CreateCloudTrailLakeIntegrationInput
CreateCloudTrailLakeIntegrationInput
CreateCloudTrailLakeIntegrationInput
Create a CloudTrail Lake SIEM integration with policies configured atomically
enabled |
Boolean | Enable the integration immediately (default: false) |
eventDataStoreArn |
String! | The ARN of the CloudTrail Lake Event Data Store (region is derived from the ARN) |
externalId |
String | The external ID for cross-account role assumption |
pollingInterval |
Int | Polling interval in seconds (60-3600, default: 300) |
roleArn |
String | The IAM role ARN to assume when querying CloudTrail Lake (optional if account exists in Guardrails) |
title |
String | Optional display name (defaults to the Event Data Store UUID from the ARN) |