AWS awscloudtrail documentation change
Summary
Added detailed descriptions of predefined log selector templates matching the changes in the management events documentation
Security assessment
Mirrors the security documentation improvements from the first file change, providing consistent guidance about event logging categories without addressing specific vulnerabilities.
Diff
diff --git a/awscloudtrail/latest/userguide/query-event-data-store-cloudtrail.md b/awscloudtrail/latest/userguide/query-event-data-store-cloudtrail.md index c7315bbb1..84762f3b4 100644 --- a//awscloudtrail/latest/userguide/query-event-data-store-cloudtrail.md +++ b//awscloudtrail/latest/userguide/query-event-data-store-cloudtrail.md @@ -125 +125,13 @@ To copy trail events or enable Insights events, you must be signed in to the man - 1. In **Log selector template** , choose a template, or **Custom** to build a custom configuration based on advanced event selector field values. + 1. In **Log selector template** , choose a predefined template, or **Custom** to build a custom configuration based on advanced event selector field values. + +You can choose from the following predefined templates: + + * **Log all events** – Choose this template to log all events. + + * **Log only read events** – Choose this template to log only read events. Read-only events are events that do not change the state of a resource, such as `Get*` or `Describe*` events. + + * **Log only write events** – Choose this template to log only write events. Write events add, change, or delete resources, attributes, or artifacts, such as `Put*`, `Delete*`, or `Write*` events. + + * **Log only AWS Management Console events** – Choose this template to log only events originating from the AWS Management Console. + + * **Exclude AWS service initiated events** – Choose this template to exclude AWS service events, which have an `eventType` of `AwsServiceEvent`, and events initiated with AWS service-linked roles (SLRs).