Delete an event data store with the Amazon CLI - Amazon CloudTrail
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Delete an event data store with the Amazon CLI

This section demonstrates how to delete an event data store by running the Amazon CLI delete-event-data-store command

To delete an event data store, specify the --event-data-store by providing the event data store ARN, or the ID suffix of the ARN. After you run delete-event-data-store, the final state of the event data store is PENDING_DELETION, and the event data store is automatically deleted after a wait period of 7 days.

After you run delete-event-data-store on an event data store, you cannot run list-queries, describe-query, or get-query-results on queries that are using the disabled data store. The event data store does count towards your account maximum of ten event data stores in an Amazon Web Services Region when it is pending deletion.

Note

You can't delete an event data store if --termination-protection-enabled is set or its FederationStatus is ENABLED.

To delete an event data store with an eventCategory of ActivityAuditLog, you must first delete the integration's channel. You can delete the channel by using the aws cloudtrail delete-channel command. For more information, see Delete a channel to delete an integration with the Amazon CLI.

aws cloudtrail delete-event-data-store \
--event-data-store arn:aws:cloudtrail:us-east-1:123456789012:eventdatastore/EXAMPLE-f852-4e8f-8bd1-bcf6cEXAMPLE

There is no response if the operation is successful.