types

type AccessDeniedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AccountHasOngoingImportException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AccountNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AccountNotRegisteredException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AccountRegisteredException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AdvancedEventSelector struct {

	// Contains all selector statements in an advanced event selector.
	//
	// This member is required.
	FieldSelectors []AdvancedFieldSelector

	// An optional, descriptive name for an advanced event selector, such as "Log data
	// events for only two S3 buckets".
	Name *string
	// contains filtered or unexported fields
}

type AdvancedFieldSelector struct {

	// A field in a CloudTrail event record on which to filter events to be logged.
	// For event data stores for CloudTrail Insights events, Config configuration
	// items, Audit Manager evidence, or events outside of Amazon Web Services, the
	// field is used only for selecting events as filtering is not supported. For
	// CloudTrail management events, supported fields include readOnly , eventCategory
	// , and eventSource . For CloudTrail data events, supported fields include
	// readOnly , eventCategory , eventName , resources.type , and resources.ARN . For
	// event data stores for CloudTrail Insights events, Config configuration items,
	// Audit Manager evidence, or events outside of Amazon Web Services, the only
	// supported field is eventCategory .
	//   - readOnly - Optional. Can be set to Equals a value of true or false . If you
	//   do not add this field, CloudTrail logs both read and write events. A value of
	//   true logs only read events. A value of false logs only write events.
	//   - eventSource - For filtering management events only. This can be set to
	//   NotEquals kms.amazonaws.com or NotEquals rdsdata.amazonaws.com .
	//   - eventName - Can use any operator. You can use it to filter in or filter out
	//   any data event logged to CloudTrail, such as PutBucket or GetSnapshotBlock .
	//   You can have multiple values for this field, separated by commas.
	//   - eventCategory - This is required and must be set to Equals .
	//   - For CloudTrail management events, the value must be Management .
	//   - For CloudTrail data events, the value must be Data . The following are used
	//   only for event data stores:
	//   - For CloudTrail Insights events, the value must be Insight .
	//   - For Config configuration items, the value must be ConfigurationItem .
	//   - For Audit Manager evidence, the value must be Evidence .
	//   - For non-Amazon Web Services events, the value must be ActivityAuditLog .
	//   - resources.type - This field is required for CloudTrail data events.
	//   resources.type can only use the Equals operator, and the value can be one of
	//   the following:
	//   - AWS::DynamoDB::Table
	//   - AWS::Lambda::Function
	//   - AWS::S3::Object
	//   - AWS::AppConfig::Configuration
	//   - AWS::B2BI::Transformer
	//   - AWS::Bedrock::AgentAlias
	//   - AWS::Bedrock::KnowledgeBase
	//   - AWS::Cassandra::Table
	//   - AWS::CloudFront::KeyValueStore
	//   - AWS::CloudTrail::Channel
	//   - AWS::CodeWhisperer::Customization
	//   - AWS::CodeWhisperer::Profile
	//   - AWS::Cognito::IdentityPool
	//   - AWS::DynamoDB::Stream
	//   - AWS::EC2::Snapshot
	//   - AWS::EMRWAL::Workspace
	//   - AWS::FinSpace::Environment
	//   - AWS::Glue::Table
	//   - AWS::GreengrassV2::ComponentVersion
	//   - AWS::GreengrassV2::Deployment
	//   - AWS::GuardDuty::Detector
	//   - AWS::IoT::Certificate
	//   - AWS::IoT::Thing
	//   - AWS::IoTSiteWise::Asset
	//   - AWS::IoTSiteWise::TimeSeries
	//   - AWS::IoTTwinMaker::Entity
	//   - AWS::IoTTwinMaker::Workspace
	//   - AWS::KendraRanking::ExecutionPlan
	//   - AWS::KinesisVideo::Stream
	//   - AWS::ManagedBlockchain::Network
	//   - AWS::ManagedBlockchain::Node
	//   - AWS::MedicalImaging::Datastore
	//   - AWS::NeptuneGraph::Graph
	//   - AWS::PCAConnectorAD::Connector
	//   - AWS::QBusiness::Application
	//   - AWS::QBusiness::DataSource
	//   - AWS::QBusiness::Index
	//   - AWS::QBusiness::WebExperience
	//   - AWS::RDS::DBCluster
	//   - AWS::S3::AccessPoint
	//   - AWS::S3ObjectLambda::AccessPoint
	//   - AWS::S3Outposts::Object
	//   - AWS::SageMaker::Endpoint
	//   - AWS::SageMaker::ExperimentTrialComponent
	//   - AWS::SageMaker::FeatureGroup
	//   - AWS::ServiceDiscovery::Namespace
	//   - AWS::ServiceDiscovery::Service
	//   - AWS::SCN::Instance
	//   - AWS::SNS::PlatformEndpoint
	//   - AWS::SNS::Topic
	//   - AWS::SWF::Domain
	//   - AWS::SQS::Queue
	//   - AWS::SSMMessages::ControlChannel
	//   - AWS::ThinClient::Device
	//   - AWS::ThinClient::Environment
	//   - AWS::Timestream::Database
	//   - AWS::Timestream::Table
	//   - AWS::VerifiedPermissions::PolicyStore You can have only one resources.type
