Create, update, and manage event data stores with the console - AWS CloudTrail

Create, update, and manage event data stores with the console

You can use the CloudTrail console to create, update, delete, and restore event data stores.

You can update the following settings using the CloudTrail console:

  • You can change the pricing option from Seven-year retention pricing to One-year extendable retention pricing.

  • You can update the retention period for the event data store. The retention period determines how long event data is kept in the event data store.

  • You can convert a multi-Region event data store to a single-Region event data store, or convert a single-Region event data store to a multi-Region event data store.

  • The management account for an AWS Organizations organization can convert an account-level event data store to an organization event data store, or can convert an organization event data store to an account-level event data store. This setting is not available on event data stores that collect events outside of AWS.

  • You can enable or disable Lake query federation. Federating an event data store allows you to query your event data from Amazon Athena.

  • You can stop event ingestion and restart event ingestion on event data stores that collect management events, data events, or AWS Config configuration items.

  • You can enable or disable termination protection. Enabling termination protection protects an event data store from being accidentally deleted. Termination protection is enabled by default.

  • You can restore an event data store that is pending deletion.

  • You can add or remove tags. You can add up to 50 tag key pairs to help you identify, sort, and control access to your event data store.

  • You can add a KMS key to encrypt your event data store. You can’t remove a KMS key from an event data store.

Using the CloudTrail console to create or update a event data stores provides the following advantages:

  • If you're configuring an event data store to log data events, using the CloudTrail console allows you to view the available data event types. You can also choose the log selector template that you want to use. For each data event type, you can choose to log all data events, log all read events, log all write events, or create a custom log selector template to apply filters on the eventnName, resources.ARN, and readOnly fields. For more information, see Create an event data store for CloudTrail events with the console and Logging data events.

  • If your event data store is already logging data events, using the console allows you to easily add logging for additional data event types.

  • If you're configuring a event data store to log events outside of AWS, using the CloudTrail console lets you view information about available partners. For more information, see Create an event data store for events outside of AWS with the console.

Topics