AWS DataSync

eventName	Description	Sample	Rule
any	Catch-all entry for AWS DataSync rules that match the service but not a specific eventName.	N	N
CancelTaskExecution	Stops an DataSync task execution that's in progress. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateAgent	Activates an DataSync agent that you deploy in your storage environment. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationAzureBlob	Creates a transfer location for a Microsoft Azure Blob Storage container. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationEfs	Creates a transfer location for an Amazon EFS file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationFsxLustre	Creates a transfer location for an Amazon FSx for Lustre file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationFsxOntap	Creates a transfer location for an Amazon FSx for NetApp ONTAP file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationFsxOpenZfs	Creates a transfer location for an Amazon FSx for OpenZFS file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationFsxWindows	Creates a transfer location for an Amazon FSx for Windows File Server file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationHdfs	Creates a transfer location for a Hadoop Distributed File System (HDFS). Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationNfs	Creates a transfer location for a Network File System (NFS) file server. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationObjectStorage	Creates a transfer location for an object storage system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationS3	Creates a transfer location for an Amazon S3 bucket. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLocationSmb	Creates a transfer location for a Server Message Block (SMB) file server. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateTask	Configures a task, which defines where and how DataSync transfers your data.	Y	Y
DeleteAgent	Removes an DataSync agent resource from your Amazon Web Services account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteLocation	Deletes a transfer location resource from DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteTask	Deletes a transfer task resource from DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeAgent	Returns information about an DataSync agent, such as its name, service endpoint type, and status. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationAzureBlob	Provides details about how an DataSync transfer location for Microsoft Azure Blob Storage is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationEfs	Provides details about how an DataSync transfer location for an Amazon EFS file system is configured. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeLocationFsxLustre	Provides details about how an DataSync transfer location for an Amazon FSx for Lustre file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationFsxOntap	Provides details about how an DataSync transfer location for an Amazon FSx for NetApp ONTAP file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationFsxOpenZfs	Provides details about how an DataSync transfer location for an Amazon FSx for OpenZFS file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationFsxWindows	Provides details about how an DataSync transfer location for an Amazon FSx for Windows File Server file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationHdfs	Provides details about how an DataSync transfer location for a Hadoop Distributed File System (HDFS) is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationNfs	Provides details about how an DataSync transfer location for a Network File System (NFS) file server is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationObjectStorage	Provides details about how an DataSync transfer location for an object storage system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationS3	Provides details about how an DataSync transfer location for an S3 bucket is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLocationSmb	Provides details about how an DataSync transfer location for a Server Message Block (SMB) file server is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeTask	Provides information about a task, which defines where and how DataSync transfers your data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeTaskExecution	Provides information about an execution of your DataSync task. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListAgents	Returns a list of DataSync agents that belong to an Amazon Web Services account in the Amazon Web Services Region specified in the request. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
ListLocations	Returns a list of source and destination locations. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
ListTagsForResource	Returns all the tags associated with an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListTaskExecutions	Returns a list of executions for an DataSync transfer task. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
ListTasks	Returns a list of the DataSync tasks you created. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
StartTaskExecution	Starts an DataSync transfer task. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
TagResource	Applies a tag to an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UntagResource	Removes tags from an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateAgent	Updates the name of an DataSync agent. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationAzureBlob	Modifies the following configurations of the Microsoft Azure Blob Storage transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationEfs	Modifies the following configuration parameters of the Amazon EFS transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationFsxLustre	Modifies the following configuration parameters of the Amazon FSx for Lustre transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationFsxOntap	Modifies the following configuration parameters of the Amazon FSx for NetApp ONTAP transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationFsxOpenZfs	Modifies the following configuration parameters of the Amazon FSx for OpenZFS transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationFsxWindows	Modifies the following configuration parameters of the Amazon FSx for Windows File Server transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationHdfs	Modifies the following configuration parameters of the Hadoop Distributed File System (HDFS) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationNfs	Modifies the following configuration parameters of the Network File System (NFS) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationObjectStorage	Modifies the following configuration parameters of the object storage transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationS3	Modifies the following configuration parameters of the Amazon S3 transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateLocationSmb	Modifies the following configuration parameters of the Server Message Block (SMB) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateTask	Updates the configuration of a task, which defines where and how DataSync transfers your data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateTaskExecution	Updates the configuration of a running DataSync task execution. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N

any: AWS DataSync (catch-all)

Service: datasync

Description

Catch-all entry for AWS DataSync rules that match the service but not a specific eventName.

