AWS bedrock documentation change
Summary
Updated API operation logging details - separated Agents API actions into data events and refined Runtime API operation examples.
Security assessment
Change clarifies logging categorization but doesn't address a specific security vulnerability. It improves accuracy of existing logging documentation rather than introducing new security controls.
Diff
diff --git a/bedrock/latest/userguide/logging-using-cloudtrail.md b/bedrock/latest/userguide/logging-using-cloudtrail.md index a758d6ae4..ce67d62a9 100644 --- a//bedrock/latest/userguide/logging-using-cloudtrail.md +++ b//bedrock/latest/userguide/logging-using-cloudtrail.md @@ -51 +51 @@ For more information, see the [CloudTrail userIdentity element](https://docs.aws -Amazon Bedrock logs [Amazon Bedrock Runtime API operations](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Amazon_Bedrock_Runtime.html) (`InvokeModel`, `InvokeAgent`, `InvokeInlineAgent`, `InvokeModelWithResponseStream`, `Converse`, and `ConverseStream`) as [management events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events). +Amazon Bedrock logs [Amazon Bedrock Runtime API operations](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Amazon_Bedrock_Runtime.html) (such as `InvokeModel`, `InvokeModelWithResponseStream`, `Converse`, and `ConverseStream`) as [management events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-events-with-cloudtrail.html#logging-management-events). @@ -53 +53 @@ Amazon Bedrock logs [Amazon Bedrock Runtime API operations](https://docs.aws.ama -Amazon Bedrock logs all [Agents for Amazon Bedrock Runtime API operations](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Agents_for_Amazon_Bedrock_Runtime.html) actions to CloudTrail as _data events_. +Amazon Bedrock logs all [Agents for Amazon Bedrock Runtime API operations](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Agents_for_Amazon_Bedrock_Runtime.html) (such as `InvokeAgent` and `InvokeInlineAgent`) actions to CloudTrail as _data events_.