Module Smaws_Client_CloudTrail.LookupEvents

val request : Smaws_Lib.Context.t -> lookup_events_request -> (lookup_events_response, [> Smaws_Lib.Protocols.AwsJson.error | `InvalidEventCategoryException of invalid_event_category_exception | `InvalidLookupAttributesException of invalid_lookup_attributes_exception | `InvalidMaxResultsException of invalid_max_results_exception | `InvalidNextTokenException of invalid_next_token_exception | `InvalidTimeRangeException of invalid_time_range_exception | `OperationNotPermittedException of operation_not_permitted_exception | `UnsupportedOperationException of unsupported_operation_exception ]) Stdlib.result

Looks up management events or CloudTrail Insights events that are captured by CloudTrail. You can look up events that occurred in a Region within the last 90 days.

LookupEvents returns recent Insights events for trails that enable Insights. To view Insights events for an event data store, you can run queries on your Insights event data store, and you can also view the Lake dashboard for Insights.

Lookup supports the following attributes for management events:

  • Amazon Web Services access key
  • Event ID
  • Event name
  • Event source
  • Read only
  • Resource name
  • Resource type
  • User name

Lookup supports the following attributes for Insights events:

  • Event ID
  • Event name
  • Event source

All attributes are optional. The default number of results returned is 50, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results.

The rate of lookup requests is limited to two per second, per account, per Region. If this limit is exceeded, a throttling error occurs.