AWS marketplace high security documentation change
Summary
Redacted sensitive values (ARN, username, IP) in CloudTrail log examples and added customerAWSAccountID field
Security assessment
Explicit redaction of PII/sensitive data in log examples directly addresses potential security exposure risks in documentation
Diff
diff --git a/marketplace/latest/userguide/cloudtrail-logging.md b/marketplace/latest/userguide/cloudtrail-logging.md index 887659c5d..1f6c56941 100644 --- a/marketplace/latest/userguide/cloudtrail-logging.md +++ b/marketplace/latest/userguide/cloudtrail-logging.md @@ -30 +30 @@ AWS Marketplace supports logging the `BatchMeterUsage` operation as events in Cl -The following example shows a CloudTrail log entry that demonstrates the `BatchMeterUsage` action from the AWS Marketplace Metering Service. When the seller [sends metering records to report their customers' usage](https://docs.aws.amazon.com/marketplace/latest/userguide/metering-for-usage.html) for a software as a service (SaaS) product listed on AWS Marketplace, this CloudTrail log entry is logged in the seller's AWS account. +The following example shows a CloudTrail log entry that demonstrates the `BatchMeterUsage` action from the AWS Marketplace Metering Service. When the seller [sends metering records to report their customers' usage](https://docs.aws.amazon.com/marketplace/latest/userguide/metering-for-usage.html) for a software as a service (SaaS) product listed in AWS Marketplace, this CloudTrail log entry is logged in the seller's AWS account. @@ -38 +38 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM - "arn": "arn:aws:iam::123456789012:user/Alice", + "arn": "arn:aws:iam::123456789012:user/*****", @@ -41 +41 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM - "userName": "Alice" + "userName": "*****" @@ -47 +47 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM - "sourceIPAddress": "192.0.0.2/24", + "sourceIPAddress": "************", @@ -54,0 +55 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM + "customerAWSAccountID": "987654321098", @@ -66,0 +68 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM + "customerAWSAccountID": "987654321098", @@ -86 +88 @@ The following example shows a CloudTrail log entry that demonstrates the `BatchM -The following example shows a CloudTrail log entry that demonstrates the `RegisterUsage` action from the AWS Marketplace Metering Service. When an hourly-priced container product from AWS Marketplace is deployed in the buyer's AWS account, the software in the container calls `RegisterUsage` within the buyer's AWS account to initiate the hourly metering for that Amazon Elastic Container Service (Amazon ECS) task or Amazon Elastic Kubernetes Service (Amazon EKS) pod. This CloudTrail log entry is logged in the buyer's AWS account. +The following example shows a CloudTrail log entry that demonstrates the `RegisterUsage` action from the AWS Marketplace Metering Service. When an hourly priced container product from AWS Marketplace is deployed in the buyer's AWS account, the software in the container calls `RegisterUsage` within the buyer's AWS account to initiate the hourly metering for that Amazon Elastic Container Service (Amazon ECS) task or Amazon Elastic Kubernetes Service (Amazon EKS) pod. This CloudTrail log entry is logged in the buyer's AWS account.