AWS AWSCloudFormation documentation change
Summary
Replaced explicit list of network event sources with a link to CloudTrail documentation
Security assessment
Change improves documentation about logging network activity events (a security feature) but does not address a specific vulnerability
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-trail-advancedfieldselector.md b/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-trail-advancedfieldselector.md index 5bba403d1..8ba1b32b8 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-trail-advancedfieldselector.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-trail-advancedfieldselector.md @@ -102,13 +102 @@ For management and data events for event data stores, you can use it to include -For network activity events, this is a required field that only uses the `Equals` operator. Set this field to the event source for which you want to log network activity events. If you want to log network activity events for multiple event sources, you must create a separate field selector for each event source. - -The following are valid values for network activity events: - - * `cloudtrail.amazonaws.com` - - * `ec2.amazonaws.com` - - * `kms.amazonaws.com` - - * `s3.amazonaws.com` - - * `secretsmanager.amazonaws.com` +For network activity events, this is a required field that only uses the `Equals` operator. Set this field to the event source for which you want to log network activity events. If you want to log network activity events for multiple event sources, you must create a separate field selector for each event source. For a list of services supporting network activity events, see [Logging network activity events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.html) in the _AWS CloudTrail User Guide_.