CancelTaskExecution

Service: datasync

Description

Stops an DataSync task execution that's in progress. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateAgent

Service: datasync

Description

Activates an DataSync agent that you deploy in your storage environment. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationAzureBlob

Service: datasync

Description

Creates a transfer location for a Microsoft Azure Blob Storage container. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationEfs

Service: datasync

Description

Creates a transfer location for an Amazon EFS file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationFsxLustre

Service: datasync

Description

Creates a transfer location for an Amazon FSx for Lustre file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationFsxOntap

Service: datasync

Description

Creates a transfer location for an Amazon FSx for NetApp ONTAP file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationFsxOpenZfs

Service: datasync

Description

Creates a transfer location for an Amazon FSx for OpenZFS file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationFsxWindows

Service: datasync

Description

Creates a transfer location for an Amazon FSx for Windows File Server file system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationHdfs

Service: datasync

Description

Creates a transfer location for a Hadoop Distributed File System (HDFS). Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationNfs

Service: datasync

Description

Creates a transfer location for a Network File System (NFS) file server. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationObjectStorage

Service: datasync

Description

Creates a transfer location for an object storage system. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationS3

Service: datasync

Description

Creates a transfer location for an Amazon S3 bucket. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLocationSmb

Service: datasync

Description

Creates a transfer location for a Server Message Block (SMB) file server. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateTask

Service: datasync

Description

Configures a task, which defines where and how DataSync transfers your data.

Example CloudTrail Event #

{
  "awsRegion": "us-west-2",
  "eventCategory": "Management",
  "eventID": "def4cd05-f845-4aec-bc96-07d6ce420d16",
  "eventName": "CreateTask",
  "eventSource": "datasync.amazonaws.com",
  "eventTime": "2023-03-14T22:05:36Z",
  "eventType": "AwsApiCall",
  "eventVersion": "1.08",
  "managementEvent": true,
  "readOnly": false,
  "recipientAccountId": "111111111111",
  "requestID": "de5f4282-aa2b-49b8-8d1b-c3bdb11e2fba",
  "requestParameters": {
    "cloudWatchLogGroupArn": "arn:aws:logs:us-west-2:111111111111:log-group:/aws/datasync",
    "destinationLocationArn": "arn:aws:datasync:us-west-1:111111111111:location/loc-0b94cf657c358ef06",
    "excludes": [],
    "includes": [],
    "options": {
      "logLevel": "BASIC",
      "verifyMode": "ONLY_FILES_TRANSFERRED"
    },
    "schedule": {
      "scheduleExpression": "cron(6 * * * ? *)"
    },
    "sourceLocationArn": "arn:aws:datasync:us-west-2:111111111111:location/loc-0921d426f7955d416",
    "tags": []
  },
  "responseElements": {
    "taskArn": "arn:aws:datasync:us-west-2:111111111111:task/task-0c77dc0d4b0792ce6"
  },
  "sessionCredentialFromConsole": "true",
  "sourceIPAddress": "1.1.1.1",
  "tlsDetails": {
    "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256",
    "clientProvidedHostHeader": "datasync.us-west-2.amazonaws.com",
    "tlsVersion": "TLSv1.2"
  },
  "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36",
  "userIdentity": {
    "accessKeyId": "ASIAYTOGP2RLOB2GM111",
    "accountId": "111111111111",
    "arn": "arn:aws:sts::111111111111:assumed-role/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f/abc@acme.com",
    "principalId": "AROAYTOGP2RLDF6WQQQQQ:abc@acme.com",
    "sessionContext": {
      "attributes": {
        "creationDate": "2023-03-14T21:53:15Z",
        "mfaAuthenticated": "false"
      },
      "sessionIssuer": {
        "accountId": "111111111111",
        "arn": "arn:aws:iam::111111111111:role/aws-reserved/sso.amazonaws.com/us-west-2/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f",
        "principalId": "AROAYTOGP2RLDF6WQQQQQ",
        "type": "Role",
        "userName": "AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f"
      },
      "webIdFederationData": {}
    },
    "type": "AssumedRole"
  }
}

Detection Rules #

Full rule details for this event, including ATT&CK technique mappings and native queries →

Splunk #

AWS Exfiltration via DataSync Task source: The following analytic detects the creation of an AWS DataSync task, which could indicate potential data exfiltration. It leverages AWS CloudTrail logs to identify the CreateTask event from the DataSync service. This activity is…T1119

References #

Sample log: splunk/attack_data

DeleteAgent

Service: datasync

Description

Removes an DataSync agent resource from your Amazon Web Services account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteLocation

Service: datasync

Description

Deletes a transfer location resource from DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteTask

Service: datasync

Description

Deletes a transfer task resource from DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeAgent

Service: datasync

Description

Returns information about an DataSync agent, such as its name, service endpoint type, and status. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationAzureBlob

Service: datasync

Description

Provides details about how an DataSync transfer location for Microsoft Azure Blob Storage is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationEfs

Service: datasync

Description

Provides details about how an DataSync transfer location for an Amazon EFS file system is configured. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

This is a projected export row, not a complete CloudTrail record: it shows only the envelope columns a SIEM export retained. The export never carried userIdentity, requestParameters, responseElements, sourceIPAddress, recipientAccountId, eventCategory, so their absence here says nothing about the real event. Account identifiers, ARNs and endpoint hostnames in eventID, requestID, resources, tlsDetails, userAgent are replaced with the placeholders AWS uses in its own documentation, so those values are structurally real but not the originals. errorMessage is withheld: it is free-form prose that names customer resources, which no substitution rule can find reliably. eventTime is withheld because the export renders it in the exporting system's local timezone rather than the UTC a CloudTrail record carries.

