AWS kms documentation change
Summary
Removed documentation for the 'SuccessfulRequest' metric and its dimensions
Security assessment
Removal of monitoring metric documentation does not directly indicate a security issue or add security features.
Diff
diff --git a/kms/latest/developerguide/monitoring-cloudwatch.md b/kms/latest/developerguide/monitoring-cloudwatch.md index 387b24d46..ab1567c9b 100644 --- a/kms/latest/developerguide/monitoring-cloudwatch.md +++ b/kms/latest/developerguide/monitoring-cloudwatch.md @@ -42,2 +41,0 @@ You can view AWS KMS metrics using the AWS Management Console and the Amazon Clo - * SuccessfulRequest - @@ -63,21 +60,0 @@ You can view AWS KMS metrics using the AWS Management Console and the Amazon Clo -### SuccessfulRequest - -The number of successful requests for cryptographic operations on a specific KMS key. By using the `SuccessfulRequest` metric, you can apply key-level filtering to AWS KMS API usage in CloudWatch. The `Sum` statistic for this metric defines the total number of successful requests during the period. - -Use this metric to identify which KMS keys consume the largest portion of your request quota or contribute the most to API charges. You can also create a CloudWatch alarm based on the `SuccesfulRequest` metric to notify you of anomalous AWS KMS API usage patterns. These alerts can help identify inefficient workflows that might unintentionally exceed your request quotas or incur unexpected charges. - -**Dimensions for`SuccessfulRequest`** - -Dimension | Description ----|--- -KeyArn | Value for each KMS key. -Operation | Value for each AWS KMS API operation. This metric applies only to cryptographic operations. - -For [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) operations, the `SuccessfulRequest` metric includes dimensions for both the source and destination KMS keys. - -Dimension | Description ----|--- -SourceKeyArn | Value for the KMS key that decrypted the ciphertext. -DestinationKeyArn | Value for the KMS key that re-encrypted the data. -Operation | Value for each AWS KMS API operation, in this case, ReEncrypt. -