CloudDirectory

eventNameDescriptionSampleRule
anyCatch-all entry for CloudDirectory rules that match the service but not a specific eventName.NN
AddFacetToObjectAdds a new Facet to an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ApplySchemaCopies the input published schema, at the specified version, into the Directory with the same name and version as that of the published schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
AttachObjectAttaches an existing object to another object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
AttachPolicyAttaches a policy object to a regular object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
AttachToIndexAttaches the specified object to the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
AttachTypedLinkAttaches a typed link to a specified source and target object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
BatchReadPerforms all the read operations in a batch. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
BatchWritePerforms all the write operations in a batch. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateDirectoryCreates a Directory by copying the published schema into the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateFacetCreates a new Facet in a schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateIndexCreates an index object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateObjectCreates an object in a Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateSchemaCreates a new schema in a development state. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
CreateTypedLinkFacetCreates a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DeleteDirectoryDeletes a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DeleteFacetDeletes a given Facet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DeleteObjectDeletes an object and its associated attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DeleteSchemaDeletes a given schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DeleteTypedLinkFacetDeletes a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DetachFromIndexDetaches the specified object from the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DetachObjectDetaches a given object from the parent object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DetachPolicyDetaches a policy from an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DetachTypedLinkDetaches a typed link from a specified source and target object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
DisableDirectoryDisables the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
EnableDirectoryEnables the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetAppliedSchemaVersionReturns current applied schema version ARN, including the minor version in use. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetDirectoryRetrieves metadata about a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetFacetGets details of the Facet, such as facet name, attributes, Rules, or ObjectType. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetLinkAttributesRetrieves attributes that are associated with a typed link. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetObjectAttributesRetrieves attributes within a facet that are associated with an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetObjectInformationRetrieves metadata about an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetSchemaAsJsonRetrieves a JSON representation of the schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
GetTypedLinkFacetInformationReturns the identity attribute order for a specific TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListAppliedSchemaArnsLists schema major versions applied to a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListAttachedIndicesLists indices attached to the specified object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListDevelopmentSchemaArnsRetrieves each Amazon Resource Name (ARN) of schemas in the development state. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.NN
ListDirectoriesLists directories created within an account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.NN
ListFacetAttributesRetrieves attributes attached to the facet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListFacetNamesRetrieves the names of facets that exist in a schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListIncomingTypedLinksReturns a paginated list of all the incoming TypedLinkSpecifier information for an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListIndexLists objects attached to the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListManagedSchemaArnsLists the major version families of each managed schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListObjectAttributesLists all attributes that are associated with an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListObjectChildrenReturns a paginated list of child objects that are associated with a given object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListObjectParentPathsRetrieves all available parent paths for any object type such as node, leaf node, policy node, and index node objects. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListObjectParentsLists parent objects that are associated with a given object in pagination fashion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListObjectPoliciesReturns policies attached to an object in pagination fashion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListOutgoingTypedLinksReturns a paginated list of all the outgoing TypedLinkSpecifier information for an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListPolicyAttachmentsReturns all of the ObjectIdentifiers to which a given policy is attached. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListPublishedSchemaArnsLists the major version families of each published schema. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.NN
ListTagsForResourceReturns tags for a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListTypedLinkFacetAttributesReturns a paginated list of all attribute definitions for a particular TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
ListTypedLinkFacetNamesReturns a paginated list of TypedLink facet names for a particular schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
LookupPolicyLists all policies from the root of the Directory to the object specified. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
PublishSchemaPublishes a development schema with a major version and a recommended minor version. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
PutSchemaFromJsonAllows a schema to be updated using JSON upload. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
RemoveFacetFromObjectRemoves the specified facet from the specified object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
TagResourceAn API operation for adding tags to a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UntagResourceAn API operation for removing tags from a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpdateFacetDoes the following: Adds new Attributes, Rules, or ObjectTypes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpdateLinkAttributesUpdates a given typed link’s attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpdateObjectAttributesUpdates a given object's attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpdateSchemaUpdates the schema name with a new name. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpdateTypedLinkFacetUpdates a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpgradeAppliedSchemaUpgrades a single directory in-place using the PublishedSchemaArn with schema updates found in MinorVersion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN
UpgradePublishedSchemaUpgrades a published schema under a new minor version revision using the current contents of DevelopmentSchemaArn. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.NN

any: CloudDirectory (catch-all)

#
Service
clouddirectory

Description

Catch-all entry for CloudDirectory rules that match the service but not a specific eventName.

