Network.AWS.CloudTrail.LookupEvents

Looks up API activity events captured by CloudTrail that create, update, or delete resources in your account. Events for a region can be looked up for the times in which you had CloudTrail turned on in that region during the last seven days. Lookup supports five different attributes: time range (defined by a start time and end time), user name, event name, resource type, and resource name. All attributes are optional. The maximum number of attributes that can be specified in any one lookup request are time range and one other attribute. The default number of results returned is 10, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results.

The rate of lookup requests is limited to one per second per account. If this limit is exceeded, a throttling error occurs.

Events that occurred during the selected time range will not be available for lookup if CloudTrail logging was not enabled when the events occurred.

Creating a Request

lookupEvents :: LookupEvents

Creates a value of LookupEvents with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• leStartTime
• leLookupAttributes
• leNextToken
• leEndTime
• leMaxResults

data LookupEvents

Contains a request for LookupEvents.

See: lookupEvents smart constructor.

Instances

Eq LookupEvents

Methods

(==) :: LookupEvents -> LookupEvents -> Bool

(/=) :: LookupEvents -> LookupEvents -> Bool

Data LookupEvents

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> LookupEvents -> c LookupEvents

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c LookupEvents

toConstr :: LookupEvents -> Constr

dataTypeOf :: LookupEvents -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c LookupEvents)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c LookupEvents)

gmapT :: (forall b. Data b => b -> b) -> LookupEvents -> LookupEvents

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> LookupEvents -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> LookupEvents -> r

gmapQ :: (forall d. Data d => d -> u) -> LookupEvents -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> LookupEvents -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> LookupEvents -> m LookupEvents

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> LookupEvents -> m LookupEvents

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> LookupEvents -> m LookupEvents

Read LookupEvents

Methods

readsPrec :: Int -> ReadS LookupEvents

readList :: ReadS [LookupEvents]

readPrec :: ReadPrec LookupEvents

readListPrec :: ReadPrec [LookupEvents]

Show LookupEvents

Methods

showsPrec :: Int -> LookupEvents -> ShowS

show :: LookupEvents -> String

showList :: [LookupEvents] -> ShowS

Generic LookupEvents

Associated Types

type Rep LookupEvents :: * -> *

Methods

from :: LookupEvents -> Rep LookupEvents x

to :: Rep LookupEvents x -> LookupEvents

ToJSON LookupEvents

Methods

toJSON :: LookupEvents -> Value

toEncoding :: LookupEvents -> Encoding

Hashable LookupEvents

Methods

hashWithSalt :: Int -> LookupEvents -> Int

hash :: LookupEvents -> Int

NFData LookupEvents

Methods

rnf :: LookupEvents -> ()

AWSRequest LookupEvents

Associated Types

type Rs LookupEvents :: *

Methods

request :: LookupEvents -> Request LookupEvents

response :: MonadResource m => Logger -> Service -> Proxy * LookupEvents -> ClientResponse -> m (Response LookupEvents)

ToPath LookupEvents

Methods

toPath :: LookupEvents -> ByteString

ToHeaders LookupEvents

Methods

toHeaders :: LookupEvents -> [Header]

ToQuery LookupEvents

Methods

toQuery :: LookupEvents -> QueryString

type Rep LookupEvents

type Rep LookupEvents = D1 (MetaData "LookupEvents" "Network.AWS.CloudTrail.LookupEvents" "amazonka-cloudtrail-1.4.2-L8N9GSOFFiw79qP2NF5uOY" False) (C1 (MetaCons "LookupEvents'" PrefixI True) ((:*:) ((:*:) (S1 (MetaSel (Just Symbol "_leStartTime") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe POSIX))) (S1 (MetaSel (Just Symbol "_leLookupAttributes") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [LookupAttribute])))) ((:*:) (S1 (MetaSel (Just Symbol "_leNextToken") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))) ((:*:) (S1 (MetaSel (Just Symbol "_leEndTime") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe POSIX))) (S1 (MetaSel (Just Symbol "_leMaxResults") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Nat)))))))

type Rs LookupEvents

type Rs LookupEvents = LookupEventsResponse

Request Lenses

leStartTime :: Lens' LookupEvents (Maybe UTCTime)