	//   field per selector. To log data events on more than one resource type, add
	//   another selector.
	//   - resources.ARN - You can use any operator with resources.ARN , but if you use
	//   Equals or NotEquals , the value must exactly match the ARN of a valid resource
	//   of the type you've specified in the template as the value of resources.type. For
	//   example, if resources.type equals AWS::S3::Object , the ARN must be in one of
	//   the following formats. To log all data events for all objects in a specific S3
	//   bucket, use the StartsWith operator, and include only the bucket ARN as the
	//   matching value. The trailing slash is intentional; do not exclude it. Replace
	//   the text between less than and greater than symbols (<>) with resource-specific
	//   information.
	//   - arn::s3:::/
	//   - arn::s3:::// When resources.type equals AWS::DynamoDB::Table , and the
	//   operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::dynamodb:::table/ When resources.type equals AWS::Lambda::Function ,
	//   and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::lambda:::function: When resources.type equals
	//   AWS::AppConfig::Configuration , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::appconfig:::application//environment//configuration/ When
	//   resources.type equals AWS::B2BI::Transformer , and the operator is set to
	//   Equals or NotEquals , the ARN must be in the following format:
	//   - arn::b2bi:::transformer/ When resources.type equals AWS::Bedrock::AgentAlias
	//   , and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::bedrock:::agent-alias// When resources.type equals
	//   AWS::Bedrock::KnowledgeBase , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::bedrock:::knowledge-base/ When resources.type equals
	//   AWS::Cassandra::Table , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::cassandra:::/keyspace//table/ When resources.type equals
	//   AWS::CloudFront::KeyValueStore , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::cloudfront:::key-value-store/ When resources.type equals
	//   AWS::CloudTrail::Channel , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::cloudtrail:::channel/ When resources.type equals
	//   AWS::CodeWhisperer::Customization , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::codewhisperer:::customization/ When resources.type equals
	//   AWS::CodeWhisperer::Profile , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::codewhisperer:::profile/ When resources.type equals
	//   AWS::Cognito::IdentityPool , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::cognito-identity:::identitypool/ When resources.type equals
	//   AWS::DynamoDB::Stream , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::dynamodb:::table//stream/ When resources.type equals AWS::EC2::Snapshot
	//   , and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::ec2:::snapshot/ When resources.type equals AWS::EMRWAL::Workspace , and
	//   the operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::emrwal:::workspace/ When resources.type equals
	//   AWS::FinSpace::Environment , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::finspace:::environment/ When resources.type equals AWS::Glue::Table ,
	//   and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::glue:::table// When resources.type equals
	//   AWS::GreengrassV2::ComponentVersion , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::greengrass:::components/ When resources.type equals
	//   AWS::GreengrassV2::Deployment , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::greengrass:::deployments/ When resources.type equals
	//   AWS::GuardDuty::Detector , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::guardduty:::detector/ When resources.type equals AWS::IoT::Certificate
	//   , and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::iot:::cert/ When resources.type equals AWS::IoT::Thing , and the
	//   operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::iot:::thing/ When resources.type equals AWS::IoTSiteWise::Asset , and
	//   the operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::iotsitewise:::asset/ When resources.type equals
	//   AWS::IoTSiteWise::TimeSeries , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::iotsitewise:::timeseries/ When resources.type equals
	//   AWS::IoTTwinMaker::Entity , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::iottwinmaker:::workspace//entity/ When resources.type equals
	//   AWS::IoTTwinMaker::Workspace , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::iottwinmaker:::workspace/ When resources.type equals
	//   AWS::KendraRanking::ExecutionPlan , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::kendra-ranking:::rescore-execution-plan/ When resources.type equals
	//   AWS::KinesisVideo::Stream , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::kinesisvideo:::stream// When resources.type equals
