v1alpha1

type AdvancedEventSelector struct {
	FieldSelectors []*AdvancedFieldSelector `json:"fieldSelectors,omitempty"`
	Name           *string                  `json:"name,omitempty"`
}

type AdvancedFieldSelector struct {
	EndsWith      []*string `json:"endsWith,omitempty"`
	Equals        []*string `json:"equals,omitempty"`
	Field         *string   `json:"field,omitempty"`
	NotEndsWith   []*string `json:"notEndsWith,omitempty"`
	NotEquals     []*string `json:"notEquals,omitempty"`
	NotStartsWith []*string `json:"notStartsWith,omitempty"`
	StartsWith    []*string `json:"startsWith,omitempty"`
}

type DataResource struct {
	Type *string `json:"type_,omitempty"`
}

type Event struct {
	AccessKeyID     *string      `json:"accessKeyID,omitempty"`
	CloudTrailEvent *string      `json:"cloudTrailEvent,omitempty"`
	EventID         *string      `json:"eventID,omitempty"`
	EventName       *string      `json:"eventName,omitempty"`
	EventSource     *string      `json:"eventSource,omitempty"`
	EventTime       *metav1.Time `json:"eventTime,omitempty"`
	ReadOnly        *string      `json:"readOnly,omitempty"`
	Username        *string      `json:"username,omitempty"`
}

type EventCategory string

type EventDataStore struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              EventDataStoreSpec   `json:"spec,omitempty"`
	Status            EventDataStoreStatus `json:"status,omitempty"`
}

type EventDataStoreList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []EventDataStore `json:"items"`
}

type EventDataStoreSpec struct {

	// The advanced event selectors to use to select the events for the data store.
	// For more information about how to use advanced event selectors, see Log events
	// by using advanced event selectors (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html#creating-data-event-selectors-advanced)
	// in the CloudTrail User Guide.
	AdvancedEventSelectors []*AdvancedEventSelector `json:"advancedEventSelectors,omitempty"`
	// Specifies whether the event data store includes events from all regions,
	// or only from the region in which the event data store is created.
	MultiRegionEnabled *bool `json:"multiRegionEnabled,omitempty"`
	// The name of the event data store.
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// Specifies whether an event data store collects events logged for an organization
	// in Organizations.
	OrganizationEnabled *bool `json:"organizationEnabled,omitempty"`
	// The retention period of the event data store, in days. You can set a retention
	// period of up to 2555 days, the equivalent of seven years.
	RetentionPeriod *int64 `json:"retentionPeriod,omitempty"`
	Tags            []*Tag `json:"tags,omitempty"`
	// Specifies whether termination protection is enabled for the event data store.
	// If termination protection is enabled, you cannot delete the event data store
	// until termination protection is disabled.
	TerminationProtectionEnabled *bool `json:"terminationProtectionEnabled,omitempty"`
}

type EventDataStoreStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRS managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The timestamp that shows when the event data store was created.
	// +kubebuilder:validation:Optional
	CreatedTimestamp *metav1.Time `json:"createdTimestamp,omitempty"`
	// The status of event data store creation.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
	// The timestamp that shows when an event data store was updated, if applicable.
	// UpdatedTimestamp is always either the same or newer than the time shown in
	// CreatedTimestamp.
	// +kubebuilder:validation:Optional
	UpdatedTimestamp *metav1.Time `json:"updatedTimestamp,omitempty"`
}

type EventDataStoreStatus_SDK string

type EventDataStore_SDK struct {
	AdvancedEventSelectors       []*AdvancedEventSelector `json:"advancedEventSelectors,omitempty"`
	CreatedTimestamp             *metav1.Time             `json:"createdTimestamp,omitempty"`
	EventDataStoreARN            *string                  `json:"eventDataStoreARN,omitempty"`
	MultiRegionEnabled           *bool                    `json:"multiRegionEnabled,omitempty"`
	Name                         *string                  `json:"name,omitempty"`
	OrganizationEnabled          *bool                    `json:"organizationEnabled,omitempty"`
	RetentionPeriod              *int64                   `json:"retentionPeriod,omitempty"`
	Status                       *string                  `json:"status,omitempty"`
	TerminationProtectionEnabled *bool                    `json:"terminationProtectionEnabled,omitempty"`
	UpdatedTimestamp             *metav1.Time             `json:"updatedTimestamp,omitempty"`
}