{
  "eventVersion": "1.11",
  "eventID": "ee96289d-243d-4bd4-ad02-09ec1820e3ee",
  "eventSource": "datasync.amazonaws.com",
  "eventName": "DescribeLocationEfs",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "7b799143-7b45-469b-a455-4a027b4930ff",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/datasync#1.57.1 m/E,i",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeLocationFsxLustre

Service: datasync

Description

Provides details about how an DataSync transfer location for an Amazon FSx for Lustre file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationFsxOntap

Service: datasync

Description

Provides details about how an DataSync transfer location for an Amazon FSx for NetApp ONTAP file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationFsxOpenZfs

Service: datasync

Description

Provides details about how an DataSync transfer location for an Amazon FSx for OpenZFS file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationFsxWindows

Service: datasync

Description

Provides details about how an DataSync transfer location for an Amazon FSx for Windows File Server file system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationHdfs

Service: datasync

Description

Provides details about how an DataSync transfer location for a Hadoop Distributed File System (HDFS) is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationNfs

Service: datasync

Description

Provides details about how an DataSync transfer location for a Network File System (NFS) file server is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationObjectStorage

Service: datasync

Description

Provides details about how an DataSync transfer location for an object storage system is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationS3

Service: datasync

Description

Provides details about how an DataSync transfer location for an S3 bucket is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLocationSmb

Service: datasync

Description

Provides details about how an DataSync transfer location for a Server Message Block (SMB) file server is configured. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeTask

Service: datasync

Description

Provides information about a task, which defines where and how DataSync transfers your data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeTaskExecution

Service: datasync

Description

Provides information about an execution of your DataSync task. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListAgents

Service: datasync

Description

Returns a list of DataSync agents that belong to an Amazon Web Services account in the Amazon Web Services Region specified in the request. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "3d68f44e-1126-4587-8e4c-6828bd704cc4",
  "eventSource": "datasync.amazonaws.com",
  "eventName": "ListAgents",
  "awsRegion": "ap-northeast-2",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "2828457e-d738-422e-a003-ab810ea94239",
  "userAgent": "config.amazonaws.com"
}

ListLocations

Service: datasync

Description

Returns a list of source and destination locations. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "f380df85-5aa8-4bcc-bb86-d6dbb015fd64",
  "eventSource": "datasync.amazonaws.com",
  "eventName": "ListLocations",
  "awsRegion": "ap-southeast-4",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "7fe3e91d-cfe9-4d17-a9d1-f341ecbeb577",
  "userAgent": "config.amazonaws.com"
}

ListTagsForResource

Service: datasync

Description

Returns all the tags associated with an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListTaskExecutions

Service: datasync

Description

Returns a list of executions for an DataSync transfer task. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "f5ac70b2-46fb-493c-a7ca-d3b1ed000d9e",
  "eventSource": "datasync.amazonaws.com",
  "eventName": "ListTaskExecutions",
  "awsRegion": "eu-west-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "f50459be-00f6-48ec-8f88-0b8515c4022d",
  "userAgent": "Botocore/1.35.95 ua/2.0 os/linux#5.10.245-245.983.amzn2.x86_64 md/arch#x86_64 lang/python#3.9.23 md/pyimpl#CPython cfg/retry-mode#standard",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.eu-west-1.amazonaws.com"
  }
}

ListTasks

Service: datasync

Description

Returns a list of the DataSync tasks you created. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

StartTaskExecution

Service: datasync

Description

Starts an DataSync transfer task. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

TagResource

Service: datasync

Description

Applies a tag to an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UntagResource

Service: datasync

Description

Removes tags from an Amazon Web Services resource. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateAgent

Service: datasync

Description

Updates the name of an DataSync agent. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationAzureBlob

Service: datasync

Description

Modifies the following configurations of the Microsoft Azure Blob Storage transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationEfs

Service: datasync

Description

Modifies the following configuration parameters of the Amazon EFS transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationFsxLustre

Service: datasync

Description

Modifies the following configuration parameters of the Amazon FSx for Lustre transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationFsxOntap

Service: datasync

Description

Modifies the following configuration parameters of the Amazon FSx for NetApp ONTAP transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationFsxOpenZfs

Service: datasync

Description

Modifies the following configuration parameters of the Amazon FSx for OpenZFS transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationFsxWindows

Service: datasync

Description

Modifies the following configuration parameters of the Amazon FSx for Windows File Server transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationHdfs

Service: datasync

Description

Modifies the following configuration parameters of the Hadoop Distributed File System (HDFS) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationNfs

Service: datasync

Description

Modifies the following configuration parameters of the Network File System (NFS) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationObjectStorage

Service: datasync

Description

Modifies the following configuration parameters of the object storage transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationS3

Service: datasync

Description

Modifies the following configuration parameters of the Amazon S3 transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateLocationSmb

Service: datasync

Description

Modifies the following configuration parameters of the Server Message Block (SMB) transfer location that you're using with DataSync. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateTask

Service: datasync

Description

Updates the configuration of a task, which defines where and how DataSync transfers your data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateTaskExecution

Service: datasync

Description

Updates the configuration of a running DataSync task execution. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.