TrailProps
Properties for defining a Trail.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-actiontrail-trail
Initializer
import ros_cdk_actiontrail
ros_cdk_actiontrail.TrailProps(
name: typing.Union[str, IResolvable],
event_rw: typing.Union[str, IResolvable] = None,
oss_bucket_name: typing.Union[str, IResolvable] = None,
oss_key_prefix: typing.Union[str, IResolvable] = None,
role_name: typing.Union[str, IResolvable] = None,
sls_project_arn: typing.Union[str, IResolvable] = None,
sls_write_role_arn: typing.Union[str, IResolvable] = None
)
Properties
| Name | Type | Description |
|---|---|---|
name | typing.Union[str, ros_cdk_core.IResolvable] | Property name: The name of the trail to be created. |
event_rw | typing.Union[str, ros_cdk_core.IResolvable] | Property eventRw: Indicates whether the event is a read or a write event. |
oss_bucket_name | typing.Union[str, ros_cdk_core.IResolvable] | Property ossBucketName: The OSS bucket for the trail delivery. |
oss_key_prefix | typing.Union[str, ros_cdk_core.IResolvable] | Property ossKeyPrefix: The prefix for the filenames in the OSS bucket for the trail delivery. |
role_name | typing.Union[str, ros_cdk_core.IResolvable] | Property roleName: The name of the associated role for Operation Audit, with a default value of serviceroleforactiontrail. |
sls_project_arn | typing.Union[str, ros_cdk_core.IResolvable] | Property slsProjectArn: The ARN of the Log Service project for the trail delivery. |
sls_write_role_arn | typing.Union[str, ros_cdk_core.IResolvable] | Property slsWriteRoleArn: The ARN of the role assumed by Operation Audit when delivering operation events to the Log Service project. |
nameRequired
name: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property name: The name of the trail to be created.
Length should be between 6 and 36 characters, must start with a lowercase letter, and can include lowercase letters, numbers, hyphens (-), and underscores (_).
The trail name must be unique within the same account.
event_rwOptional
event_rw: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property eventRw: Indicates whether the event is a read or a write event.
Valid values: Read, Write, and All. Default value: Write.
oss_bucket_nameOptional
oss_bucket_name: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property ossBucketName: The OSS bucket for the trail delivery.
Length should be between 3 and 63 characters, must start with a lowercase letter or number, and can include lowercase letters, numbers, and hyphens (-).
At least one of OssBucketName and SlsProjectArn must be specified.
oss_key_prefixOptional
oss_key_prefix: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property ossKeyPrefix: The prefix for the filenames in the OSS bucket for the trail delivery.
Length should be between 6 and 32 characters, must start with a letter, and can include letters, numbers, hyphens (-), forward slashes (/), and underscores (_).
role_nameOptional
role_name: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property roleName: The name of the associated role for Operation Audit, with a default value of serviceroleforactiontrail.
sls_project_arnOptional
sls_project_arn: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property slsProjectArn: The ARN of the Log Service project for the trail delivery.
At least one of OssBucketName and SlsProjectArn must be specified.
sls_write_role_arnOptional
sls_write_role_arn: typing.Union[str, IResolvable]
- Type: typing.Union[str, ros_cdk_core.IResolvable]
Property slsWriteRoleArn: The ARN of the role assumed by Operation Audit when delivering operation events to the Log Service project.
- If this parameter is not specified, Operation Audit will create the necessary resources by creating a service-linked role.
- If this parameter is specified, when you need to deliver events to the current account, you need to grant the RAM role the permissions of the Operation Audit service-linked role. When you need to deliver events to another account, you need to bind the system permission policy for event delivery to the RAM role. For more information on cross-account delivery, see Deliver Events from Multiple Accounts to One Account.