type EventSelector struct {
	IncludeManagementEvents *bool `json:"includeManagementEvents,omitempty"`
}

type InsightType string

type LookupAttribute struct {
	AttributeValue *string `json:"attributeValue,omitempty"`
}

type LookupAttributeKey string

type PublicKey struct {
	Fingerprint       *string      `json:"fingerprint,omitempty"`
	ValidityEndTime   *metav1.Time `json:"validityEndTime,omitempty"`
	ValidityStartTime *metav1.Time `json:"validityStartTime,omitempty"`
}

type Query struct {
	CreationTime *metav1.Time `json:"creationTime,omitempty"`
}

type QueryStatisticsForDescribeQuery struct {
	CreationTime *metav1.Time `json:"creationTime,omitempty"`
}

type QueryStatus string

type ReadWriteType string

type Resource struct {
	ResourceName *string `json:"resourceName,omitempty"`
	ResourceType *string `json:"resourceType,omitempty"`
}

type ResourceTag struct {
	ResourceID *string `json:"resourceID,omitempty"`
	// A list of tags.
	TagsList []*Tag `json:"tagsList,omitempty"`
}

type Tag struct {
	Key   *string `json:"key,omitempty"`
	Value *string `json:"value,omitempty"`
}

type Trail struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              TrailSpec   `json:"spec,omitempty"`
	Status            TrailStatus `json:"status,omitempty"`
}

type TrailInfo struct {
	HomeRegion *string `json:"homeRegion,omitempty"`
	Name       *string `json:"name,omitempty"`
	TrailARN   *string `json:"trailARN,omitempty"`
}

type TrailList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Trail `json:"items"`
}