	//   AWS::ManagedBlockchain::Network , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::managedblockchain:::networks/ When resources.type equals
	//   AWS::ManagedBlockchain::Node , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::managedblockchain:::nodes/ When resources.type equals
	//   AWS::MedicalImaging::Datastore , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::medical-imaging:::datastore/ When resources.type equals
	//   AWS::NeptuneGraph::Graph , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::neptune-graph:::graph/ When resources.type equals
	//   AWS::PCAConnectorAD::Connector , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::pca-connector-ad:::connector/ When resources.type equals
	//   AWS::QBusiness::Application , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::qbusiness:::application/ When resources.type equals
	//   AWS::QBusiness::DataSource , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::qbusiness:::application//index//data-source/ When resources.type equals
	//   AWS::QBusiness::Index , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::qbusiness:::application//index/ When resources.type equals
	//   AWS::QBusiness::WebExperience , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::qbusiness:::application//web-experience/ When resources.type equals
	//   AWS::RDS::DBCluster , and the operator is set to Equals or NotEquals , the ARN
	//   must be in the following format:
	//   - arn::rds:::cluster/ When resources.type equals AWS::S3::AccessPoint , and
	//   the operator is set to Equals or NotEquals , the ARN must be in one of the
	//   following formats. To log events on all objects in an S3 access point, we
	//   recommend that you use only the access point ARN, don’t include the object path,
	//   and use the StartsWith or NotStartsWith operators.
	//   - arn::s3:::accesspoint/
	//   - arn::s3:::accesspoint//object/ When resources.type equals
	//   AWS::S3ObjectLambda::AccessPoint , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::s3-object-lambda:::accesspoint/ When resources.type equals
	//   AWS::S3Outposts::Object , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::s3-outposts::: When resources.type equals AWS::SageMaker::Endpoint ,
	//   and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::sagemaker:::endpoint/ When resources.type equals
	//   AWS::SageMaker::ExperimentTrialComponent , and the operator is set to Equals
	//   or NotEquals , the ARN must be in the following format:
	//   - arn::sagemaker:::experiment-trial-component/ When resources.type equals
	//   AWS::SageMaker::FeatureGroup , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::sagemaker:::feature-group/ When resources.type equals
	//   AWS::SCN::Instance , and the operator is set to Equals or NotEquals , the ARN
	//   must be in the following format:
	//   - arn::scn:::instance/ When resources.type equals
	//   AWS::ServiceDiscovery::Namespace , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::servicediscovery:::namespace/ When resources.type equals
	//   AWS::ServiceDiscovery::Service , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::servicediscovery:::service/ When resources.type equals
	//   AWS::SNS::PlatformEndpoint , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::sns:::endpoint/// When resources.type equals AWS::SNS::Topic , and the
	//   operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::sns::: When resources.type equals AWS::SWF::Domain , and the operator
	//   is set to Equals or NotEquals , the ARN must be in the following format:
	//   - arn::swf:::domain/ When resources.type equals AWS::SQS::Queue , and the
	//   operator is set to Equals or NotEquals , the ARN must be in the following
	//   format:
	//   - arn::sqs::: When resources.type equals AWS::SSMMessages::ControlChannel ,
	//   and the operator is set to Equals or NotEquals , the ARN must be in the
	//   following format:
	//   - arn::ssmmessages:::control-channel/ When resources.type equals
	//   AWS::ThinClient::Device , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::thinclient:::device/ When resources.type equals
	//   AWS::ThinClient::Environment , and the operator is set to Equals or NotEquals
	//   , the ARN must be in the following format:
	//   - arn::thinclient:::environment/ When resources.type equals
	//   AWS::Timestream::Database , and the operator is set to Equals or NotEquals ,
	//   the ARN must be in the following format:
	//   - arn::timestream:::database/ When resources.type equals
	//   AWS::Timestream::Table , and the operator is set to Equals or NotEquals , the
	//   ARN must be in the following format:
	//   - arn::timestream:::database//table/ When resources.type equals
	//   AWS::VerifiedPermissions::PolicyStore , and the operator is set to Equals or
	//   NotEquals , the ARN must be in the following format:
	//   - arn::verifiedpermissions:::policy-store/
	//
	// This member is required.
	Field *string

