AWS Directory Service

eventName	Description	Sample	Rule
any	Catch-all entry for AWS Directory Service rules that match the service but not a specific eventName.	N	N
AcceptSharedDirectory	Accepts a directory sharing request that was sent from the directory owner account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
AddIpRoutes	If the DNS server for your self-managed domain uses a publicly addressable IP address, you must add a CIDR address block to correctly route traffic to and from your Microsoft AD on Amazon Web Services. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
AddRegion	Adds two domain controllers in the specified Region for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
AddTagsToResource	Adds or overwrites one or more tags for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CancelSchemaExtension	Cancels an in-progress schema extension to a Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ConnectDirectory	Creates an AD Connector to connect to a self-managed directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateAlias	Creates an alias for a directory and assigns the alias to the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateComputer	Creates an Active Directory computer object in the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateConditionalForwarder	Creates a conditional forwarder associated with your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateDirectory	Creates a Simple AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateHybridAD	Creates a hybrid directory that connects your self-managed Active Directory (AD) infrastructure and Amazon Web Services. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateLogSubscription	Creates a subscription to forward real-time Directory Service domain controller security logs to the specified Amazon CloudWatch log group in your Amazon Web Services account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateMicrosoftAD	Creates a Microsoft AD directory in the Amazon Web Services Cloud. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateSnapshot	Creates a snapshot of a Simple AD or Microsoft AD directory in the Amazon Web Services cloud. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
CreateTrust	Directory Service for Microsoft Active Directory allows you to configure trust relationships. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteADAssessment	Deletes a directory assessment and all associated data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteConditionalForwarder	Deletes a conditional forwarder that has been set up for your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteDirectory	Deletes an Directory Service directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteLogSubscription	Deletes the specified log subscription. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteSnapshot	Deletes a directory snapshot. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeleteTrust	Deletes an existing trust relationship between your Managed Microsoft AD directory and an external domain. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeregisterCertificate	Deletes from the system the certificate that was registered for secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DeregisterEventTopic	Removes the specified directory as a publisher to the specified Amazon SNS topic. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeADAssessment	Retrieves detailed information about a directory assessment, including its current status, validation results, and configuration details. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeCAEnrollmentPolicy	Retrieves detailed information about the certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeCertificate	Displays information about the certificate registered for secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeClientAuthenticationSettings	Retrieves information about the type of client authentication for the specified directory, if the type is specified. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeConditionalForwarders	Obtains information about the conditional forwarders for this account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeDirectories	Obtains information about the directories that belong to this account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeDirectoryDataAccess	Obtains status of directory data access enablement through the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeDomainControllers	Provides information about any domain controllers in your directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeEventTopics	Obtains information about which Amazon SNS topics receive status messages from the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeHybridADUpdate	Retrieves information about update activities for a hybrid directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeLDAPSSettings	Describes the status of LDAP security for the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeRegions	Provides information about the Regions that are configured for multi-Region replication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeSettings	Retrieves information about the configurable settings for the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeSharedDirectories	Returns the shared directories in your account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeSnapshots	Obtains information about the directory snapshots that belong to this account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DescribeTrusts	Obtains information about the trust relationships for this account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
DescribeUpdateDirectory	Describes the updates of a directory for a particular update type. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableCAEnrollmentPolicy	Disables the certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableClientAuthentication	Disables alternative client authentication methods for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableDirectoryDataAccess	Deactivates access to directory data via the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableLDAPS	Deactivates LDAP secure calls for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableRadius	Disables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
DisableSso	Disables single-sign on for a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableCAEnrollmentPolicy	Enables certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableClientAuthentication	Enables alternative client authentication methods for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableDirectoryDataAccess	Enables access to directory data via the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableLDAPS	Activates the switch for the specific directory to always use LDAP secure calls. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableRadius	Enables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
EnableSso	Enables single sign-on for a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
GetDirectoryLimits	Obtains directory limit information for the current Region. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
GetSnapshotLimits	Obtains the manual snapshot limits for a directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
ListADAssessments	Retrieves a list of directory assessments for the specified directory or all assessments in your account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListCertificates	For the specified directory, lists all the certificates registered for a secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListIpRoutes	Lists the address blocks that you have added to a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListLogSubscriptions	Lists the active log subscriptions for the Amazon Web Services account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.	N	N
ListSchemaExtensions	Lists all schema extensions applied to a Microsoft AD Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ListTagsForResource	Lists all tags on a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RegisterCertificate	Registers a certificate for a secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RegisterEventTopic	Associates a directory with an Amazon SNS topic. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RejectSharedDirectory	Rejects a directory sharing request that was sent from the directory owner account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RemoveIpRoutes	Removes IP address blocks from a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RemoveRegion	Stops all replication and removes the domain controllers from the specified Region. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RemoveTagsFromResource	Removes tags from a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ResetUserPassword	Resets the password for any user in your Managed Microsoft AD or Simple AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
RestoreFromSnapshot	Restores a directory using an existing directory snapshot. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
ShareDirectory	Shares a specified directory (DirectoryId) in your Amazon Web Services account (directory owner) with another Amazon Web Services account (directory consumer). Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
StartADAssessment	Initiates a directory assessment to validate your self-managed AD environment for hybrid domain join. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
StartSchemaExtension	Applies a schema extension to a Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UnshareDirectory	Stops the directory sharing between the directory owner and consumer accounts. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateConditionalForwarder	Updates a conditional forwarder that has been set up for your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateDirectorySetup	Updates directory configuration for the specified update type. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateHybridAD	Updates the configuration of an existing hybrid directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateNumberOfDomainControllers	Adds or removes domain controllers to or from the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateRadius	Updates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateSettings	Updates the configurable settings for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
UpdateTrust	Updates the trust that has been set up between your Managed Microsoft AD directory and an self-managed Active Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N
VerifyTrust	Directory Service for Microsoft Active Directory allows you to configure and verify trust relationships. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.	N	N

