AWSAPICallViaCloudTrail

class aws_cdk.mixins_preview.aws_kms.events.AWSAPICallViaCloudTrail

Bases: object

(experimental) EventBridge event pattern for aws.kms@AWSAPICallViaCloudTrail.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

a_wSAPICall_via_cloud_trail = kms_events.AWSAPICallViaCloudTrail()

Stability:: experimental

Static Methods

classmethod aws_api_call_via_cloud_trail_pattern(*, aws_region=None, event_id=None, event_metadata=None, event_name=None, event_source=None, event_time=None, event_type=None, event_version=None, read_only=None, request_id=None, request_parameters=None, resources=None, response_elements=None, source_ip_address=None, user_agent=None, user_identity=None)

(experimental) EventBridge event pattern for AWS API Call via CloudTrail.

Parameters:

aws_region (Optional[Sequence[str]]) – (experimental) awsRegion property. Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_id (Optional[Sequence[str]]) – (experimental) eventID property. Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
event_name (Optional[Sequence[str]]) – (experimental) eventName property. Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_source (Optional[Sequence[str]]) – (experimental) eventSource property. Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_time (Optional[Sequence[str]]) – (experimental) eventTime property. Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_type (Optional[Sequence[str]]) – (experimental) eventType property. Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_version (Optional[Sequence[str]]) – (experimental) eventVersion property. Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
read_only (Optional[Sequence[str]]) – (experimental) readOnly property. Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_id (Optional[Sequence[str]]) – (experimental) requestID property. Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_parameters (Union[RequestParameters, Dict[str, Any], None]) – (experimental) requestParameters property. Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
resources (Optional[Sequence[Union[AwsapiCallViaCloudTrailItem, Dict[str, Any]]]]) – (experimental) resources property. Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
response_elements (Optional[Sequence[str]]) – (experimental) responseElements property. Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
source_ip_address (Optional[Sequence[str]]) – (experimental) sourceIPAddress property. Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_agent (Optional[Sequence[str]]) – (experimental) userAgent property. Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_identity (Union[UserIdentity, Dict[str, Any], None]) – (experimental) userIdentity property. Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

Return type:

EventPattern

AWSAPICallViaCloudTrailProps

class AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps(*, aws_region=None, event_id=None, event_metadata=None, event_name=None, event_source=None, event_time=None, event_type=None, event_version=None, read_only=None, request_id=None, request_parameters=None, resources=None, response_elements=None, source_ip_address=None, user_agent=None, user_identity=None)

Bases: object

(experimental) Props type for aws.kms@AWSAPICallViaCloudTrail event.

Parameters:

aws_region (Optional[Sequence[str]]) – (experimental) awsRegion property. Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_id (Optional[Sequence[str]]) – (experimental) eventID property. Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
event_name (Optional[Sequence[str]]) – (experimental) eventName property. Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_source (Optional[Sequence[str]]) – (experimental) eventSource property. Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_time (Optional[Sequence[str]]) – (experimental) eventTime property. Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_type (Optional[Sequence[str]]) – (experimental) eventType property. Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_version (Optional[Sequence[str]]) – (experimental) eventVersion property. Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
read_only (Optional[Sequence[str]]) – (experimental) readOnly property. Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_id (Optional[Sequence[str]]) – (experimental) requestID property. Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_parameters (Union[RequestParameters, Dict[str, Any], None]) – (experimental) requestParameters property. Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
resources (Optional[Sequence[Union[AwsapiCallViaCloudTrailItem, Dict[str, Any]]]]) – (experimental) resources property. Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
response_elements (Optional[Sequence[str]]) – (experimental) responseElements property. Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
source_ip_address (Optional[Sequence[str]]) – (experimental) sourceIPAddress property. Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_agent (Optional[Sequence[str]]) – (experimental) userAgent property. Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_identity (Union[UserIdentity, Dict[str, Any], None]) – (experimental) userIdentity property. Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

from aws_cdk import AWSEventMetadataProps
# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

