# AWS CloudTrail API

> AWS CloudTrail API on Apizie: 46 endpoints (Adds one or more tags to a trail, event data store, or channel, up to a limit of 50. Overwrites an existing…, Cancels a query if the query is not in a terminated state, such as CANCELLED , FAILED , TIMED_OUT , or…, Creates a channel for CloudTrail to ingest events from a partner or external source. After you create a…, Creates a new event data store., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-cloudtrail`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-cloudtrail
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-cloudtrail/openapi.json

CloudTrail This is the CloudTrail API Reference. It provides descriptions of actions, data types, common parameters, and common errors for CloudTrail. CloudTrail is a web service that records Amazon Web Services API…

## Endpoints

### Adds one or more tags to a trail, event data store, or channel, up to a limit of 50. Overwrites an existing…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/add-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Cancels a query if the query is not in a terminated state, such as CANCELLED , FAILED , TIMED_OUT , or…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/cancel-query` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a channel for CloudTrail to ingest events from a partner or external source. After you create a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/create-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a new event data store.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/create-event-data-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/create-trail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes a channel.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/delete-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Disables the event data store specified by EventDataStore , which accepts an event data store ARN. After you…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/delete-event-data-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the resource-based policy attached to the CloudTrail channel.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/delete-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes a trail. This operation must be called from the Region in which the trail was created. DeleteTrail…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/delete-trail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes CloudTrail delegated administrator permissions from a member account in an organization.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/deregister-organization-delegated-admin` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns metadata about a query, including query run time in milliseconds, number of events scanned and…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/describe-query` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves settings for one or more trails associated with the current Region for your account.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/describe-trails` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about a specific channel.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about an event data store specified as either an ARN or the ID portion of the ARN.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-event-data-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Describes the settings for the event selectors that you configured for your trail. The information returned…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-event-selectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about a specific import.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-import` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Describes the settings for the Insights event selectors that you configured for your trail.…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-insight-selectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Gets event data results of a query. You must specify the QueryID value returned by the StartQuery operation.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-query-results` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the JSON text of the resource-based policy document attached to the CloudTrail channel.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns settings information for a specified trail.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-trail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns a JSON-formatted list of information about the specified trail. Fields include information on…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/get-trail-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Lists the channels in the current account, and their source names.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-channels` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns information about all event data stores in the account, in the current Region.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-event-data-stores` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns a list of failures for the specified import.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-import-failures` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns information on all imports, or a select set of imports by ImportStatus or Destination .
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-imports` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns all public keys whose private keys were used to sign the digest files within the specified time…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-public-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns a list of queries and query statuses for the past seven days. You must specify an ARN value for…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-queries` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists the tags for the specified trails, event data stores, or channels in the current Region.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists trails that are in the current account.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/list-trails` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Looks up management events or CloudTrail Insights events that are captured by CloudTrail. You can look up…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/lookup-events` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Configures an event selector or advanced event selectors for your trail. Use event selectors or advanced…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/put-event-selectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/put-insight-selectors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Attaches a resource-based permission policy to a CloudTrail channel that is used for an integration with an…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/put-resource-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Registers an organization’s member account as the CloudTrail delegated administrator.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/register-organization-delegated-admin` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the specified tags from a trail, event data store, or channel.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/remove-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Restores a deleted event data store specified by EventDataStore , which accepts an event data store ARN. You…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/restore-event-data-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Starts the ingestion of live events on an event data store specified as either an ARN or the ID portion of…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/start-event-data-store-ingestion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Starts an import of logged trail events from a source S3 bucket to a destination event data store. By…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/start-import` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Starts the recording of Amazon Web Services API calls and log file delivery for a trail. For a trail that is…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/start-logging` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Starts a CloudTrail Lake query. Use the QueryStatement parameter to provide your SQL query, enclosed in…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/start-query` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Stops the ingestion of live events on an event data store specified as either an ARN or the ID portion of…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/stop-event-data-store-ingestion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Stops a specified import.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/stop-import` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Suspends the recording of Amazon Web Services API calls and log file delivery for the specified trail. Under…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/stop-logging` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates a channel specified by a required channel ARN or UUID.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/update-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates an event data store. The required EventDataStore value is an ARN or the ID portion of the ARN. Other…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/update-event-data-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates trail settings that control what events you are logging, and how to handle log files. Changes to a…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/update-trail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/add-tags" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS CloudTrail API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:amazonaws-cloudtrail/add-tags with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS CloudTrail API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS CloudTrail itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS CloudTrail API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-cloudtrail.

### What is the status of the AWS CloudTrail API?
Needs your own provider key (bring your own key)