AWS AmazonCloudWatch documentation change
Summary
Updated terminology from 'AWS Organization' to 'organization' and 'AWS Organizations' for consistency. Clarified procedural steps and UI references. Improved grammar and phrasing throughout.
Security assessment
Changes focus on terminology consistency (e.g., 'AWS Organization' to 'organization'), UI element references (e.g., 'Overview page' to '**Overview** page'), and procedural clarifications. No evidence of addressing security vulnerabilities or introducing new security features. Mentions of service-linked roles and trusted access remain unchanged in their security context.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md b/AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md index 51096dfb3..7bced8e44 100644 --- a//AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md +++ b//AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md @@ -5 +5 @@ -Auditing telemetry configurations for your AWS OrganizationTurning on telemetry auditing for your accountDeregistering a delegated administrator accountTurning off trusted access for an AWS Organization +Auditing telemetry configurations for your organizationTurning on telemetry auditing for your accountDeregistering a delegated administrator accountTurning off trusted access for an AWS Organization @@ -9 +9 @@ Auditing telemetry configurations for your AWS OrganizationTurning on telemetry -Use the CloudWatch console to turn on telemetry auditing for your or AWS Organization or account. For an AWS Organization, CloudWatch will use a management account or a delegated administrator account to discover AWS resources and the telemetry configurations for all of the member accounts in the Organization. Turning on the telemetry auditing experience does not incur any additional cost. +Use the CloudWatch console to turn on telemetry auditing for your AWS account or organization. For an organization, CloudWatch uses a management account or a delegated administrator account to discover AWS resources and the telemetry configurations for all of the member accounts in the organization. Turning on the telemetry auditing experience does not incur any additional cost. @@ -11 +11 @@ Use the CloudWatch console to turn on telemetry auditing for your or AWS Organiz -Telemetry auditing will remain on until you turn it off. For more information, see [Turning off CloudWatch telemetry auditing](./telemetry-config-turn-off.html). +Telemetry auditing remains on until you turn it off. For more information, see [Turning off CloudWatch telemetry auditing](./telemetry-config-turn-off.html). @@ -15 +15 @@ Telemetry auditing will remain on until you turn it off. For more information, s - * Auditing telemetry configurations for your AWS Organization + * Auditing telemetry configurations for your organization @@ -26 +26 @@ Telemetry auditing will remain on until you turn it off. For more information, s -## Auditing telemetry configurations for your AWS Organization +## Auditing telemetry configurations for your organization @@ -28 +28 @@ Telemetry auditing will remain on until you turn it off. For more information, s -To turn on telemetry config for your AWS Organization, you must either use a management account or a delegated administrator account. CloudWatch will use this account to discover your Organization's AWS resources and their telemetry configurations. +To turn on telemetry config for your organization, you must use a management account or a delegated administrator account. CloudWatch uses this account to discover your organization's AWS resources and their telemetry configurations. @@ -30 +30 @@ To turn on telemetry config for your AWS Organization, you must either use a man -Before turning on telemetry auditing for your Organization, you need to enable trusted access between AWS Organizations and CloudWatch. When you enable trusted access, CloudWatch will create a service-linked role named **AWSServiceRoleForObservabilityAdmin** to support resource and telemetry configuration discovery for the Organization. The role is created in all member accounts of the Organization. For more information about the service-linked role, see [Service-linked role permissions for CloudWatch telemetry config](./using-service-linked-roles.html#service-linked-role-telemetry-config). For more information about AWS Organizations, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. +Before you can turn on telemetry auditing for your organization, you need to turn on trusted access between AWS Organizations and CloudWatch. When you turn on trusted access, CloudWatch creates a service-linked role named **AWSServiceRoleForObservabilityAdmin** to support resource and telemetry configuration discovery for the organization. The role is created in all member accounts of the organization. For more information about the service-linked role, see [Service-linked role permissions for CloudWatch telemetry config](./using-service-linked-roles.html#service-linked-role-telemetry-config). For more information about AWS Organizations, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. @@ -32 +32 @@ Before turning on telemetry auditing for your Organization, you need to enable t -To use a management account for telemetry config, be logged in with that account, enable trusted access, and turn on telemetry auditing. For more information, see Turning on telemetry auditing for your AWS Organization. +To use a management account for telemetry config, log in with the account, turn on trusted access, and then turn on telemetry auditing. For more information, see Turning on telemetry auditing for your AWS Organizations. @@ -42 +42 @@ To use a management account for telemetry config, be logged in with that account - 5. To review the role policy, choose **View permission details** and the role policy appears in a window. Choose **Enable trusted access**. The telemetry config Overview page appears and CloudWatch begins discovering AWS resources in the AWS Organization. As CloudWatch discovers resources, it automatically updates information in the Overview page. + 5. To review the role policy, choose **View permission details** and the role policy appears in a window. Choose **Enable trusted access**. The telemetry config **Overview** page appears and CloudWatch begins discovering AWS resources in the organization. As CloudWatch discovers resources, it updates information on the **Overview** page. @@ -46 +46 @@ To use a management account for telemetry config, be logged in with that account -The amount of time before resources appear in the Overview page depends on the number of member accounts and resources in your Organization or account. +The time delay before resources appear on the **Overview** page depends on the number of member accounts and resources in your organization or account. @@ -51 +51 @@ The amount of time before resources appear in the Overview page depends on the n -### Registering a delegated administrator account for your AWS Organization +### Registering a delegated administrator account for your organization @@ -53 +53 @@ The amount of time before resources appear in the Overview page depends on the n -A delegated administrator account is a member account