a_wSAPICall_via_cloud_trail_props = kms_events.AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps(
    aws_region=["awsRegion"],
    event_id=["eventId"],
    event_metadata=AWSEventMetadataProps(
        region=["region"],
        resources=["resources"],
        version=["version"]
    ),
    event_name=["eventName"],
    event_source=["eventSource"],
    event_time=["eventTime"],
    event_type=["eventType"],
    event_version=["eventVersion"],
    read_only=["readOnly"],
    request_id=["requestId"],
    request_parameters=kms_events.AWSAPICallViaCloudTrail.RequestParameters(
        encryption_context=kms_events.AWSAPICallViaCloudTrail.EncryptionContext(
            aws_s3_arn=["awsS3Arn"]
        ),
        key_id=["keyId"],
        key_spec=["keySpec"]
    ),
    resources=[kms_events.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(
        account_id=["accountId"],
        arn=["arn"],
        type=["type"]
    )],
    response_elements=["responseElements"],
    source_ip_address=["sourceIpAddress"],
    user_agent=["userAgent"],
    user_identity=kms_events.AWSAPICallViaCloudTrail.UserIdentity(
        access_key_id=["accessKeyId"],
        account_id=["accountId"],
        arn=["arn"],
        invoked_by=["invokedBy"],
        principal_id=["principalId"],
        session_context=kms_events.AWSAPICallViaCloudTrail.SessionContext(
            attributes=kms_events.AWSAPICallViaCloudTrail.Attributes(
                creation_date=["creationDate"],
                mfa_authenticated=["mfaAuthenticated"]
            ),
            session_issuer=kms_events.AWSAPICallViaCloudTrail.SessionIssuer(
                account_id=["accountId"],
                arn=["arn"],
                principal_id=["principalId"],
                type=["type"],
                user_name=["userName"]
            )
        ),
        type=["type"]
    )
)

Attributes

aws_region

(experimental) awsRegion property.

Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_id

(experimental) eventID property.

Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_metadata

(experimental) EventBridge event metadata.

Default:

Stability:: experimental

event_name

(experimental) eventName property.

Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_source

(experimental) eventSource property.

Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_time

(experimental) eventTime property.

Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_type

(experimental) eventType property.

Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_version

(experimental) eventVersion property.

Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

read_only

(experimental) readOnly property.

Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

request_id

(experimental) requestID property.

Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

request_parameters

(experimental) requestParameters property.

Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

resources

(experimental) resources property.

Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

response_elements

(experimental) responseElements property.

Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

source_ip_address

(experimental) sourceIPAddress property.

Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_agent

(experimental) userAgent property.

Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_identity

(experimental) userIdentity property.

Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

Attributes

class AWSAPICallViaCloudTrail.Attributes(*, creation_date=None, mfa_authenticated=None)

Bases: object

(experimental) Type definition for Attributes.

Parameters:

creation_date (Optional[Sequence[str]]) – (experimental) creationDate property. Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
mfa_authenticated (Optional[Sequence[str]]) – (experimental) mfaAuthenticated property. Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

attributes = kms_events.AWSAPICallViaCloudTrail.Attributes(
    creation_date=["creationDate"],
    mfa_authenticated=["mfaAuthenticated"]
)

Attributes

creation_date

(experimental) creationDate property.

Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

mfa_authenticated

(experimental) mfaAuthenticated property.

Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

AwsapiCallViaCloudTrailItem

class AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(*, account_id=None, arn=None, type=None)

Bases: object

(experimental) Type definition for AWSAPICallViaCloudTrailItem.

Parameters:

account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) ARN property. Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

awsapi_call_via_cloud_trail_item = kms_events.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(
    account_id=["accountId"],
    arn=["arn"],
    type=["type"]
)

Attributes

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) ARN property.

Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

EncryptionContext

class AWSAPICallViaCloudTrail.EncryptionContext(*, aws_s3_arn=None)

Bases: object

(experimental) Type definition for EncryptionContext.

Parameters:: aws_s3_arn (Optional[Sequence[str]]) – (experimental) aws:s3:arn property. Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

encryption_context = kms_events.AWSAPICallViaCloudTrail.EncryptionContext(
    aws_s3_arn=["awsS3Arn"]
)

Attributes

aws_s3_arn

arn property.

Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

Type:

(experimental) aws

Type:

s3

RequestParameters

class AWSAPICallViaCloudTrail.RequestParameters(*, encryption_context=None, key_id=None, key_spec=None)

Bases: object

(experimental) Type definition for RequestParameters.

