Regions. The default is false. If the trail exists only in the current Region * and this value is set to true, shadow trails (replications of the trail) will be * created in the other Regions. If the trail exists in all Regions and this value * is set to false, the trail will remain in the Region where it was created, and * its shadow trails in other Regions will be deleted. As a best practice, consider * using trails that log events in all Regions.
*/ inline bool IsMultiRegionTrailHasBeenSet() const { return m_isMultiRegionTrailHasBeenSet; } /** *Specifies whether the trail applies only to the current Region or to all * Regions. The default is false. If the trail exists only in the current Region * and this value is set to true, shadow trails (replications of the trail) will be * created in the other Regions. If the trail exists in all Regions and this value * is set to false, the trail will remain in the Region where it was created, and * its shadow trails in other Regions will be deleted. As a best practice, consider * using trails that log events in all Regions.
*/ inline void SetIsMultiRegionTrail(bool value) { m_isMultiRegionTrailHasBeenSet = true; m_isMultiRegionTrail = value; } /** *Specifies whether the trail applies only to the current Region or to all * Regions. The default is false. If the trail exists only in the current Region * and this value is set to true, shadow trails (replications of the trail) will be * created in the other Regions. If the trail exists in all Regions and this value * is set to false, the trail will remain in the Region where it was created, and * its shadow trails in other Regions will be deleted. As a best practice, consider * using trails that log events in all Regions.
*/ inline UpdateTrailRequest& WithIsMultiRegionTrail(bool value) { SetIsMultiRegionTrail(value); return *this;} /** *Specifies whether log file validation is enabled. The default is false.
*When you disable log file integrity validation, the chain of digest * files is broken after one hour. CloudTrail does not create digest files for log * files that were delivered during a period in which log file integrity validation * was disabled. For example, if you enable log file integrity validation at noon * on January 1, disable it at noon on January 2, and re-enable it at noon on * January 10, digest files will not be created for the log files delivered from * noon on January 2 to noon on January 10. The same applies whenever you stop * CloudTrail logging or delete a trail.
*/ inline bool GetEnableLogFileValidation() const{ return m_enableLogFileValidation; } /** *Specifies whether log file validation is enabled. The default is false.
*When you disable log file integrity validation, the chain of digest * files is broken after one hour. CloudTrail does not create digest files for log * files that were delivered during a period in which log file integrity validation * was disabled. For example, if you enable log file integrity validation at noon * on January 1, disable it at noon on January 2, and re-enable it at noon on * January 10, digest files will not be created for the log files delivered from * noon on January 2 to noon on January 10. The same applies whenever you stop * CloudTrail logging or delete a trail.
*/ inline bool EnableLogFileValidationHasBeenSet() const { return m_enableLogFileValidationHasBeenSet; } /** *Specifies whether log file validation is enabled. The default is false.
*When you disable log file integrity validation, the chain of digest * files is broken after one hour. CloudTrail does not create digest files for log * files that were delivered during a period in which log file integrity validation * was disabled. For example, if you enable log file integrity validation at noon * on January 1, disable it at noon on January 2, and re-enable it at noon on * January 10, digest files will not be created for the log files delivered from * noon on January 2 to noon on January 10. The same applies whenever you stop * CloudTrail logging or delete a trail.
*/ inline void SetEnableLogFileValidation(bool value) { m_enableLogFileValidationHasBeenSet = true; m_enableLogFileValidation = value; } /** *Specifies whether log file validation is enabled. The default is false.
*When you disable log file integrity validation, the chain of digest * files is broken after one hour. CloudTrail does not create digest files for log * files that were delivered during a period in which log file integrity validation * was disabled. For example, if you enable log file integrity validation at noon * on January 1, disable it at noon on January 2, and re-enable it at noon on * January 10, digest files will not be created for the log files delivered from * noon on January 2 to noon on January 10. The same applies whenever you stop * CloudTrail logging or delete a trail.
*/ inline UpdateTrailRequest& WithEnableLogFileValidation(bool value) { SetEnableLogFileValidation(value); return *this;} /** *Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique * identifier that represents the log group to which CloudTrail logs are delivered. * You must use a log group that exists in your account.