Specifies that only events that occur after or at the specified time are returned. If the specified start time is after the specified end time, an error is returned.

leLookupAttributes :: Lens' LookupEvents [LookupAttribute]

Contains a list of lookup attributes. Currently the list can contain only one item.

leNextToken :: Lens' LookupEvents (Maybe Text)

The token to use to get the next page of results after a previous API call. This token must be passed in with the same parameters that were specified in the the original call. For example, if the original call specified an AttributeKey of 'Username' with a value of 'root', the call with NextToken should include those same parameters.

leEndTime :: Lens' LookupEvents (Maybe UTCTime)

Specifies that only events that occur before or at the specified time are returned. If the specified end time is before the specified start time, an error is returned.

leMaxResults :: Lens' LookupEvents (Maybe Natural)

The number of events to return. Possible values are 1 through 50. The default is 10.

Destructuring the Response

lookupEventsResponse

Arguments

:: Int

lersResponseStatus

-> LookupEventsResponse

Creates a value of LookupEventsResponse with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• lersNextToken
• lersEvents
• lersResponseStatus

data LookupEventsResponse

Contains a response to a LookupEvents action.

See: lookupEventsResponse smart constructor.

Instances

Eq LookupEventsResponse

Methods

(==) :: LookupEventsResponse -> LookupEventsResponse -> Bool

(/=) :: LookupEventsResponse -> LookupEventsResponse -> Bool

Data LookupEventsResponse

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> LookupEventsResponse -> c LookupEventsResponse

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c LookupEventsResponse

toConstr :: LookupEventsResponse -> Constr

dataTypeOf :: LookupEventsResponse -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c LookupEventsResponse)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c LookupEventsResponse)

gmapT :: (forall b. Data b => b -> b) -> LookupEventsResponse -> LookupEventsResponse

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> LookupEventsResponse -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> LookupEventsResponse -> r

gmapQ :: (forall d. Data d => d -> u) -> LookupEventsResponse -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> LookupEventsResponse -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> LookupEventsResponse -> m LookupEventsResponse

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> LookupEventsResponse -> m LookupEventsResponse

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> LookupEventsResponse -> m LookupEventsResponse

Read LookupEventsResponse

Methods

readsPrec :: Int -> ReadS LookupEventsResponse

readList :: ReadS [LookupEventsResponse]

readPrec :: ReadPrec LookupEventsResponse

readListPrec :: ReadPrec [LookupEventsResponse]

Show LookupEventsResponse

Methods

showsPrec :: Int -> LookupEventsResponse -> ShowS

show :: LookupEventsResponse -> String

showList :: [LookupEventsResponse] -> ShowS

Generic LookupEventsResponse

Associated Types

type Rep LookupEventsResponse :: * -> *

Methods

from :: LookupEventsResponse -> Rep LookupEventsResponse x

to :: Rep LookupEventsResponse x -> LookupEventsResponse

NFData LookupEventsResponse

Methods

rnf :: LookupEventsResponse -> ()

type Rep LookupEventsResponse

type Rep LookupEventsResponse = D1 (MetaData "LookupEventsResponse" "Network.AWS.CloudTrail.LookupEvents" "amazonka-cloudtrail-1.4.2-L8N9GSOFFiw79qP2NF5uOY" False) (C1 (MetaCons "LookupEventsResponse'" PrefixI True) ((:*:) (S1 (MetaSel (Just Symbol "_lersNextToken") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))) ((:*:) (S1 (MetaSel (Just Symbol "_lersEvents") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [Event]))) (S1 (MetaSel (Just Symbol "_lersResponseStatus") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Int)))))

Response Lenses

lersNextToken :: Lens' LookupEventsResponse (Maybe Text)

The token to use to get the next page of results after a previous API call. If the token does not appear, there are no more results to return. The token must be passed in with the same parameters as the previous call. For example, if the original call specified an AttributeKey of 'Username' with a value of 'root', the call with NextToken should include those same parameters.

lersEvents :: Lens' LookupEventsResponse [Event]

A list of events returned based on the lookup attributes specified and the CloudTrail event. The events list is sorted by time. The most recent event is listed first.

lersResponseStatus :: Lens' LookupEventsResponse Int

The response status code.