AWS privateca documentation change
Summary
Added new API actions (CreatePermission, DeletePermission, DescribeCertificateAuthorityReport, ListPermissions, RevokeCertificate) to CloudTrail logging documentation and reordered ListTags entry
Security assessment
Documents additional security-relevant API actions tracked by CloudTrail for audit purposes, but no evidence of addressing a specific vulnerability
Diff
diff --git a/privateca/latest/userguide/logging-using-cloudtrail-pca.md b/privateca/latest/userguide/logging-using-cloudtrail-pca.md index e3c3b156b..9921f1529 100644 --- a/privateca/latest/userguide/logging-using-cloudtrail-pca.md +++ b/privateca/latest/userguide/logging-using-cloudtrail-pca.md @@ -52,0 +53,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, + * [CreatePermission](https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreatePermission.html) + @@ -54,0 +57,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, + * [DeletePermission](https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeletePermission.html) + @@ -58,0 +63,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, + * [DescribeCertificateAuthorityReport](https://docs.aws.amazon.com/privateca/latest/APIReference/API_DescribeCertificateAuthorityReport.html) + @@ -71,2 +76,0 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, - * [ListTags](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListTags.html) - @@ -74,0 +79,4 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, + * [ListPermissions](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListPermissions.html) + + * [ListTags](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListTags.html) + @@ -78,0 +87,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user, + * [RevokeCertificate](https://docs.aws.amazon.com/privateca/latest/APIReference/API_RevokeCertificate.html) +