that shares administrator access for service-managed permissions. The account you want to register as a delegated administrator must be in your AWS Organization. A delegated administrator account for your Organization has effects outside of CloudWatch, so make sure you understand this account type before following this procedure. For more information, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. +A delegated administrator account is a member account that shares administrator access for service-managed permissions. The account that you register as a delegated administrator must be in your organization. A delegated administrator account for your organization has effects outside of CloudWatch, so make sure that you understand this account type before you follow this procedure. For more information, see [ Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. @@ -67 +67 @@ To remove or change the delegated administrator account, deregister the account - 5. In the **Register delegated administrator** window, in the **Delegated administrator account ID** field, enter the 12-digit Organization member account ID. + 5. On the **Register delegated administrator** page, for **Delegated administrator account ID** , enter the 12-digit account ID for an organization member. @@ -74 +74 @@ To remove or change the delegated administrator account, deregister the account -### Turning on telemetry auditing for your AWS Organization +### Turning on telemetry auditing for your AWS Organizations @@ -76 +76 @@ To remove or change the delegated administrator account, deregister the account -Turn on telemetry auditing for your AWS Organization to monitor the telemetry for the AWS resources across all your member accounts. This also turns on the telemetry auditing experience for individual accounts. You can also turn on the telemetry auditing experience for only your account. For more information, see Turning on telemetry auditing for your account. +Turn on telemetry auditing for your AWS Organizations to monitor the telemetry for the AWS resources across all your member accounts. This also turns on the telemetry auditing experience for individual accounts. You can also turn on the telemetry auditing experience for only your account. For more information, see Turning on telemetry auditing for your account. @@ -84 +84 @@ You can turn off trusted access for your AWS Organization. For more information, - 3. Choose **Turn on** , then the**Organization** tab. The telemetry config Overview page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it automatically updates information in the Overview page. + 3. Choose **Turn on** , and then choose the **Organization** tab. The telemetry config **Overview** page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it updates information in the **Overview** page. @@ -88 +88 @@ You can turn off trusted access for your AWS Organization. For more information, -The amount of time before resources appear in the Overview page depends on the number of member accounts and resources in your Organization or account. +The delay before resources appear on the **Overview** page depends on the number of member accounts and resources in your organization or account. @@ -95 +95 @@ The amount of time before resources appear in the Overview page depends on the n -Turn on telemetry auditing for your AWS account to monitor the telemetry for the AWS resources in that account. If you have an AWS Organization, turn on telemetry config for your Organization instead. For more information, see Turning on telemetry auditing for your AWS Organization. +Turn on telemetry auditing for your AWS account to monitor telemetry for the AWS resources in that account. If you have an organization in AWS Organizations, turn on telemetry config for your organization instead. For more information, see Turning on telemetry auditing for your AWS Organizations. @@ -101 +101 @@ Turn on telemetry auditing for your AWS account to monitor the telemetry for the - 3. Choose **Turn on** , then **This account** , if you are using a management account or a delegated admin account. The telemetry config Overview page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it automatically updates information in the Overview page. + 3. Choose **Turn on** , then **This account** , if you are using a management account or a delegated administrator account. The telemetry config **Overview** page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it updates information on the **Overview** page. @@ -105 +105 @@ Turn on telemetry auditing for your AWS account to monitor the telemetry for the -The amount of time before resources appear in the Overview page depends on the number of member accounts and resources in your Organization or account. +The delay before resources appear on the **Overview** page depends on the number of member accounts and resources in your organization or account. @@ -118,3 +118 @@ Deregister the delegated administrator account before turning off trusted access - 3. Choose the **Organization** tab. - - 4. Choose **Deregister**. + 3. On the **Organization** tab, choose **Deregister**. @@ -122 +120 @@ Deregister the delegated administrator account before turning off trusted access - 5. In the **Deregister delegated administrator** window, choose **Deregister**. + 4. On the **Deregister delegated administrator** page, choose **Deregister**. @@ -127 +125 @@ Deregister the delegated administrator account before turning off trusted access -To register an account as a delegated administrator, see Registering a delegated administrator account for your AWS Organization. +To register an account as a delegated administrator, see Registering a delegated administrator account for your organization. @@ -131 +129 @@ To register an account as a delegated administrator, see Registering a delegated -Trusted access extends the functionality of managing the AWS Organization's management account to other AWS services. When you turn off trusted access, trusted access between the Organization and all AWS services will stop, not just CloudWatch. +Trusted access extends the functionality of the management account in AWS Organizations to other AWS services. When you turn off trusted access, trusted access between your organization and all AWS services—not just CloudWatch—will stop. @@ -133 +131 @@ Trusted access extends the functionality of managing the AWS Organization's mana -If you no longer want trusted access enabled for your AWS Organization, you can turn it off. For more information, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. +If you no longer want trusted access turned on for your organization, you can turn it off. For more information, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. @@ -137 +135 @@ If you no longer want trusted access enabled for your AWS Organization, you can -Before turning off trusted access for an AWS Organization, deregister the delegated administrator account. For more information, see Deregistering a delegated administrator account. +Before turning off trusted access for an organization, deregister the delegated administrator account. For more information, see Deregistering a delegated administrator account.