	// An operator that includes events that match the last few characters of the
	// event record field specified as the value of Field .
	EndsWith []string

	// An operator that includes events that match the exact value of the event record
	// field specified as the value of Field . This is the only valid operator that you
	// can use with the readOnly , eventCategory , and resources.type fields.
	Equals []string

	// An operator that excludes events that match the last few characters of the
	// event record field specified as the value of Field .
	NotEndsWith []string

	// An operator that excludes events that match the exact value of the event record
	// field specified as the value of Field .
	NotEquals []string

	// An operator that excludes events that match the first few characters of the
	// event record field specified as the value of Field .
	NotStartsWith []string

	// An operator that includes events that match the first few characters of the
	// event record field specified as the value of Field .
	StartsWith []string
	// contains filtered or unexported fields
}

type BillingMode string

type CannotDelegateManagementAccountException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type Channel struct {

	// The Amazon Resource Name (ARN) of a channel.
	ChannelArn *string

	// The name of the CloudTrail channel. For service-linked channels, the name is
	// aws-service-channel/service-name/custom-suffix where service-name represents
	// the name of the Amazon Web Services service that created the channel and
	// custom-suffix represents the suffix created by the Amazon Web Services service.
	Name *string
	// contains filtered or unexported fields
}

type ChannelARNInvalidException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ChannelAlreadyExistsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ChannelExistsForEDSException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ChannelMaxLimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ChannelNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CloudTrailARNInvalidException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CloudTrailAccessNotEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CloudTrailInvalidClientTokenIdException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CloudWatchLogsDeliveryUnavailableException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ConcurrentModificationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ConflictException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type DataResource struct {

	// The resource type in which you want to log data events. You can specify the
	// following basic event selector resource types:
	//   - AWS::DynamoDB::Table
	//   - AWS::Lambda::Function
	//   - AWS::S3::Object
	// Additional resource types are available through advanced event selectors. For
	// more information about these additional resource types, see
	// AdvancedFieldSelector (https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html)
	// .
	Type *string

	// An array of Amazon Resource Name (ARN) strings or partial ARN strings for the
	// specified objects.
	//   - To log data events for all objects in all S3 buckets in your Amazon Web
	//   Services account, specify the prefix as arn:aws:s3 . This also enables logging
	//   of data event activity performed by any user or role in your Amazon Web Services
	//   account, even if that activity is performed on a bucket that belongs to another
	//   Amazon Web Services account.
	//   - To log data events for all objects in an S3 bucket, specify the bucket and
	//   an empty object prefix such as arn:aws:s3:::bucket-1/ . The trail logs data
	//   events for all objects in this S3 bucket.
	//   - To log data events for specific objects, specify the S3 bucket and object
	//   prefix such as arn:aws:s3:::bucket-1/example-images . The trail logs data
	//   events for objects in this S3 bucket that match the prefix.
	//   - To log data events for all Lambda functions in your Amazon Web Services
	//   account, specify the prefix as arn:aws:lambda . This also enables logging of
	//   Invoke activity performed by any user or role in your Amazon Web Services
	//   account, even if that activity is performed on a function that belongs to
	//   another Amazon Web Services account.
	//   - To log data events for a specific Lambda function, specify the function
	//   ARN. Lambda function ARNs are exact. For example, if you specify a function ARN
	//   arn:aws:lambda:us-west-2:111111111111:function:helloworld, data events will only
	//   be logged for arn:aws:lambda:us-west-2:111111111111:function:helloworld. They
	//   will not be logged for
	//   arn:aws:lambda:us-west-2:111111111111:function:helloworld2.
	//   - To log data events for all DynamoDB tables in your Amazon Web Services
	//   account, specify the prefix as arn:aws:dynamodb .
	Values []string
	// contains filtered or unexported fields
}

type DelegatedAdminAccountLimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type DeliveryStatus string

type Destination struct {

	// For channels used for a CloudTrail Lake integration, the location is the ARN of
	// an event data store that receives events from a channel. For service-linked
	// channels, the location is the name of the Amazon Web Services service.
	//
	// This member is required.
	Location *string

	// The type of destination for events arriving from a channel. For channels used
	// for a CloudTrail Lake integration, the value is EVENT_DATA_STORE . For
	// service-linked channels, the value is AWS_SERVICE .
	//
	// This member is required.
	Type DestinationType
	// contains filtered or unexported fields
}

type DestinationType string

type Event struct {

	// The Amazon Web Services access key ID that was used to sign the request. If the
	// request was made with temporary security credentials, this is the access key ID
	// of the temporary credentials.
	AccessKeyId *string

	// A JSON string that contains a representation of the event returned.
	CloudTrailEvent *string

	// The CloudTrail ID of the event returned.
	EventId *string

	// The name of the event returned.
	EventName *string

	// The Amazon Web Services service to which the request was made.
	EventSource *string

	// The date and time of the event returned.
	EventTime *time.Time

	// Information about whether the event is a write event or a read event.
	ReadOnly *string

	// A list of resources referenced by the event returned.
	Resources []Resource

	// A user name or role name of the requester that called the API in the event
	// returned.
	Username *string
	// contains filtered or unexported fields
}

type EventCategory string

type EventDataStore struct {

	// The advanced event selectors that were used to select events for the data store.
	//
	// Deprecated: AdvancedEventSelectors is no longer returned by ListEventDataStores
	AdvancedEventSelectors []AdvancedEventSelector

	// The timestamp of the event data store's creation.
	//
	// Deprecated: CreatedTimestamp is no longer returned by ListEventDataStores
	CreatedTimestamp *time.Time

	// The ARN of the event data store.
	EventDataStoreArn *string

	// Indicates whether the event data store includes events from all Regions, or
	// only from the Region in which it was created.
	//
	// Deprecated: MultiRegionEnabled is no longer returned by ListEventDataStores
	MultiRegionEnabled *bool

	// The name of the event data store.
	Name *string

	// Indicates that an event data store is collecting logged events for an
	// organization.
	//
	// Deprecated: OrganizationEnabled is no longer returned by ListEventDataStores
	OrganizationEnabled *bool

	// The retention period, in days.
	//
	// Deprecated: RetentionPeriod is no longer returned by ListEventDataStores
	RetentionPeriod *int32

	// The status of an event data store.
	//
	// Deprecated: Status is no longer returned by ListEventDataStores
	Status EventDataStoreStatus

	// Indicates whether the event data store is protected from termination.
	//
	// Deprecated: TerminationProtectionEnabled is no longer returned by
	// ListEventDataStores
	TerminationProtectionEnabled *bool

	// The timestamp showing when an event data store was updated, if applicable.
	// UpdatedTimestamp is always either the same or newer than the time shown in
	// CreatedTimestamp .
	//
	// Deprecated: UpdatedTimestamp is no longer returned by ListEventDataStores
	UpdatedTimestamp *time.Time
	// contains filtered or unexported fields
}

type EventDataStoreARNInvalidException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreAlreadyExistsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreFederationEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreHasOngoingImportException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreMaxLimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventDataStoreStatus string

type EventDataStoreTerminationProtectedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type EventSelector struct {

