NAME
Paws::CloudTrail::AdvancedFieldSelector
USAGE
This class represents one of two things:
Arguments in a call to a service
Use the attributes of this class as arguments to methods. You shouldn't make instances of this class. Each attribute should be used as a named argument in the calls that expect this type of object.
As an example, if Att1 is expected to be a Paws::CloudTrail::AdvancedFieldSelector object:
$service_obj->Method(Att1 => { EndsWith => $value, ..., StartsWith => $value });
Results returned from an API call
Use accessors for each attribute. If Att1 is expected to be an Paws::CloudTrail::AdvancedFieldSelector object:
$result = $service_obj->Method(...);
$result->Att1->EndsWith
DESCRIPTION
A single selector statement in an advanced event selector.
ATTRIBUTES
EndsWith => ArrayRef[Str|Undef]
An operator that includes events that match the last few characters of the event record field specified as the value of Field
.
Equals => ArrayRef[Str|Undef]
An operator that includes events that match the exact value of the event record field specified as the value of Field
. This is the only valid operator that you can use with the readOnly
, eventCategory
, and resources.type
fields.
REQUIRED Field => Str
A field in an event record on which to filter events to be logged. Supported fields include readOnly
, eventCategory
, eventSource
(for management events), eventName
, resources.type
, and resources.ARN
.
readOnly
- Optional. Can be set toEquals
a value oftrue
orfalse
. A value offalse
logs bothread
andwrite
events.eventSource
- For filtering management events only. This can be set only toNotEquals
kms.amazonaws.com
.eventName
- Can use any operator. You can use it to lter in or lter out any data event logged to CloudTrail, such asPutBucket
. You can have multiple values for this eld, separated by commas.eventCategory
- This is required. It must be set toEquals
, and the value must beManagement
orData
.resources.type
- This eld is required.resources.type
can only use theEquals
operator, and the value can be one of the following:AWS::S3::Object
,AWS::Lambda::Function
,AWS::DynamoDB::Table
,AWS::S3Outposts::Object
,AWS::ManagedBlockchain::Node
, orAWS::S3ObjectLambda::AccessPoint
. You can have only oneresources.type
eld per selector. To log data events on more than one resource type, add another selector.resources.ARN
- You can use any operator with resources.ARN, but if you useEquals
orNotEquals
, the value must exactly match the ARN of a valid resource of the type you've specied in the template as the value of resources.type. For example, if resources.type equalsAWS::S3::Object
, the ARN must be in one of the following formats. To log all data events for all objects in a specific S3 bucket, use theStartsWith
operator, and include only the bucket ARN as the matching value.The trailing slash is intentional; do not exclude it.
arn:partition:s3:::bucket_name/
arn:partition:s3:::bucket_name/object_or_file_name/
When resources.type equals
AWS::Lambda::Function
, and the operator is set toEquals
orNotEquals
, the ARN must be in the following format:arn:partition:lambda:region:account_ID:function:function_name
When resources.type equals
AWS::DynamoDB::Table
, and the operator is set toEquals
orNotEquals
, the ARN must be in the following format:arn:partition:dynamodb:region:account_ID:table:table_name
When
resources.type
equalsAWS::S3Outposts::Object
, and the operator is set toEquals
orNotEquals
, the ARN must be in the following format:arn:partition:s3-outposts:region:>account_ID:object_path
When
resources.type
equalsAWS::ManagedBlockchain::Node
, and the operator is set toEquals
orNotEquals
, the ARN must be in the following format:arn:partition:managedblockchain:region:account_ID:nodes/node_ID
When
resources.type
equalsAWS::S3ObjectLambda::AccessPoint
, and the operator is set toEquals
orNotEquals
, the ARN must be in the following format:arn:partition:s3-object-lambda:region:account_ID:accesspoint/access_point_name
NotEndsWith => ArrayRef[Str|Undef]
An operator that excludes events that match the last few characters of the event record field specified as the value of Field
.
NotEquals => ArrayRef[Str|Undef]
An operator that excludes events that match the exact value of the event record field specified as the value of Field
.
NotStartsWith => ArrayRef[Str|Undef]
An operator that excludes events that match the first few characters of the event record field specified as the value of Field
.
StartsWith => ArrayRef[Str|Undef]
An operator that includes events that match the first few characters of the event record field specified as the value of Field
.
SEE ALSO
This class forms part of Paws, describing an object used in Paws::CloudTrail
BUGS and CONTRIBUTIONS
The source code is located here: https://github.com/pplu/aws-sdk-perl
Please report bugs to: https://github.com/pplu/aws-sdk-perl/issues