AWS Security ChangesHomeSearch

AWS awscloudtrail low security documentation change

Service: awscloudtrail · 2025-03-05 · Security-related low

File: awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md

Summary

Corrected ARN casing from 'eventdataStore' to 'eventdatastore' in policy examples

Security assessment

Fixes ARN format in security policies which could prevent policy misconfigurations - addresses potential authorization issues

Diff

diff --git a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md
index 4276ed01c..8880e5442 100644
--- a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md
+++ b/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md
@@ -117 +117 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -132 +132 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -162 +162 @@ The following example provides the IAM trust policy, which allows CloudTrail to
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -222 +222 @@ The following example provides the KMS key policy, which allows CloudTrail to de
-          "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+          "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"