type TrailSpec struct {

	// Specifies a log group name using an Amazon Resource Name (ARN), a unique
	// identifier that represents the log group to which CloudTrail logs will be
	// delivered. Not required unless you specify CloudWatchLogsRoleArn.
	CloudWatchLogsLogGroupARN *string `json:"cloudWatchLogsLogGroupARN,omitempty"`
	// Specifies the role for the CloudWatch Logs endpoint to assume to write to
	// a user's log group.
	CloudWatchLogsRoleARN *string `json:"cloudWatchLogsRoleARN,omitempty"`
	// Specifies whether log file integrity validation is enabled. The default is
	// false.
	//
	// When you disable log file integrity validation, the chain of digest files
	// is broken after one hour. CloudTrail does not create digest files for log
	// files that were delivered during a period in which log file integrity validation
	// was disabled. For example, if you enable log file integrity validation at
	// noon on January 1, disable it at noon on January 2, and re-enable it at noon
	// on January 10, digest files will not be created for the log files delivered
	// from noon on January 2 to noon on January 10. The same applies whenever you
	// stop CloudTrail logging or delete a trail.
	EnableLogFileValidation *bool `json:"enableLogFileValidation,omitempty"`
	// Specifies whether the trail is publishing events from global services such
	// as IAM to the log files.
	IncludeGlobalServiceEvents *bool `json:"includeGlobalServiceEvents,omitempty"`
	// Specifies whether the trail is created in the current region or in all regions.
	// The default is false, which creates a trail only in the region where you
	// are signed in. As a best practice, consider creating trails that log events
	// in all regions.
	IsMultiRegionTrail *bool `json:"isMultiRegionTrail,omitempty"`
	// Specifies whether the trail is created for all accounts in an organization
	// in Organizations, or only for the current Amazon Web Services account. The
	// default is false, and cannot be true unless the call is made on behalf of
	// an Amazon Web Services account that is the management account for an organization
	// in Organizations.
	IsOrganizationTrail *bool `json:"isOrganizationTrail,omitempty"`
	// Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail.
	// The value can be an alias name prefixed by "alias/", a fully specified ARN
	// to an alias, a fully specified ARN to a key, or a globally unique identifier.
	//
	// CloudTrail also supports KMS multi-Region keys. For more information about
	// multi-Region keys, see Using multi-Region keys (https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html)
	// in the Key Management Service Developer Guide.
	//
	// Examples:
	//
	//   - alias/MyAliasName
	//
	//   - arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
	//
	//   - arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
	//
	//   - 12345678-1234-1234-1234-123456789012
	KMSKeyID *string `json:"kmsKeyID,omitempty"`
	// Specifies the name of the trail. The name must meet the following requirements:
	//
	//   - Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores
	//     (_), or dashes (-)
	//
	//   - Start with a letter or number, and end with a letter or number
	//
	//   - Be between 3 and 128 characters
	//
	//   - Have no adjacent periods, underscores or dashes. Names like my-_namespace
	//     and my--namespace are not valid.
	//
	//   - Not be in IP address format (for example, 192.168.5.4)
	//
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// Specifies the name of the Amazon S3 bucket designated for publishing log
	// files. See Amazon S3 Bucket Naming Requirements (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html).
	// +kubebuilder:validation:Required
	S3BucketName *string `json:"s3BucketName"`
	// Specifies the Amazon S3 key prefix that comes after the name of the bucket
	// you have designated for log file delivery. For more information, see Finding
	// Your CloudTrail Log Files (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html).
	// The maximum length is 200 characters.
	S3KeyPrefix *string `json:"s3KeyPrefix,omitempty"`
	// Specifies the name of the Amazon SNS topic defined for notification of log
	// file delivery. The maximum length is 256 characters.
	SNSTopicName *string `json:"snsTopicName,omitempty"`
	Tags         []*Tag  `json:"tags,omitempty"`
}

type TrailStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRS managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// Specifies whether log file integrity validation is enabled.
	// +kubebuilder:validation:Optional
	LogFileValidationEnabled *bool `json:"logFileValidationEnabled,omitempty"`
	// Specifies the ARN of the Amazon SNS topic that CloudTrail uses to send notifications
	// when log files are delivered. The format of a topic ARN is:
	//
	// arn:aws:sns:us-east-2:123456789012:MyTopic
	// +kubebuilder:validation:Optional
	SNSTopicARN *string `json:"snsTopicARN,omitempty"`
}

type Trail_SDK struct {
	CloudWatchLogsLogGroupARN  *string `json:"cloudWatchLogsLogGroupARN,omitempty"`
	CloudWatchLogsRoleARN      *string `json:"cloudWatchLogsRoleARN,omitempty"`
	HasCustomEventSelectors    *bool   `json:"hasCustomEventSelectors,omitempty"`
	HasInsightSelectors        *bool   `json:"hasInsightSelectors,omitempty"`
	HomeRegion                 *string `json:"homeRegion,omitempty"`
	IncludeGlobalServiceEvents *bool   `json:"includeGlobalServiceEvents,omitempty"`
	IsMultiRegionTrail         *bool   `json:"isMultiRegionTrail,omitempty"`
	IsOrganizationTrail        *bool   `json:"isOrganizationTrail,omitempty"`
	KMSKeyID                   *string `json:"kmsKeyID,omitempty"`
	LogFileValidationEnabled   *bool   `json:"logFileValidationEnabled,omitempty"`
	Name                       *string `json:"name,omitempty"`
	S3BucketName               *string `json:"s3BucketName,omitempty"`
	S3KeyPrefix                *string `json:"s3KeyPrefix,omitempty"`
	SNSTopicARN                *string `json:"snsTopicARN,omitempty"`
	SNSTopicName               *string `json:"snsTopicName,omitempty"`
	TrailARN                   *string `json:"trailARN,omitempty"`
}