AWS CloudTrail Data (cloudtrail-data)

Additions

Actions

• PutAuditEvents
  
  • Description:  Grants permission to ingest your application events into CloudTrail Lake
  • Access:  Write
  • Resources: 

    Name: channel

    Required: Yes

Resources

• channel
  
  • Arn:  arn:${Partition}:cloudtrail:${Region}:${Account}:channel/${ChannelId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by a tag's key and value in a request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters actions based on the presence of tag key-value pairs in the request
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys in a request
  • Type:  ArrayOfString