Not required unless
* you specify CloudWatchLogsRoleArn
.
Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline const Aws::String& GetCloudWatchLogsRoleArn() const{ return m_cloudWatchLogsRoleArn; } /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline bool CloudWatchLogsRoleArnHasBeenSet() const { return m_cloudWatchLogsRoleArnHasBeenSet; } /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline void SetCloudWatchLogsRoleArn(const Aws::String& value) { m_cloudWatchLogsRoleArnHasBeenSet = true; m_cloudWatchLogsRoleArn = value; } /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline void SetCloudWatchLogsRoleArn(Aws::String&& value) { m_cloudWatchLogsRoleArnHasBeenSet = true; m_cloudWatchLogsRoleArn = std::move(value); } /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline void SetCloudWatchLogsRoleArn(const char* value) { m_cloudWatchLogsRoleArnHasBeenSet = true; m_cloudWatchLogsRoleArn.assign(value); } /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline UpdateTrailRequest& WithCloudWatchLogsRoleArn(const Aws::String& value) { SetCloudWatchLogsRoleArn(value); return *this;} /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline UpdateTrailRequest& WithCloudWatchLogsRoleArn(Aws::String&& value) { SetCloudWatchLogsRoleArn(std::move(value)); return *this;} /** *Specifies the role for the CloudWatch Logs endpoint to assume to write to a * user's log group. You must use a role that exists in your account.
*/ inline UpdateTrailRequest& WithCloudWatchLogsRoleArn(const char* value) { SetCloudWatchLogsRoleArn(value); return *this;} /** *Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. * The value can be an alias name prefixed by "alias/", a fully specified ARN to an * alias, a fully specified ARN to a key, or a globally unique identifier.
*CloudTrail also supports KMS multi-Region keys. For more information about * multi-Region keys, see Using * multi-Region keys in the Key Management Service Developer Guide.
*Examples:
alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
*12345678-1234-1234-1234-123456789012
Specifies whether the trail is applied to all accounts in an organization in
* Organizations, or only for the current Amazon Web Services account. The default
* is false, and cannot be true unless the call is made on behalf of an Amazon Web
* Services account that is the management account or delegated administrator
* account for an organization in Organizations. If the trail is not an
* organization trail and this is set to true
, the trail will be
* created in all Amazon Web Services accounts that belong to the organization. If
* the trail is an organization trail and this is set to false
, the
* trail will remain in the current Amazon Web Services account but be deleted from
* all member accounts in the organization.
Specifies whether the trail is applied to all accounts in an organization in
* Organizations, or only for the current Amazon Web Services account. The default
* is false, and cannot be true unless the call is made on behalf of an Amazon Web
* Services account that is the management account or delegated administrator
* account for an organization in Organizations. If the trail is not an
* organization trail and this is set to true
, the trail will be
* created in all Amazon Web Services accounts that belong to the organization. If
* the trail is an organization trail and this is set to false
, the
* trail will remain in the current Amazon Web Services account but be deleted from
* all member accounts in the organization.
Specifies whether the trail is applied to all accounts in an organization in
* Organizations, or only for the current Amazon Web Services account. The default
* is false, and cannot be true unless the call is made on behalf of an Amazon Web
* Services account that is the management account or delegated administrator
* account for an organization in Organizations. If the trail is not an
* organization trail and this is set to true
, the trail will be
* created in all Amazon Web Services accounts that belong to the organization. If
* the trail is an organization trail and this is set to false
, the
* trail will remain in the current Amazon Web Services account but be deleted from
* all member accounts in the organization.
Specifies whether the trail is applied to all accounts in an organization in
* Organizations, or only for the current Amazon Web Services account. The default
* is false, and cannot be true unless the call is made on behalf of an Amazon Web
* Services account that is the management account or delegated administrator
* account for an organization in Organizations. If the trail is not an
* organization trail and this is set to true
, the trail will be
* created in all Amazon Web Services accounts that belong to the organization. If
* the trail is an organization trail and this is set to false
, the
* trail will remain in the current Amazon Web Services account but be deleted from
* all member accounts in the organization.