	// CloudTrail supports data event logging for Amazon S3 objects, Lambda functions,
	// and Amazon DynamoDB tables with basic event selectors. You can specify up to 250
	// resources for an individual event selector, but the total number of data
	// resources cannot exceed 250 across all event selectors in a trail. This limit
	// does not apply if you configure resource logging for all data events. For more
	// information, see Data Events (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html)
	// and Limits in CloudTrail (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html)
	// in the CloudTrail User Guide.
	DataResources []DataResource

	// An optional list of service event sources from which you do not want management
	// events to be logged on your trail. In this release, the list can be empty
	// (disables the filter), or it can filter out Key Management Service or Amazon RDS
	// Data API events by containing kms.amazonaws.com or rdsdata.amazonaws.com . By
	// default, ExcludeManagementEventSources is empty, and KMS and Amazon RDS Data
	// API events are logged to your trail. You can exclude management event sources
	// only in Regions that support the event source.
	ExcludeManagementEventSources []string

	// Specify if you want your event selector to include management events for your
	// trail. For more information, see Management Events (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html)
	// in the CloudTrail User Guide. By default, the value is true . The first copy of
	// management events is free. You are charged for additional copies of management
	// events that you are logging on any subsequent trail in the same Region. For more
	// information about CloudTrail pricing, see CloudTrail Pricing (http://aws.amazon.com/cloudtrail/pricing/)
	// .
	IncludeManagementEvents *bool

	// Specify if you want your trail to log read-only events, write-only events, or
	// all. For example, the EC2 GetConsoleOutput is a read-only API operation and
	// RunInstances is a write-only API operation. By default, the value is All .
	ReadWriteType ReadWriteType
	// contains filtered or unexported fields
}

type FederationStatus string

type ImportFailureListItem struct {

	// Provides the reason the import failed.
	ErrorMessage *string

	// The type of import error.
	ErrorType *string

	// When the import was last updated.
	LastUpdatedTime *time.Time

	// The location of the failure in the S3 bucket.
	Location *string

	// The status of the import.
	Status ImportFailureStatus
	// contains filtered or unexported fields
}

type ImportFailureStatus string

type ImportNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ImportSource struct {

	// The source S3 bucket.
	//
	// This member is required.
	S3 *S3ImportSource
	// contains filtered or unexported fields
}

type ImportStatistics struct {

	// The number of trail events imported into the event data store.
	EventsCompleted *int64

	// The number of failed entries.
	FailedEntries *int64

	// The number of log files that completed import.
	FilesCompleted *int64

	// The number of S3 prefixes that completed import.
	PrefixesCompleted *int64

	// The number of S3 prefixes found for the import.
	PrefixesFound *int64
	// contains filtered or unexported fields
}

type ImportStatus string

type ImportsListItem struct {

	// The timestamp of the import's creation.
	CreatedTimestamp *time.Time

	// The ARN of the destination event data store.
	Destinations []string

	// The ID of the import.
	ImportId *string

	// The status of the import.
	ImportStatus ImportStatus

	// The timestamp of the import's last update.
	UpdatedTimestamp *time.Time
	// contains filtered or unexported fields
}

type InactiveEventDataStoreException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InactiveQueryException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type IngestionStatus struct {

	// The event ID of the most recent attempt to ingest events.
	LatestIngestionAttemptEventID *string

	// The time stamp of the most recent attempt to ingest events on the channel.
	LatestIngestionAttemptTime *time.Time

	// The error code for the most recent failure to ingest events.
	LatestIngestionErrorCode *string

	// The event ID of the most recent successful ingestion of events.
	LatestIngestionSuccessEventID *string

	// The time stamp of the most recent successful ingestion of events for the
	// channel.
	LatestIngestionSuccessTime *time.Time
	// contains filtered or unexported fields
}

type InsightNotEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsightSelector struct {