Parameters:

encryption_context (Union[EncryptionContext, Dict[str, Any], None]) – (experimental) encryptionContext property. Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
key_id (Optional[Sequence[str]]) – (experimental) keyId property. Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference
key_spec (Optional[Sequence[str]]) – (experimental) keySpec property. Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

request_parameters = kms_events.AWSAPICallViaCloudTrail.RequestParameters(
    encryption_context=kms_events.AWSAPICallViaCloudTrail.EncryptionContext(
        aws_s3_arn=["awsS3Arn"]
    ),
    key_id=["keyId"],
    key_spec=["keySpec"]
)

Attributes

encryption_context

(experimental) encryptionContext property.

Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

key_id

(experimental) keyId property.

Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Filter with the Key reference

Stability:

experimental

key_spec

(experimental) keySpec property.

Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

SessionContext

class AWSAPICallViaCloudTrail.SessionContext(*, attributes=None, session_issuer=None)

Bases: object

(experimental) Type definition for SessionContext.

Parameters:

attributes (Union[Attributes, Dict[str, Any], None]) – (experimental) attributes property. Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
session_issuer (Union[SessionIssuer, Dict[str, Any], None]) – (experimental) sessionIssuer property. Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

session_context = kms_events.AWSAPICallViaCloudTrail.SessionContext(
    attributes=kms_events.AWSAPICallViaCloudTrail.Attributes(
        creation_date=["creationDate"],
        mfa_authenticated=["mfaAuthenticated"]
    ),
    session_issuer=kms_events.AWSAPICallViaCloudTrail.SessionIssuer(
        account_id=["accountId"],
        arn=["arn"],
        principal_id=["principalId"],
        type=["type"],
        user_name=["userName"]
    )
)

Attributes

attributes

(experimental) attributes property.

Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

session_issuer

(experimental) sessionIssuer property.

Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

SessionIssuer

class AWSAPICallViaCloudTrail.SessionIssuer(*, account_id=None, arn=None, principal_id=None, type=None, user_name=None)

Bases: object

(experimental) Type definition for SessionIssuer.

Parameters:

account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) arn property. Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
principal_id (Optional[Sequence[str]]) – (experimental) principalId property. Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_name (Optional[Sequence[str]]) – (experimental) userName property. Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

session_issuer = kms_events.AWSAPICallViaCloudTrail.SessionIssuer(
    account_id=["accountId"],
    arn=["arn"],
    principal_id=["principalId"],
    type=["type"],
    user_name=["userName"]
)

Attributes

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) arn property.

Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

principal_id

(experimental) principalId property.

Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_name

(experimental) userName property.

Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

UserIdentity

class AWSAPICallViaCloudTrail.UserIdentity(*, access_key_id=None, account_id=None, arn=None, invoked_by=None, principal_id=None, session_context=None, type=None)

Bases: object

(experimental) Type definition for UserIdentity.

Parameters:

access_key_id (Optional[Sequence[str]]) – (experimental) accessKeyId property. Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) arn property. Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
invoked_by (Optional[Sequence[str]]) – (experimental) invokedBy property. Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
principal_id (Optional[Sequence[str]]) – (experimental) principalId property. Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
session_context (Union[SessionContext, Dict[str, Any], None]) – (experimental) sessionContext property. Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

user_identity = kms_events.AWSAPICallViaCloudTrail.UserIdentity(
    access_key_id=["accessKeyId"],
    account_id=["accountId"],
    arn=["arn"],
    invoked_by=["invokedBy"],
    principal_id=["principalId"],
    session_context=kms_events.AWSAPICallViaCloudTrail.SessionContext(
        attributes=kms_events.AWSAPICallViaCloudTrail.Attributes(
            creation_date=["creationDate"],
            mfa_authenticated=["mfaAuthenticated"]
        ),
        session_issuer=kms_events.AWSAPICallViaCloudTrail.SessionIssuer(
            account_id=["accountId"],
            arn=["arn"],
            principal_id=["principalId"],
            type=["type"],
            user_name=["userName"]
        )
    ),
    type=["type"]
)

Attributes

access_key_id

(experimental) accessKeyId property.

Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) arn property.

Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

invoked_by

(experimental) invokedBy property.

Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

principal_id

(experimental) principalId property.

Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

session_context

(experimental) sessionContext property.

Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental