KeyEvents

class aws_cdk.mixins_preview.aws_kms.events.KeyEvents(*args: Any, **kwargs)

Bases: object

(experimental) EventBridge event patterns for Key.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events
from aws_cdk.interfaces import aws_kms as interfaces_aws_kms

# key_ref: interfaces_aws_kms.IKeyRef

key_events = kms_events.KeyEvents.from_key(key_ref)

Methods

aws_api_call_via_cloud_trail_pattern(*, aws_region=None, event_id=None, event_metadata=None, event_name=None, event_source=None, event_time=None, event_type=None, event_version=None, read_only=None, request_id=None, request_parameters=None, resources=None, response_elements=None, source_ip_address=None, user_agent=None, user_identity=None)

(experimental) EventBridge event pattern for Key AWS API Call via CloudTrail.

Parameters:

aws_region (Optional[Sequence[str]]) – (experimental) awsRegion property. Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_id (Optional[Sequence[str]]) – (experimental) eventID property. Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
event_name (Optional[Sequence[str]]) – (experimental) eventName property. Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_source (Optional[Sequence[str]]) – (experimental) eventSource property. Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_time (Optional[Sequence[str]]) – (experimental) eventTime property. Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_type (Optional[Sequence[str]]) – (experimental) eventType property. Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_version (Optional[Sequence[str]]) – (experimental) eventVersion property. Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
read_only (Optional[Sequence[str]]) – (experimental) readOnly property. Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_id (Optional[Sequence[str]]) – (experimental) requestID property. Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_parameters (Union[RequestParameters, Dict[str, Any], None]) – (experimental) requestParameters property. Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
resources (Optional[Sequence[Union[AwsapiCallViaCloudTrailItem, Dict[str, Any]]]]) – (experimental) resources property. Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
response_elements (Optional[Sequence[str]]) – (experimental) responseElements property. Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
source_ip_address (Optional[Sequence[str]]) – (experimental) sourceIPAddress property. Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_agent (Optional[Sequence[str]]) – (experimental) userAgent property. Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_identity (Union[UserIdentity, Dict[str, Any], None]) – (experimental) userIdentity property. Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

Return type:

EventPattern

k_ms_imported_key_material_expiration_pattern(*, event_metadata=None, key_id=None)

(experimental) EventBridge event pattern for Key KMS Imported Key Material Expiration.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

Return type:

EventPattern

k_mscmk_deletion_pattern(*, event_metadata=None, key_id=None)

(experimental) EventBridge event pattern for Key KMS CMK Deletion.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

Return type:

EventPattern

k_mscmk_rotation_pattern(*, event_metadata=None, key_id=None)

(experimental) EventBridge event pattern for Key KMS CMK Rotation.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

Return type:

EventPattern

Static Methods

classmethod from_key(key_ref)

(experimental) Create KeyEvents from a Key reference.

Parameters:: key_ref (IKeyRef)
Stability:: experimental
Return type:: KeyEvents

AWSAPICallViaCloudTrail

class KeyEvents.AWSAPICallViaCloudTrail

Bases: object

(experimental) aws.kms@AWSAPICallViaCloudTrail event types for Key.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

a_wSAPICall_via_cloud_trail = kms_events.KeyEvents.AWSAPICallViaCloudTrail()

Stability:: experimental

AWSAPICallViaCloudTrailProps

class KeyEvents.AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps(*, aws_region=None, event_id=None, event_metadata=None, event_name=None, event_source=None, event_time=None, event_type=None, event_version=None, read_only=None, request_id=None, request_parameters=None, resources=None, response_elements=None, source_ip_address=None, user_agent=None, user_identity=None)

Bases: object

(experimental) Props type for Key aws.kms@AWSAPICallViaCloudTrail event.

Parameters:

aws_region (Optional[Sequence[str]]) – (experimental) awsRegion property. Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_id (Optional[Sequence[str]]) – (experimental) eventID property. Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
event_name (Optional[Sequence[str]]) – (experimental) eventName property. Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_source (Optional[Sequence[str]]) – (experimental) eventSource property. Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_time (Optional[Sequence[str]]) – (experimental) eventTime property. Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_type (Optional[Sequence[str]]) – (experimental) eventType property. Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
event_version (Optional[Sequence[str]]) – (experimental) eventVersion property. Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
read_only (Optional[Sequence[str]]) – (experimental) readOnly property. Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_id (Optional[Sequence[str]]) – (experimental) requestID property. Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
request_parameters (Union[RequestParameters, Dict[str, Any], None]) – (experimental) requestParameters property. Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
resources (Optional[Sequence[Union[AwsapiCallViaCloudTrailItem, Dict[str, Any]]]]) – (experimental) resources property. Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
response_elements (Optional[Sequence[str]]) – (experimental) responseElements property. Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
source_ip_address (Optional[Sequence[str]]) – (experimental) sourceIPAddress property. Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_agent (Optional[Sequence[str]]) – (experimental) userAgent property. Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_identity (Union[UserIdentity, Dict[str, Any], None]) – (experimental) userIdentity property. Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

a_wSAPICall_via_cloud_trail_props = kms_events.KeyEvents.AWSAPICallViaCloudTrail.AWSAPICallViaCloudTrailProps(
    aws_region=["awsRegion"],
    event_id=["eventId"],
    event_metadata=AWSEventMetadataProps(
        region=["region"],
        resources=["resources"],
        version=["version"]
    ),
    event_name=["eventName"],
    event_source=["eventSource"],
    event_time=["eventTime"],
    event_type=["eventType"],
    event_version=["eventVersion"],
    read_only=["readOnly"],
    request_id=["requestId"],
    request_parameters=kms_events.KeyEvents.AWSAPICallViaCloudTrail.RequestParameters(
        encryption_context=kms_events.KeyEvents.AWSAPICallViaCloudTrail.EncryptionContext(
            aws_s3_arn=["awsS3Arn"]
        ),
        key_id=["keyId"],
        key_spec=["keySpec"]
    ),
    resources=[kms_events.KeyEvents.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(
        account_id=["accountId"],
        arn=["arn"],
        type=["type"]
    )],
    response_elements=["responseElements"],
    source_ip_address=["sourceIpAddress"],
    user_agent=["userAgent"],
    user_identity=kms_events.KeyEvents.AWSAPICallViaCloudTrail.UserIdentity(
        access_key_id=["accessKeyId"],
        account_id=["accountId"],
        arn=["arn"],
        invoked_by=["invokedBy"],
        principal_id=["principalId"],
        session_context=kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionContext(
            attributes=kms_events.KeyEvents.AWSAPICallViaCloudTrail.Attributes(
                creation_date=["creationDate"],
                mfa_authenticated=["mfaAuthenticated"]
            ),
            session_issuer=kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer(
                account_id=["accountId"],
                arn=["arn"],
                principal_id=["principalId"],
                type=["type"],
                user_name=["userName"]
            )
        ),
        type=["type"]
    )
)

Attributes

aws_region

(experimental) awsRegion property.

Specify an array of string values to match this event if the actual value of awsRegion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_id

(experimental) eventID property.

Specify an array of string values to match this event if the actual value of eventID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_metadata

(experimental) EventBridge event metadata.

Default:

Stability:: experimental

event_name

(experimental) eventName property.

Specify an array of string values to match this event if the actual value of eventName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_source

(experimental) eventSource property.

Specify an array of string values to match this event if the actual value of eventSource is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_time

(experimental) eventTime property.

Specify an array of string values to match this event if the actual value of eventTime is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_type

(experimental) eventType property.

Specify an array of string values to match this event if the actual value of eventType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

event_version

(experimental) eventVersion property.

Specify an array of string values to match this event if the actual value of eventVersion is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

read_only

(experimental) readOnly property.

Specify an array of string values to match this event if the actual value of readOnly is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

request_id

(experimental) requestID property.

Specify an array of string values to match this event if the actual value of requestID is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

request_parameters

(experimental) requestParameters property.

Specify an array of string values to match this event if the actual value of requestParameters is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

resources

(experimental) resources property.

Specify an array of string values to match this event if the actual value of resources is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

response_elements

(experimental) responseElements property.

Specify an array of string values to match this event if the actual value of responseElements is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

source_ip_address

(experimental) sourceIPAddress property.

Specify an array of string values to match this event if the actual value of sourceIPAddress is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_agent

(experimental) userAgent property.

Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_identity

(experimental) userIdentity property.

Specify an array of string values to match this event if the actual value of userIdentity is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

Attributes

class KeyEvents.AWSAPICallViaCloudTrail.Attributes(*, creation_date=None, mfa_authenticated=None)

Bases: object

(experimental) Type definition for Attributes.

Parameters:

creation_date (Optional[Sequence[str]]) – (experimental) creationDate property. Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
mfa_authenticated (Optional[Sequence[str]]) – (experimental) mfaAuthenticated property. Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

attributes = kms_events.KeyEvents.AWSAPICallViaCloudTrail.Attributes(
    creation_date=["creationDate"],
    mfa_authenticated=["mfaAuthenticated"]
)

Attributes

creation_date

(experimental) creationDate property.

Specify an array of string values to match this event if the actual value of creationDate is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

mfa_authenticated

(experimental) mfaAuthenticated property.

Specify an array of string values to match this event if the actual value of mfaAuthenticated is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

AwsapiCallViaCloudTrailItem

class KeyEvents.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(*, account_id=None, arn=None, type=None)

Bases: object

(experimental) Type definition for AWSAPICallViaCloudTrailItem.

Parameters:

account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) ARN property. Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

awsapi_call_via_cloud_trail_item = kms_events.KeyEvents.AWSAPICallViaCloudTrail.AwsapiCallViaCloudTrailItem(
    account_id=["accountId"],
    arn=["arn"],
    type=["type"]
)

Attributes

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) ARN property.

Specify an array of string values to match this event if the actual value of ARN is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

EncryptionContext

class KeyEvents.AWSAPICallViaCloudTrail.EncryptionContext(*, aws_s3_arn=None)

Bases: object

(experimental) Type definition for EncryptionContext.

Parameters:: aws_s3_arn (Optional[Sequence[str]]) – (experimental) aws:s3:arn property. Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

encryption_context = kms_events.KeyEvents.AWSAPICallViaCloudTrail.EncryptionContext(
    aws_s3_arn=["awsS3Arn"]
)

Attributes

aws_s3_arn

arn property.

Specify an array of string values to match this event if the actual value of aws:s3:arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

Type:

(experimental) aws

Type:

s3

RequestParameters

class KeyEvents.AWSAPICallViaCloudTrail.RequestParameters(*, encryption_context=None, key_id=None, key_spec=None)

Bases: object

(experimental) Type definition for RequestParameters.

Parameters:

encryption_context (Union[EncryptionContext, Dict[str, Any], None]) – (experimental) encryptionContext property. Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
key_id (Optional[Sequence[str]]) – (experimental) keyId property. Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference
key_spec (Optional[Sequence[str]]) – (experimental) keySpec property. Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

request_parameters = kms_events.KeyEvents.AWSAPICallViaCloudTrail.RequestParameters(
    encryption_context=kms_events.KeyEvents.AWSAPICallViaCloudTrail.EncryptionContext(
        aws_s3_arn=["awsS3Arn"]
    ),
    key_id=["keyId"],
    key_spec=["keySpec"]
)

Attributes

encryption_context

(experimental) encryptionContext property.

Specify an array of string values to match this event if the actual value of encryptionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

key_id

(experimental) keyId property.

Specify an array of string values to match this event if the actual value of keyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Filter with the Key reference

Stability:

experimental

key_spec

(experimental) keySpec property.

Specify an array of string values to match this event if the actual value of keySpec is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

SessionContext

class KeyEvents.AWSAPICallViaCloudTrail.SessionContext(*, attributes=None, session_issuer=None)

Bases: object

(experimental) Type definition for SessionContext.

Parameters:

attributes (Union[Attributes, Dict[str, Any], None]) – (experimental) attributes property. Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
session_issuer (Union[SessionIssuer, Dict[str, Any], None]) – (experimental) sessionIssuer property. Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

session_context = kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionContext(
    attributes=kms_events.KeyEvents.AWSAPICallViaCloudTrail.Attributes(
        creation_date=["creationDate"],
        mfa_authenticated=["mfaAuthenticated"]
    ),
    session_issuer=kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer(
        account_id=["accountId"],
        arn=["arn"],
        principal_id=["principalId"],
        type=["type"],
        user_name=["userName"]
    )
)

Attributes

attributes

(experimental) attributes property.

Specify an array of string values to match this event if the actual value of attributes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

session_issuer

(experimental) sessionIssuer property.

Specify an array of string values to match this event if the actual value of sessionIssuer is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

SessionIssuer

class KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer(*, account_id=None, arn=None, principal_id=None, type=None, user_name=None)

Bases: object

(experimental) Type definition for SessionIssuer.

Parameters:

account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) arn property. Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
principal_id (Optional[Sequence[str]]) – (experimental) principalId property. Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
user_name (Optional[Sequence[str]]) – (experimental) userName property. Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

session_issuer = kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer(
    account_id=["accountId"],
    arn=["arn"],
    principal_id=["principalId"],
    type=["type"],
    user_name=["userName"]
)

Attributes

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) arn property.

Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

principal_id

(experimental) principalId property.

Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

user_name

(experimental) userName property.

Specify an array of string values to match this event if the actual value of userName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

UserIdentity

class KeyEvents.AWSAPICallViaCloudTrail.UserIdentity(*, access_key_id=None, account_id=None, arn=None, invoked_by=None, principal_id=None, session_context=None, type=None)

Bases: object

(experimental) Type definition for UserIdentity.

Parameters:

access_key_id (Optional[Sequence[str]]) – (experimental) accessKeyId property. Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
account_id (Optional[Sequence[str]]) – (experimental) accountId property. Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
arn (Optional[Sequence[str]]) – (experimental) arn property. Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
invoked_by (Optional[Sequence[str]]) – (experimental) invokedBy property. Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
principal_id (Optional[Sequence[str]]) – (experimental) principalId property. Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
session_context (Union[SessionContext, Dict[str, Any], None]) – (experimental) sessionContext property. Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field
type (Optional[Sequence[str]]) – (experimental) type property. Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Do not filter on this field

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

user_identity = kms_events.KeyEvents.AWSAPICallViaCloudTrail.UserIdentity(
    access_key_id=["accessKeyId"],
    account_id=["accountId"],
    arn=["arn"],
    invoked_by=["invokedBy"],
    principal_id=["principalId"],
    session_context=kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionContext(
        attributes=kms_events.KeyEvents.AWSAPICallViaCloudTrail.Attributes(
            creation_date=["creationDate"],
            mfa_authenticated=["mfaAuthenticated"]
        ),
        session_issuer=kms_events.KeyEvents.AWSAPICallViaCloudTrail.SessionIssuer(
            account_id=["accountId"],
            arn=["arn"],
            principal_id=["principalId"],
            type=["type"],
            user_name=["userName"]
        )
    ),
    type=["type"]
)

Attributes

access_key_id

(experimental) accessKeyId property.

Specify an array of string values to match this event if the actual value of accessKeyId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

account_id

(experimental) accountId property.

Specify an array of string values to match this event if the actual value of accountId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

arn

(experimental) arn property.

Specify an array of string values to match this event if the actual value of arn is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

invoked_by

(experimental) invokedBy property.

Specify an array of string values to match this event if the actual value of invokedBy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

principal_id

(experimental) principalId property.

Specify an array of string values to match this event if the actual value of principalId is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

session_context

(experimental) sessionContext property.

Specify an array of string values to match this event if the actual value of sessionContext is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

type

(experimental) type property.

Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Do not filter on this field

Stability:

experimental

KMSCMKDeletion

class KeyEvents.KMSCMKDeletion

Bases: object

(experimental) aws.kms@KMSCMKDeletion event types for Key.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSCMKDeletion = kms_events.KeyEvents.KMSCMKDeletion()

Stability:: experimental

KMSCMKDeletionProps

class KeyEvents.KMSCMKDeletion.KMSCMKDeletionProps(*, event_metadata=None, key_id=None)

Bases: object

(experimental) Props type for Key aws.kms@KMSCMKDeletion event.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSCMKDeletion_props = kms_events.KeyEvents.KMSCMKDeletion.KMSCMKDeletionProps(
    event_metadata=AWSEventMetadataProps(
        region=["region"],
        resources=["resources"],
        version=["version"]
    ),
    key_id=["keyId"]
)

Attributes

event_metadata

(experimental) EventBridge event metadata.

Default:

Stability:: experimental

key_id

(experimental) key-id property.

Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Filter with the Key reference

Stability:

experimental

KMSCMKRotation

class KeyEvents.KMSCMKRotation

Bases: object

(experimental) aws.kms@KMSCMKRotation event types for Key.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSCMKRotation = kms_events.KeyEvents.KMSCMKRotation()

Stability:: experimental

KMSCMKRotationProps

class KeyEvents.KMSCMKRotation.KMSCMKRotationProps(*, event_metadata=None, key_id=None)

Bases: object

(experimental) Props type for Key aws.kms@KMSCMKRotation event.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSCMKRotation_props = kms_events.KeyEvents.KMSCMKRotation.KMSCMKRotationProps(
    event_metadata=AWSEventMetadataProps(
        region=["region"],
        resources=["resources"],
        version=["version"]
    ),
    key_id=["keyId"]
)

Attributes

event_metadata

(experimental) EventBridge event metadata.

Default:

Stability:: experimental

key_id

(experimental) key-id property.

Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Filter with the Key reference

Stability:

experimental

KMSImportedKeyMaterialExpiration

class KeyEvents.KMSImportedKeyMaterialExpiration

Bases: object

(experimental) aws.kms@KMSImportedKeyMaterialExpiration event types for Key.

Stability:: experimental
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSImported_key_material_expiration = kms_events.KeyEvents.KMSImportedKeyMaterialExpiration()

Stability:: experimental

KMSImportedKeyMaterialExpirationProps

class KeyEvents.KMSImportedKeyMaterialExpiration.KMSImportedKeyMaterialExpirationProps(*, event_metadata=None, key_id=None)

Bases: object

(experimental) Props type for Key aws.kms@KMSImportedKeyMaterialExpiration event.

Parameters:

event_metadata (Union[AWSEventMetadataProps, Dict[str, Any], None]) – (experimental) EventBridge event metadata. Default: - -
key_id (Optional[Sequence[str]]) – (experimental) key-id property. Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options. Default: - Filter with the Key reference

Stability:

experimental

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_kms import events as kms_events

k_mSImported_key_material_expiration_props = kms_events.KeyEvents.KMSImportedKeyMaterialExpiration.KMSImportedKeyMaterialExpirationProps(
    event_metadata=AWSEventMetadataProps(
        region=["region"],
        resources=["resources"],
        version=["version"]
    ),
    key_id=["keyId"]
)

Attributes

event_metadata

(experimental) EventBridge event metadata.

Default:

Stability:: experimental

key_id

(experimental) key-id property.

Specify an array of string values to match this event if the actual value of key-id is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

Default:

Filter with the Key reference

Stability:

experimental