AWS::CloudTrail::EventDataStore AdvancedEventSelector - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::CloudTrail::EventDataStore AdvancedEventSelector

Advanced event selectors let you create fine-grained selectors for the following Amazon CloudTrail event record fields. They help you control costs by logging only those events that are important to you. For more information about advanced event selectors, see Logging data events in the Amazon CloudTrail User Guide.

  • readOnly

  • eventSource

  • eventName

  • eventCategory

  • resources.type

  • resources.ARN

You cannot apply both event selectors and advanced event selectors to a trail.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "FieldSelectors" : [ AdvancedFieldSelector, ... ],
  "Name" : String
}

Properties

FieldSelectors

Contains all selector statements in an advanced event selector.

Required: Yes

Type: List of AdvancedFieldSelector

Update requires: No interruption

Name

An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".

Required: No

Type: String

Minimum: 0

Maximum: 1000

Pattern: .*

Update requires: No interruption