MDAA TS Docs
    Preparing search index...

    Interface CloudTrailAlertRuleProps

    Configuration for a single CloudTrail alerting rule.

    interface CloudTrailAlertRuleProps {
        description?: string;
        errorCodes?: string[];
        eventNames?: string[];
        targetLambdaArn?: string;
    }
    Index

    Properties

    description? errorCodes? eventNames? targetLambdaArn?

    Properties

    description?: string

    Human-readable description of what the rule detects. Surfaced in the EventBridge console and in the notification message.

    errorCodes?: string[]

    CloudTrail errorCode values to match, any one of which triggers the rule.

    These are CloudTrail codes, NOT SDK exception names: an IAM denial returns AccessDeniedException to the caller but CloudTrail typically records plain AccessDenied. Passed through verbatim.

    eventNames?: string[]

    CloudTrail eventName values (API names) to match (e.g. UpdateAgentRuntime). Matching any one of them triggers the rule.

    targetLambdaArn?: string

    ARN of an existing, customer-supplied Lambda function to invoke in addition to the SNS notification, for automated remediation. This helper does not create the function: remediation is destructive and site-specific.

    Settings

    Member Visibility

    On This Page

    Properties