ReadWriteType

class aws_cdk.aws_cloudtrail.ReadWriteType(value)

Bases: Enum

Types of events that CloudTrail can log.

ExampleMetadata:

infused

Example:

trail = cloudtrail.Trail(self, "CloudTrail",
    # ...
    management_events=cloudtrail.ReadWriteType.READ_ONLY
)

Attributes

ALL

All events.

NONE

No events.

READ_ONLY

Read-only events include API operations that read your resources, but don’t make changes.

For example, read-only events include the Amazon EC2 DescribeSecurityGroups and DescribeSubnets API operations.

WRITE_ONLY

Write-only events include API operations that modify (or might modify) your resources.

For example, the Amazon EC2 RunInstances and TerminateInstances API operations modify your instances.