Skip to content

CloudTrail Lake will no longer be open to new customers starting May 31, 2026

Description

CloudTrail Lake will no longer be open to new customers starting May 31, 2026. If you would like to use CloudTrail Lake, sign up prior to that date. Existing customers can continue to use the service as normal. For more information, see CloudTrail Lake availability change.

Starts a CloudTrail Lake query. Use the QueryStatement parameter to provide your SQL query, enclosed in single quotation marks. Use the optional DeliveryS3Uri parameter to deliver the query results to an S3 bucket.

start_query requires you specify either the QueryStatement parameter, or a QueryAlias and any QueryParameters. In the current release, the QueryAlias and QueryParameters parameters are used only for the queries that populate the CloudTrail Lake dashboards.

Usage

cloudtrail_start_query(QueryStatement, DeliveryS3Uri, QueryAlias,
  QueryParameters, EventDataStoreOwnerAccountId)

Arguments

  • QueryStatement

    The SQL code of your query.

  • DeliveryS3Uri

    The URI for the S3 bucket where CloudTrail delivers the query results.

  • QueryAlias

    The alias that identifies a query template.

  • QueryParameters

    The query parameters for the specified QueryAlias.

  • EventDataStoreOwnerAccountId

    The account ID of the event data store owner.

Value

A list with the following syntax:

list(
  QueryId = "string",
  EventDataStoreOwnerAccountId = "string"
)

Request syntax

svc$start_query(
  QueryStatement = "string",
  DeliveryS3Uri = "string",
  QueryAlias = "string",
  QueryParameters = list(
    "string"
  ),
  EventDataStoreOwnerAccountId = "string"
)