TrailProps
Properties for defining a Trail.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-actiontrail-trail
Initializer
import com.aliyun.ros.cdk.actiontrail.TrailProps;
TrailProps.builder()
.name(java.lang.String)
.name(IResolvable)
// .eventRw(java.lang.String)
// .eventRw(IResolvable)
// .ossBucketName(java.lang.String)
// .ossBucketName(IResolvable)
// .ossKeyPrefix(java.lang.String)
// .ossKeyPrefix(IResolvable)
// .roleName(java.lang.String)
// .roleName(IResolvable)
// .slsProjectArn(java.lang.String)
// .slsProjectArn(IResolvable)
// .slsWriteRoleArn(java.lang.String)
// .slsWriteRoleArn(IResolvable)
.build();
Properties
| Name | Type | Description |
|---|---|---|
name | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property name: The name of the trail to be created. |
eventRw | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property eventRw: Indicates whether the event is a read or a write event. |
ossBucketName | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property ossBucketName: The OSS bucket for the trail delivery. |
ossKeyPrefix | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property ossKeyPrefix: The prefix for the filenames in the OSS bucket for the trail delivery. |
roleName | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property roleName: The name of the associated role for Operation Audit, with a default value of serviceroleforactiontrail. |
slsProjectArn | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property slsProjectArn: The ARN of the Log Service project for the trail delivery. |
slsWriteRoleArn | java.lang.String OR com.aliyun.ros.cdk.core.IResolvable | Property slsWriteRoleArn: The ARN of the role assumed by Operation Audit when delivering operation events to the Log Service project. |
nameRequired
public java.lang.Object getName();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property name: The name of the trail to be created.
Length should be between 6 and 36 characters, must start with a lowercase letter, and can include lowercase letters, numbers, hyphens (-), and underscores (_).
The trail name must be unique within the same account.
eventRwOptional
public java.lang.Object getEventRw();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property eventRw: Indicates whether the event is a read or a write event.
Valid values: Read, Write, and All. Default value: Write.
ossBucketNameOptional
public java.lang.Object getOssBucketName();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property ossBucketName: The OSS bucket for the trail delivery.
Length should be between 3 and 63 characters, must start with a lowercase letter or number, and can include lowercase letters, numbers, and hyphens (-).
At least one of OssBucketName and SlsProjectArn must be specified.
ossKeyPrefixOptional
public java.lang.Object getOssKeyPrefix();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property ossKeyPrefix: The prefix for the filenames in the OSS bucket for the trail delivery.
Length should be between 6 and 32 characters, must start with a letter, and can include letters, numbers, hyphens (-), forward slashes (/), and underscores (_).
roleNameOptional
public java.lang.Object getRoleName();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property roleName: The name of the associated role for Operation Audit, with a default value of serviceroleforactiontrail.
slsProjectArnOptional
public java.lang.Object getSlsProjectArn();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property slsProjectArn: The ARN of the Log Service project for the trail delivery.
At least one of OssBucketName and SlsProjectArn must be specified.
slsWriteRoleArnOptional
public java.lang.Object getSlsWriteRoleArn();
- Type: java.lang.String OR com.aliyun.ros.cdk.core.IResolvable
Property slsWriteRoleArn: The ARN of the role assumed by Operation Audit when delivering operation events to the Log Service project.
- If this parameter is not specified, Operation Audit will create the necessary resources by creating a service-linked role.
- If this parameter is specified, when you need to deliver events to the current account, you need to grant the RAM role the permissions of the Operation Audit service-linked role. When you need to deliver events to another account, you need to bind the system permission policy for event delivery to the RAM role. For more information on cross-account delivery, see Deliver Events from Multiple Accounts to One Account.