AWS awscloudtrail documentation change
Summary
Removed detailed ARN format table and replaced with a reference to the Service Authorization Reference documentation
Security assessment
The change is a documentation restructuring that removes a detailed table of ARN formats and replaces it with a reference to another documentation page. There is no evidence this change addresses a specific security vulnerability or adds security-related content.
Diff
diff --git a/awscloudtrail/latest/userguide/filtering-data-events.md index 9e3fab2fd..c04378ed8 100644 --- a/awscloudtrail/latest/userguide/filtering-data-events.md +++ b/awscloudtrail/latest/userguide/filtering-data-events.md @@ -295 +295 @@ You can use any operator with `resources.ARN` , but if you use `Equals` or `NotE -The following table shows the valid ARN format for each `resources.type`. +For more information about the ARN formats of data event resources, see [Actions, resources, and condition keys for AWS services](https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html) in the _Service Authorization Reference_. @@ -301,537 +300,0 @@ You can't use the `resources.ARN` field to filter resource types that do not hav -resources.type | resources.ARN ----|--- -`AWS::DynamoDB::Table1` | - - - arn:partition:dynamodb:region:account_ID:table/table_name - -`AWS::Lambda::Function` | - - - arn:partition:lambda:region:account_ID:function:function_name - -`AWS::S3::Object`2 | - - - arn:partition:s3:::amzn-s3-demo-bucket/ - arn:partition:s3:::amzn-s3-demo-bucket/object_or_file_name/ - -`AWS::AIOps::InvestigationGroup` | - - - arn:partition:aiops:region:account_ID:investigation-group/investigation_group_ID - -`AWS::AppConfig::Configuration` | - - - arn:partition:appconfig:region:account_ID:application/application_ID/environment/environment_ID/configuration/configuration_profile_ID - -`AWS::AppSync::GraphQLApi` | - - - arn:partition:appsync:region:account_ID:apis/GraphQL_API_ID - -`AWS::B2BI::Transformer` | - - - arn:partition:b2bi:region:account_ID:transformer/transformer_ID - -`AWS::Backup::SearchJob` | - - - arn:partition:backup-search:region:account_ID:search-job/search_job_ID - -`AWS::Bedrock::AgentAlias` | - - - arn:partition:bedrock:region:account_ID:agent-alias/agent_ID/alias_ID - -`AWS::Bedrock::AsyncInvoke` | - - - arn:partition:bedrock:region:account_ID:async-invoke/async_invoke_ID - -`AWS::Bedrock::FlowAlias` | - - - arn:partition:bedrock:region:account_ID:flow/flow_ID/alias/alias_ID - -`AWS::Bedrock::Guardrail` | - - - arn:partition:bedrock:region:account_ID:guardrail/guardrail_ID - -`AWS::Bedrock::InlineAgent` | - - - arn:partition:bedrock:region:account_ID:INLINE_AGENT_UUID - -`AWS::Bedrock::KnowledgeBase` | - - - arn:partition:bedrock:region:account_ID:knowledge-base/knowledge_base_ID - -`AWS::Bedrock::Model` | The ARN must be in one of the following formats: - - * `arn:`partition`:bedrock:`region`::foundation-model/`resource_ID`` - * `arn:`partition`:bedrock:`region`:`account_ID`:provisioned-model/`resource_ID`` - * `arn:`partition`:bedrock:`region`:`account_ID`:custom-model/`resource_ID`` - - -`AWS::Bedrock::PromptVersion` | - - - arn:partition:bedrock:region:account_ID:prompt/prompt_ID - -`AWS::Cassandra::Table` | - - - arn:partition:cassandra:region:account_ID:keyspace/keyspace_name/table/table_name - -`AWS::CloudFront::KeyValueStore` | - - - arn:partition:cloudfront:region:account_ID:key-value-store/KVS_name - -`AWS::CloudTrail::Channel` | - - - arn:partition:cloudtrail:region:account_ID:channel/channel_UUID - -`AWS::CodeGuruProfiler::ProfilingGroup` | - - - arn:partition:codeguru-profiler:region:account_ID:profilingGroup/profiling_group_name - -`AWS::CodeWhisperer::Customization` | - - - arn:partition:codewhisperer:region:account_ID:customization/customization_ID - -`AWS::CodeWhisperer::Profile` | - - - arn:partition:codewhisperer:region:account_ID:profile/profile_ID - -`AWS::Cognito::IdentityPool` | - - - arn:partition:cognito-identity:region:account_ID:identitypool/identity_pool_ID - -`AWS::DataExchange::Asset` | - - - arn:partition:dataexchange:region:account_ID:data-sets/data_set_ID/revisions/revision_ID/assets/asset_ID - -`AWS::Deadline::Fleet` | - - - arn:partition:deadline:region:account_ID:farm/farm_ID/fleet/fleet_ID - -`AWS::Deadline::Job` | - - - arn:partition:deadline:region:account_ID:farm/farm_ID/queue/queue_ID/job/job_ID - -`AWS::Deadline::Queue` | - - - arn:partition:deadline:region:account_ID:farm/farm_ID/queue/queue_ID - -`AWS::Deadline::Worker` | - - - arn:partition:deadline:region:account_ID:farm/farm_ID/fleet/fleet_ID/worker/worker_ID - -`AWS::DynamoDB::Stream` | - - - arn:partition:dynamodb:region:account_ID:table/table_name/stream/date_time - -`AWS::EC2::Snapshot` | - - - arn:partition:ec2:region::snapshot/snapshot_ID - -`AWS::EMRWAL::Workspace` | - - - arn:partition:emrwal:region:account_ID:workspace/workspace_name - -`AWS::FinSpace::Environment` | - - - arn:partition:finspace:region:account_ID:environment/environment_ID - -`AWS::Glue::Table` | - - - arn:partition:glue:region:account_ID:table/database_name/table_name - -`AWS::GreengrassV2::ComponentVersion` | - - - arn:partition:greengrass:region:account_ID:components/component_name - -`AWS::GreengrassV2::Deployment` | - - - arn:partition:greengrass:region:account_ID:deployments/deployment_ID - -`AWS::GuardDuty::Detector` | - - - arn:partition:guardduty:region:account_ID:detector/detector_ID - -`AWS::IoT::Certificate` | - - - arn:partition:iot:region:account_ID:cert/certificate_ID - -`AWS::IoT::Thing` | -