	// The type of Insights events to log on a trail or event data store.
	// ApiCallRateInsight and ApiErrorRateInsight are valid Insight types. The
	// ApiCallRateInsight Insights type analyzes write-only management API calls that
	// are aggregated per minute against a baseline API call volume. The
	// ApiErrorRateInsight Insights type analyzes management API calls that result in
	// error codes. The error is shown if the API call is unsuccessful.
	InsightType InsightType
	// contains filtered or unexported fields
}

type InsightType string

type InsightsMetricDataType string

type InsufficientDependencyServiceAccessPermissionException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsufficientEncryptionPolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsufficientS3BucketPolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsufficientSnsTopicPolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidCloudWatchLogsLogGroupArnException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidCloudWatchLogsRoleArnException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidDateRangeException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidEventCategoryException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidEventDataStoreCategoryException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidEventDataStoreStatusException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidEventSelectorsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidHomeRegionException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidImportSourceException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidInsightSelectorsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidKmsKeyIdException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidLookupAttributesException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidMaxResultsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidNextTokenException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidParameterCombinationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidParameterException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidQueryStatementException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidQueryStatusException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidS3BucketNameException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidS3PrefixException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidSnsTopicNameException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidSourceException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTagParameterException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTimeRangeException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTokenException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTrailNameException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type KmsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type KmsKeyDisabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type KmsKeyNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type LookupAttribute struct {

	// Specifies an attribute on which to filter the events returned.
	//
	// This member is required.
	AttributeKey LookupAttributeKey

	// Specifies a value for the specified AttributeKey . The maximum length for the
	// AttributeValue is 2000 characters. The following characters (' _ ', ' ', ' , ', '
	// \\n ') count as two characters towards the 2000 character limit.
	//
	// This member is required.
	AttributeValue *string
	// contains filtered or unexported fields
}

type LookupAttributeKey string

type MaxConcurrentQueriesException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaximumNumberOfTrailsExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoManagementAccountSLRExistsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NotOrganizationManagementAccountException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NotOrganizationMasterAccountException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OperationNotPermittedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationNotInAllFeaturesModeException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationsNotInUseException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type PublicKey struct {

	// The fingerprint of the public key.
	Fingerprint *string

	// The ending time of validity of the public key.
	ValidityEndTime *time.Time

	// The starting time of validity of the public key.
	ValidityStartTime *time.Time

	// The DER encoded public key value in PKCS#1 format.
	Value []byte
	// contains filtered or unexported fields
}

type Query struct {

	// The creation time of a query.
	CreationTime *time.Time

	// The ID of a query.
	QueryId *string

	// The status of the query. This can be QUEUED , RUNNING , FINISHED , FAILED ,
	// TIMED_OUT , or CANCELLED .
	QueryStatus QueryStatus
	// contains filtered or unexported fields
}

type QueryIdNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type QueryStatistics struct {

	// The total bytes that the query scanned in the event data store. This value
	// matches the number of bytes for which your account is billed for the query,
	// unless the query is still running.
	BytesScanned *int64

	// The number of results returned.
	ResultsCount *int32

	// The total number of results returned by a query.
	TotalResultsCount *int32
	// contains filtered or unexported fields
}

type QueryStatisticsForDescribeQuery struct {

	// The total bytes that the query scanned in the event data store. This value
	// matches the number of bytes for which your account is billed for the query,
	// unless the query is still running.
	BytesScanned *int64

	// The creation time of the query.
	CreationTime *time.Time

	// The number of events that matched a query.
	EventsMatched *int64

	// The number of events that the query scanned in the event data store.
	EventsScanned *int64

	// The query's run time, in milliseconds.
	ExecutionTimeInMillis *int32
	// contains filtered or unexported fields
}

type QueryStatus string

type ReadWriteType string

type Resource struct {

	// The name of the resource referenced by the event returned. These are
	// user-created names whose values will depend on the environment. For example, the
	// resource name might be "auto-scaling-test-group" for an Auto Scaling Group or
	// "i-1234567" for an EC2 Instance.
	ResourceName *string

	// The type of a resource referenced by the event returned. When the resource type
	// cannot be determined, null is returned. Some examples of resource types are:
	// Instance for EC2, Trail for CloudTrail, DBInstance for Amazon RDS, and AccessKey
	// for IAM. To learn more about how to look up and filter events by the resource
	// types supported for a service, see Filtering CloudTrail Events (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events-console.html#filtering-cloudtrail-events)
	// .
	ResourceType *string
	// contains filtered or unexported fields
}

type ResourceARNNotValidException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourcePolicyNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourcePolicyNotValidException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceTag struct {

