AWS CloudTrail Trail EventSelector
The
EventSelector property type configures logging of management events and data events for an AWS
CloudTrail trail.
For more information, see PutEventSelectors
in the AWS CloudTrail API Reference.
EventSelector is a property of the AWS::CloudTrail::Trail resource.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "DataResources" : [ DataResource, ... ], "IncludeManagementEvents" :Boolean, "ReadWriteType" :String}
YAML
DataResources: - DataResource IncludeManagementEvents:BooleanReadWriteType:String
Properties
DataResources-
The resources for data events. CloudTrail supports logging data events for Amazon S3 objects and AWS Lambda functions. For more information, see Data Events in the AWS CloudTrail User Guide.
Required: No
Type: List of DataResource
Update requires: No interruption
IncludeManagementEvents-
Specifies whether the event selector includes management events for the trail. The default value is
true. For more information, see Management Events in the AWS CloudTrail User Guide.Required: No
Type: Boolean
Update requires: No interruption
ReadWriteType-
Specifies whether to log read-only events, write-only events, or all events. The default value is
All.Required: No
Type: String
Valid values:
ReadOnly|WriteOnly|AllUpdate requires: No interruption