AddFacetToObject

#
Service
clouddirectory

Description

Adds a new Facet to an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ApplySchema

#
Service
clouddirectory

Description

Copies the input published schema, at the specified version, into the Directory with the same name and version as that of the published schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AttachObject

#
Service
clouddirectory

Description

Attaches an existing object to another object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AttachPolicy

#
Service
clouddirectory

Description

Attaches a policy object to a regular object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AttachToIndex

#
Service
clouddirectory

Description

Attaches the specified object to the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AttachTypedLink

#
Service
clouddirectory

BatchRead

#
Service
clouddirectory

Description

Performs all the read operations in a batch. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

BatchWrite

#
Service
clouddirectory

Description

Performs all the write operations in a batch. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateDirectory

#
Service
clouddirectory

Description

Creates a Directory by copying the published schema into the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateFacet

#
Service
clouddirectory

Description

Creates a new Facet in a schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateIndex

#
Service
clouddirectory

Description

Creates an index object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateObject

#
Service
clouddirectory

Description

Creates an object in a Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateSchema

#
Service
clouddirectory

Description

Creates a new schema in a development state. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateTypedLinkFacet

#
Service
clouddirectory

Description

Creates a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteDirectory

#
Service
clouddirectory

Description

Deletes a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteFacet

#
Service
clouddirectory

Description

Deletes a given Facet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteObject

#
Service
clouddirectory

Description

Deletes an object and its associated attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteSchema

#
Service
clouddirectory

Description

Deletes a given schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteTypedLinkFacet

#
Service
clouddirectory

Description

Deletes a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DetachFromIndex

#
Service
clouddirectory

Description

Detaches the specified object from the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DetachObject

#
Service
clouddirectory

Description

Detaches a given object from the parent object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DetachPolicy

#
Service
clouddirectory

Description

Detaches a policy from an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DetachTypedLink

#
Service
clouddirectory

DisableDirectory

#
Service
clouddirectory

Description

Disables the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableDirectory

#
Service
clouddirectory

Description

Enables the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetAppliedSchemaVersion

#
Service
clouddirectory

Description

Returns current applied schema version ARN, including the minor version in use. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetDirectory

#
Service
clouddirectory

Description

Retrieves metadata about a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetFacet

#
Service
clouddirectory

Description

Gets details of the Facet, such as facet name, attributes, Rules, or ObjectType. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetLinkAttributes

#
Service
clouddirectory

Description

Retrieves attributes that are associated with a typed link. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetObjectAttributes

#
Service
clouddirectory

Description

Retrieves attributes within a facet that are associated with an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetObjectInformation

#
Service
clouddirectory

Description

Retrieves metadata about an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetSchemaAsJson

#
Service
clouddirectory

Description

Retrieves a JSON representation of the schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetTypedLinkFacetInformation

#
Service
clouddirectory

Description

Returns the identity attribute order for a specific TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListAppliedSchemaArns

#
Service
clouddirectory

Description

Lists schema major versions applied to a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListAttachedIndices

#
Service
clouddirectory

Description

Lists indices attached to the specified object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListDevelopmentSchemaArns

#
Service
clouddirectory

Description

Retrieves each Amazon Resource Name (ARN) of schemas in the development state. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

This is a projected export row, not a complete CloudTrail record: it shows only the envelope columns a SIEM export retained. The export never carried userIdentity, requestParameters, responseElements, sourceIPAddress, recipientAccountId, eventCategory, so their absence here says nothing about the real event. Account identifiers, ARNs and endpoint hostnames in eventID, requestID, resources, tlsDetails, userAgent are replaced with the placeholders AWS uses in its own documentation, so those values are structurally real but not the originals. errorMessage is withheld: it is free-form prose that names customer resources, which no substitution rule can find reliably. eventTime is withheld because the export renders it in the exporting system's local timezone rather than the UTC a CloudTrail record carries.

{
  "eventVersion": "1.11",
  "eventID": "5c115b24-3f73-4e27-86c0-28c81430cf7f",
  "eventSource": "clouddirectory.amazonaws.com",
  "eventName": "ListDevelopmentSchemaArns",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "ed203de5-87ca-4528-b661-e14b64abf2d3",
  "userAgent": "aws-sdk-go/1.54.20 (go1.21.13; linux; amd64)",
  "tlsDetails": {
    "tlsVersion": "TLSv1.2",
    "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256",
    "clientProvidedHostHeader": "203.0.113.5"
  }
}

ListDirectories

#
Service
clouddirectory

Description

Lists directories created within an account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

This is a projected export row, not a complete CloudTrail record: it shows only the envelope columns a SIEM export retained. The export never carried userIdentity, requestParameters, responseElements, sourceIPAddress, recipientAccountId, eventCategory, so their absence here says nothing about the real event. Account identifiers, ARNs and endpoint hostnames in eventID, requestID, resources, tlsDetails, userAgent are replaced with the placeholders AWS uses in its own documentation, so those values are structurally real but not the originals. errorMessage is withheld: it is free-form prose that names customer resources, which no substitution rule can find reliably. eventTime is withheld because the export renders it in the exporting system's local timezone rather than the UTC a CloudTrail record carries.