	// Specifies the ARN of the resource.
	ResourceId *string

	// A list of tags.
	TagsList []Tag
	// contains filtered or unexported fields
}

type ResourceTypeNotSupportedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type S3BucketDoesNotExistException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type S3ImportSource struct {

	// The IAM ARN role used to access the source S3 bucket.
	//
	// This member is required.
	S3BucketAccessRoleArn *string

	// The Region associated with the source S3 bucket.
	//
	// This member is required.
	S3BucketRegion *string

	// The URI for the source S3 bucket.
	//
	// This member is required.
	S3LocationUri *string
	// contains filtered or unexported fields
}

type SourceConfig struct {

	// The advanced event selectors that are configured for the channel.
	AdvancedEventSelectors []AdvancedEventSelector

	// Specifies whether the channel applies to a single Region or to all Regions.
	ApplyToAllRegions *bool
	// contains filtered or unexported fields
}

type Tag struct {

	// The key in a key-value pair. The key must be must be no longer than 128 Unicode
	// characters. The key must be unique for the resource to which it applies.
	//
	// This member is required.
	Key *string

	// The value in a key-value pair of a tag. The value must be no longer than 256
	// Unicode characters.
	Value *string
	// contains filtered or unexported fields
}

type TagsLimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ThrottlingException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type Trail struct {

	// Specifies an Amazon Resource Name (ARN), a unique identifier that represents
	// the log group to which CloudTrail logs will be delivered.
	CloudWatchLogsLogGroupArn *string

	// Specifies the role for the CloudWatch Logs endpoint to assume to write to a
	// user's log group.
	CloudWatchLogsRoleArn *string

	// Specifies if the trail has custom event selectors.
	HasCustomEventSelectors *bool

	// Specifies whether a trail has insight types specified in an InsightSelector
	// list.
	HasInsightSelectors *bool

	// The Region in which the trail was created.
	HomeRegion *string

	// Set to True to include Amazon Web Services API calls from Amazon Web Services
	// global services such as IAM. Otherwise, False.
	IncludeGlobalServiceEvents *bool

	// Specifies whether the trail exists only in one Region or exists in all Regions.
	IsMultiRegionTrail *bool

	// Specifies whether the trail is an organization trail.
	IsOrganizationTrail *bool

	// Specifies the KMS key ID that encrypts the logs delivered by CloudTrail. The
	// value is a fully specified ARN to a KMS key in the following format.
	// arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
	KmsKeyId *string

	// Specifies whether log file validation is enabled.
	LogFileValidationEnabled *bool

	// Name of the trail set by calling CreateTrail . The maximum length is 128
	// characters.
	Name *string

	// Name of the Amazon S3 bucket into which CloudTrail delivers your trail files.
	// See Amazon S3 Bucket Naming Requirements (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/create_trail_naming_policy.html)
	// .
	S3BucketName *string

	// Specifies the Amazon S3 key prefix that comes after the name of the bucket you
	// have designated for log file delivery. For more information, see Finding Your
	// CloudTrail Log Files (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-find-log-files.html)
	// . The maximum length is 200 characters.
	S3KeyPrefix *string

	// Specifies the ARN of the Amazon SNS topic that CloudTrail uses to send
	// notifications when log files are delivered. The following is the format of a
	// topic ARN. arn:aws:sns:us-east-2:123456789012:MyTopic
	SnsTopicARN *string

	// This field is no longer in use. Use SnsTopicARN .
	//
	// Deprecated: This member has been deprecated.
	SnsTopicName *string

	// Specifies the ARN of the trail. The following is the format of a trail ARN.
	// arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
	TrailARN *string
	// contains filtered or unexported fields
}

type TrailAlreadyExistsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type TrailInfo struct {

	// The Amazon Web Services Region in which a trail was created.
	HomeRegion *string

	// The name of a trail.
	Name *string

	// The ARN of a trail.
	TrailARN *string
	// contains filtered or unexported fields
}

type TrailNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type TrailNotProvidedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type UnsupportedOperationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}