AWS Security ChangesHomeSearch

AWS privateca documentation change

Service: privateca · 2025-03-30 · Documentation low

File: privateca/latest/userguide/logging-using-cloudtrail-pca.md

Summary

Added new API actions (CreatePermission, DeletePermission, DescribeCertificateAuthorityReport, ListPermissions, RevokeCertificate) to CloudTrail logging documentation and reordered ListTags entry

Security assessment

Documents additional security-relevant API actions tracked by CloudTrail for audit purposes, but no evidence of addressing a specific vulnerability

Diff

diff --git a/privateca/latest/userguide/logging-using-cloudtrail-pca.md b/privateca/latest/userguide/logging-using-cloudtrail-pca.md
index e3c3b156b..9921f1529 100644
--- a/privateca/latest/userguide/logging-using-cloudtrail-pca.md
+++ b/privateca/latest/userguide/logging-using-cloudtrail-pca.md
@@ -52,0 +53,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
+  * [CreatePermission](https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreatePermission.html)
+
@@ -54,0 +57,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
+  * [DeletePermission](https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeletePermission.html)
+
@@ -58,0 +63,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
+  * [DescribeCertificateAuthorityReport](https://docs.aws.amazon.com/privateca/latest/APIReference/API_DescribeCertificateAuthorityReport.html)
+
@@ -71,2 +76,0 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
-  * [ListTags](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListTags.html)
-
@@ -74,0 +79,4 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
+  * [ListPermissions](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListPermissions.html)
+
+  * [ListTags](https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListTags.html)
+
@@ -78,0 +87,2 @@ AWS Private CA integrates with CloudTrail to record API actions made by a user,
+  * [RevokeCertificate](https://docs.aws.amazon.com/privateca/latest/APIReference/API_RevokeCertificate.html)
+