AWS awscloudtrail documentation change
Summary
Updated documentation on logging data events with CloudTrail to emphasize using advanced event selectors for filtering specific API calls (e.g., by eventName) to control costs, and added links to filtering guide.
Security assessment
The changes focus on cost optimization through event filtering rather than addressing security vulnerabilities or introducing security features. While event filtering can be part of security practices, the explicit context here is cost control with no mention of security implications.
Diff
diff --git a/awscloudtrail/latest/userguide/how-cloudtrail-works.md b/awscloudtrail/latest/userguide/how-cloudtrail-works.md index 07cdca9f9..d44c56007 100644 --- a//awscloudtrail/latest/userguide/how-cloudtrail-works.md +++ b//awscloudtrail/latest/userguide/how-cloudtrail-works.md @@ -54 +54 @@ Task | Description -[Log data events](./logging-data-events-with-cloudtrail.html) | Configure your event data store to log data events. You can filter data events on the following advanced event selector fields: `eventName`, `eventSource`, `eventType`, `resources.type`, `resources.ARN`, `readOnly`, `sessionCredentialFromConsole`, and `userIdentity.arn`. +[Log data events](./logging-data-events-with-cloudtrail.html) | You can use [advanced event selectors](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html) to create fine-grained selectors to log only those data events of interest. For example, you can filter on the `eventName` field to include or exclude logging of specific API calls, which can help control costs. For more information, see [Filtering data events by using advanced event selectors](./filtering-data-events.html). @@ -129 +129 @@ Task | Description -[Log data events](./logging-data-events-with-cloudtrail.html) | You can use [advanced event selectors](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html) to create fine-grained selectors to log only those data events of interest. When you use advanced event selectors, you can filter on the `eventName` field to include or exclude logging of specific API calls, which can help control costs. +[Log data events](./logging-data-events-with-cloudtrail.html) | You can use [advanced event selectors](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html) to create fine-grained selectors to log only those data events of interest. For example, you can filter on the `eventName` field to include or exclude logging of specific API calls, which can help control costs. For more information, see [Filtering data events by using advanced event selectors](./filtering-data-events.html).