cloudtrail

type CloudTrail struct {
	Trails []Trail
}

type DataResource struct {
	Metadata defsecTypes.Metadata
	Type     defsecTypes.StringValue   //  You can specify only the following value: "AWS::S3::Object", "AWS::Lambda::Function" and "AWS::DynamoDB::Table".
	Values   []defsecTypes.StringValue // List of ARNs/partial ARNs - e.g. arn:aws:s3:::<bucket name>/ for all objects in a bucket, arn:aws:s3:::<bucket name>/key for specific objects
}

type EventSelector struct {
	Metadata      defsecTypes.Metadata
	DataResources []DataResource
	ReadWriteType defsecTypes.StringValue // ReadOnly, WriteOnly, All. Default value is All for TF.
}

type Trail struct {
	Metadata                  defsecTypes.Metadata
	Name                      defsecTypes.StringValue
	EnableLogFileValidation   defsecTypes.BoolValue
	IsMultiRegion             defsecTypes.BoolValue
	KMSKeyID                  defsecTypes.StringValue
	CloudWatchLogsLogGroupArn defsecTypes.StringValue
	IsLogging                 defsecTypes.BoolValue
	BucketName                defsecTypes.StringValue
	EventSelectors            []EventSelector
}