AWS awscloudtrail low security documentation change

Service: awscloudtrail · 2025-03-05 · Security-related low

File: awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.md

Summary

Corrected ARN casing from 'eventdataStore' to 'eventdatastore' in policy examples

Security assessment

Fixes ARN format in security policies which could prevent policy misconfigurations - addresses potential authorization issues

Diff

diff --git a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.md
index d429d8d8d..fca0380a6 100644
--- a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.md
+++ b/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake.md
@@ -115 +115 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -130 +130 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -160 +160 @@ The following example provides the IAM trust policy, which allows CloudTrail to
-              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+              "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"
@@ -220 +220 @@ The following example provides the KMS key policy, which allows CloudTrail to de
-          "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId"
+          "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"