AWS AmazonS3 documentation change
Summary
Added clarification that CloudTrail does not log requests failing due to 301 redirect errors
Security assessment
The change provides more accurate logging documentation, which relates to security monitoring, but does not indicate a resolved security vulnerability.
Diff
diff --git a/AmazonS3/latest/userguide/logging-with-S3.md index 83dd25eff..624eef4b8 100644 --- a/AmazonS3/latest/userguide/logging-with-S3.md +++ b/AmazonS3/latest/userguide/logging-with-S3.md @@ -42 +42 @@ Log format | JSON | Log file with space-separated, newline-delimited records - 1. CloudTrail does not deliver logs for requests that fail authentication (in which the provided credentials are not valid). However, it does include logs for requests in which authorization fails (`AccessDenied`) and requests that are made by anonymous users. + 1. CloudTrail does not deliver logs for requests that fail authentication (in which the provided credentials are not valid) or that fail due to redirection (error code `301 Moved Permanently`). However, it does include logs for requests in which authorization fails (`AccessDenied`) and requests that are made by anonymous users.