any: AWS Directory Service (catch-all)

Service: ds

Description

Catch-all entry for AWS Directory Service rules that match the service but not a specific eventName.

AcceptSharedDirectory

Service: ds

Description

Accepts a directory sharing request that was sent from the directory owner account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AddIpRoutes

Service: ds

Description

If the DNS server for your self-managed domain uses a publicly addressable IP address, you must add a CIDR address block to correctly route traffic to and from your Microsoft AD on Amazon Web Services. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AddRegion

Service: ds

Description

Adds two domain controllers in the specified Region for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

AddTagsToResource

Service: ds

Description

Adds or overwrites one or more tags for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CancelSchemaExtension

Service: ds

Description

Cancels an in-progress schema extension to a Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ConnectDirectory

Service: ds

Description

Creates an AD Connector to connect to a self-managed directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateAlias

Service: ds

Description

Creates an alias for a directory and assigns the alias to the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateComputer

Service: ds

Description

Creates an Active Directory computer object in the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateConditionalForwarder

Service: ds

Description

Creates a conditional forwarder associated with your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateDirectory

Service: ds

Description

Creates a Simple AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateHybridAD

Service: ds

Description

Creates a hybrid directory that connects your self-managed Active Directory (AD) infrastructure and Amazon Web Services. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateLogSubscription

Service: ds

Description

Creates a subscription to forward real-time Directory Service domain controller security logs to the specified Amazon CloudWatch log group in your Amazon Web Services account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateMicrosoftAD

Service: ds

Description

Creates a Microsoft AD directory in the Amazon Web Services Cloud. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateSnapshot

Service: ds

Description

Creates a snapshot of a Simple AD or Microsoft AD directory in the Amazon Web Services cloud. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

CreateTrust

Service: ds

Description

Directory Service for Microsoft Active Directory allows you to configure trust relationships. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteADAssessment

Service: ds

Description

Deletes a directory assessment and all associated data. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteConditionalForwarder

Service: ds

Description

Deletes a conditional forwarder that has been set up for your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteDirectory

Service: ds

Description

Deletes an Directory Service directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteLogSubscription

Service: ds

Description

Deletes the specified log subscription. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteSnapshot

Service: ds

Description

Deletes a directory snapshot. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeleteTrust

Service: ds

Description

Deletes an existing trust relationship between your Managed Microsoft AD directory and an external domain. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeregisterCertificate

Service: ds

Description

Deletes from the system the certificate that was registered for secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DeregisterEventTopic

Service: ds

Description

Removes the specified directory as a publisher to the specified Amazon SNS topic. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeADAssessment

Service: ds

Description

Retrieves detailed information about a directory assessment, including its current status, validation results, and configuration details. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeCAEnrollmentPolicy

Service: ds

Description

Retrieves detailed information about the certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeCertificate

Service: ds

Description

Displays information about the certificate registered for secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeClientAuthenticationSettings

Service: ds

Description

Retrieves information about the type of client authentication for the specified directory, if the type is specified. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeConditionalForwarders

Service: ds

Description

Obtains information about the conditional forwarders for this account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeDirectories

Service: ds

Description

Obtains information about the directories that belong to this account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

This is a projected export row, not a complete CloudTrail record: it shows only the envelope columns a SIEM export retained. The export never carried userIdentity, requestParameters, responseElements, sourceIPAddress, recipientAccountId, eventCategory, so their absence here says nothing about the real event. Account identifiers, ARNs and endpoint hostnames in eventID, requestID, resources, tlsDetails, userAgent are replaced with the placeholders AWS uses in its own documentation, so those values are structurally real but not the originals. errorMessage is withheld: it is free-form prose that names customer resources, which no substitution rule can find reliably. eventTime is withheld because the export renders it in the exporting system's local timezone rather than the UTC a CloudTrail record carries.

{
  "eventVersion": "1.11",
  "eventID": "bc717cf8-688e-4c60-92c5-06e02693dc12",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeDirectories",
  "awsRegion": "ca-central-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "6e94f1d3-99b1-4419-926a-f0510bf46455",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.ca-central-1.amazonaws.com"
  }
}

DescribeDirectoryDataAccess

Service: ds

Description

Obtains status of directory data access enablement through the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeDomainControllers

Service: ds

Description

Provides information about any domain controllers in your directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeEventTopics

Service: ds

Description

Obtains information about which Amazon SNS topics receive status messages from the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "963d826b-c30c-4f5a-a2a1-26eb97a7b10b",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeEventTopics",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "e36d9eba-5384-45c6-8880-9b59b96aaa26",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeHybridADUpdate

Service: ds

Description

Retrieves information about update activities for a hybrid directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeLDAPSSettings

Service: ds

Description

Describes the status of LDAP security for the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "4875527b-70d5-488e-8ba0-5f3758040f45",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeLDAPSSettings",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "d5d212bc-c7ec-40f2-8470-68256d718ef1",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "errorCode": "AccessDenied",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeRegions

Service: ds

Description

Provides information about the Regions that are configured for multi-Region replication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeSettings

Service: ds

Description

Retrieves information about the configurable settings for the specified directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "cff39496-4904-46d4-b8aa-4c9489738153",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeSettings",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "f2c41085-2f46-499b-80b9-eca0c25aad6c",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "errorCode": "InvalidParameterException",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeSharedDirectories

Service: ds

Description

Returns the shared directories in your account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "6ad10446-c9e7-453d-badf-d30a69fd1a14",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeSharedDirectories",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "933d4c28-3bef-48ae-b778-85f0cd95a8ed",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "errorCode": "UnsupportedOperationException",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeSnapshots

Service: ds

Description

Obtains information about the directory snapshots that belong to this account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DescribeTrusts

Service: ds

Description

Obtains information about the trust relationships for this account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "927f2c88-8ea2-46ba-a6ad-5ac74e1994eb",
  "eventSource": "ds.amazonaws.com",
  "eventName": "DescribeTrusts",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "5c44640c-0016-4865-90c2-3c923fdf3f64",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

DescribeUpdateDirectory

Service: ds

Description

Describes the updates of a directory for a particular update type. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableCAEnrollmentPolicy

Service: ds

Description

Disables the certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableClientAuthentication

Service: ds

Description

Disables alternative client authentication methods for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableDirectoryDataAccess

Service: ds

Description

Deactivates access to directory data via the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableLDAPS

Service: ds

Description

Deactivates LDAP secure calls for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableRadius

Service: ds

Description

Disables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

DisableSso

Service: ds

Description

Disables single-sign on for a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableCAEnrollmentPolicy

Service: ds

Description

Enables certificate authority (CA) enrollment policy for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableClientAuthentication

Service: ds

Description

Enables alternative client authentication methods for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableDirectoryDataAccess

Service: ds

Description

Enables access to directory data via the Directory Service Data API for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableLDAPS

Service: ds

Description

Activates the switch for the specific directory to always use LDAP secure calls. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableRadius

Service: ds

Description

Enables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

EnableSso

Service: ds

Description

Enables single sign-on for a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetDirectoryLimits

Service: ds

Description

Obtains directory limit information for the current Region. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

GetSnapshotLimits

Service: ds

Description

Obtains the manual snapshot limits for a directory. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "9f40aecc-f5a5-4295-9fd0-83f412a9f6a7",
  "eventSource": "ds.amazonaws.com",
  "eventName": "GetSnapshotLimits",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "7762e4ee-790f-4b4e-af28-f6840bb2b081",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

ListADAssessments

Service: ds

Description

Retrieves a list of directory assessments for the specified directory or all assessments in your account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListCertificates

Service: ds

Description

For the specified directory, lists all the certificates registered for a secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListIpRoutes

Service: ds

Description

Lists the address blocks that you have added to a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListLogSubscriptions

Service: ds

Description

Lists the active log subscriptions for the Amazon Web Services account. Operation catalog is model-derived from the AWS SDK (botocore); this (eventSource, eventName) pair is confirmed by an observed CloudTrail record.

Example CloudTrail Event #

{
  "eventVersion": "1.11",
  "eventID": "a5ab5074-ce09-4e66-897c-d1acd9103148",
  "eventSource": "ds.amazonaws.com",
  "eventName": "ListLogSubscriptions",
  "awsRegion": "us-east-1",
  "eventType": "AwsApiCall",
  "readOnly": true,
  "managementEvent": true,
  "requestID": "4c7e2d5f-1e41-4ddb-a2ad-ccd591138483",
  "userAgent": "aws-sdk-go-v2/1.43.0 ua/2.1 os/linux lang/go#1.26.5 md/GOOS#linux md/GOARCH#arm64 api/directoryservice#1.24.4",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "example.us-east-1.amazonaws.com"
  }
}

ListSchemaExtensions

Service: ds

Description

Lists all schema extensions applied to a Microsoft AD Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ListTagsForResource

Service: ds

Description

Lists all tags on a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RegisterCertificate

Service: ds

Description

Registers a certificate for a secure LDAP or client certificate authentication. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RegisterEventTopic

Service: ds

Description

Associates a directory with an Amazon SNS topic. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RejectSharedDirectory

Service: ds

Description

Rejects a directory sharing request that was sent from the directory owner account. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RemoveIpRoutes

Service: ds

Description

Removes IP address blocks from a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RemoveRegion

Service: ds

Description

Stops all replication and removes the domain controllers from the specified Region. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RemoveTagsFromResource

Service: ds

Description

Removes tags from a directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ResetUserPassword

Service: ds

Description

Resets the password for any user in your Managed Microsoft AD or Simple AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

RestoreFromSnapshot

Service: ds

Description

Restores a directory using an existing directory snapshot. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

ShareDirectory

Service: ds

Description

Shares a specified directory (DirectoryId) in your Amazon Web Services account (directory owner) with another Amazon Web Services account (directory consumer). Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

StartADAssessment

Service: ds

Description

Initiates a directory assessment to validate your self-managed AD environment for hybrid domain join. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

StartSchemaExtension

Service: ds

Description

Applies a schema extension to a Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UnshareDirectory

Service: ds

Description

Stops the directory sharing between the directory owner and consumer accounts. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateConditionalForwarder

Service: ds

Description

Updates a conditional forwarder that has been set up for your Amazon Web Services directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateDirectorySetup

Service: ds

Description

Updates directory configuration for the specified update type. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateHybridAD

Service: ds

Description

Updates the configuration of an existing hybrid directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateNumberOfDomainControllers

Service: ds

Description

Adds or removes domain controllers to or from the directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateRadius

Service: ds

Description

Updates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector or Microsoft AD directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateSettings

Service: ds

Description

Updates the configurable settings for the specified directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

UpdateTrust

Service: ds

Description

Updates the trust that has been set up between your Managed Microsoft AD directory and an self-managed Active Directory. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.

VerifyTrust

Service: ds

Description

Directory Service for Microsoft Active Directory allows you to configure and verify trust relationships. Model-derived from the AWS SDK operation catalog (botocore); the eventSource is inferred from the SDK endpoint prefix and no CloudTrail sample confirms it yet.