{
  "eventVersion": "1.11",
  "eventID": "8d417548-ffe9-408c-81eb-514a4061c0ec",
  "eventSource": "clouddirectory.amazonaws.com",
  "eventName": "ListDirectories",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "3ead710c-b1a8-45ce-81f5-3b1ed5c586fc",
  "userAgent": "aws-sdk-go/1.54.20 (go1.21.13; linux; amd64)",
  "tlsDetails": {
    "tlsVersion": "TLSv1.2",
    "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256",
    "clientProvidedHostHeader": "203.0.113.5"
  }
}

ListFacetAttributes

#
Service
clouddirectory

Description

Retrieves attributes attached to the facet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListFacetNames

#
Service
clouddirectory

Description

Retrieves the names of facets that exist in a schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListIncomingTypedLinks

#
Service
clouddirectory

ListIndex

#
Service
clouddirectory

Description

Lists objects attached to the specified index. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListManagedSchemaArns

#
Service
clouddirectory

Description

Lists the major version families of each managed schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListObjectAttributes

#
Service
clouddirectory

Description

Lists all attributes that are associated with an object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListObjectChildren

#
Service
clouddirectory

Description

Returns a paginated list of child objects that are associated with a given object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListObjectParentPaths

#
Service
clouddirectory

Description

Retrieves all available parent paths for any object type such as node, leaf node, policy node, and index node objects. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListObjectParents

#
Service
clouddirectory

Description

Lists parent objects that are associated with a given object in pagination fashion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListObjectPolicies

#
Service
clouddirectory

Description

Returns policies attached to an object in pagination fashion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListOutgoingTypedLinks

#
Service
clouddirectory

ListPolicyAttachments

#
Service
clouddirectory

Description

Returns all of the ObjectIdentifiers to which a given policy is attached. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListPublishedSchemaArns

#
Service
clouddirectory

Description

Lists the major version families of each published schema. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

This is a projected export row, not a complete CloudTrail record: it shows only the envelope columns a SIEM export retained. The export never carried userIdentity, requestParameters, responseElements, sourceIPAddress, recipientAccountId, eventCategory, so their absence here says nothing about the real event. Account identifiers, ARNs and endpoint hostnames in eventID, requestID, resources, tlsDetails, userAgent are replaced with the placeholders AWS uses in its own documentation, so those values are structurally real but not the originals. errorMessage is withheld: it is free-form prose that names customer resources, which no substitution rule can find reliably. eventTime is withheld because the export renders it in the exporting system's local timezone rather than the UTC a CloudTrail record carries.

{
  "eventVersion": "1.11",
  "eventID": "b5c3cd89-256f-41ae-b4eb-b6f73841853d",
  "eventSource": "clouddirectory.amazonaws.com",
  "eventName": "ListPublishedSchemaArns",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "e65e2be2-90fb-4a63-9cbf-14fa6b4a1766",
  "userAgent": "aws-sdk-go/1.54.20 (go1.21.13; linux; amd64)",
  "tlsDetails": {
    "tlsVersion": "TLSv1.2",
    "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256",
    "clientProvidedHostHeader": "203.0.113.5"
  }
}

ListTagsForResource

#
Service
clouddirectory

Description

Returns tags for a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListTypedLinkFacetAttributes

#
Service
clouddirectory

Description

Returns a paginated list of all attribute definitions for a particular TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListTypedLinkFacetNames

#
Service
clouddirectory

Description

Returns a paginated list of TypedLink facet names for a particular schema. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

LookupPolicy

#
Service
clouddirectory

Description

Lists all policies from the root of the Directory to the object specified. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

PublishSchema

#
Service
clouddirectory

Description

Publishes a development schema with a major version and a recommended minor version. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

PutSchemaFromJson

#
Service
clouddirectory

Description

Allows a schema to be updated using JSON upload. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RemoveFacetFromObject

#
Service
clouddirectory

Description

Removes the specified facet from the specified object. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

TagResource

#
Service
clouddirectory

Description

An API operation for adding tags to a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UntagResource

#
Service
clouddirectory

Description

An API operation for removing tags from a resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateFacet

#
Service
clouddirectory

Description

Does the following: Adds new Attributes, Rules, or ObjectTypes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLinkAttributes

#
Service
clouddirectory

Description

Updates a given typed link’s attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateObjectAttributes

#
Service
clouddirectory

Description

Updates a given object's attributes. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateSchema

#
Service
clouddirectory

Description

Updates the schema name with a new name. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateTypedLinkFacet

#
Service
clouddirectory

Description

Updates a TypedLinkFacet. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpgradeAppliedSchema

#
Service
clouddirectory

Description

Upgrades a single directory in-place using the PublishedSchemaArn with schema updates found in MinorVersion. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpgradePublishedSchema

#
Service
clouddirectory

Description

Upgrades a published schema under a new minor version revision using the current contents of DevelopmentSchemaArn. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.