AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2025-04-25 · Documentation low

File: AmazonCloudWatch/latest/monitoring/Investigations-Security.md

Summary

Expanded available Regions for Amazon Q Developer operational investigations and added Cross-Region inference documentation

Security assessment

Added documentation about cross-Region inference explaining encrypted data transmission and geographical distribution. While encryption is mentioned, there's no evidence of addressing a specific security vulnerability.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/Investigations-Security.md b/AmazonCloudWatch/latest/monitoring/Investigations-Security.md
index 86e2a55a5..1e11b6ca4 100644
--- a//AmazonCloudWatch/latest/monitoring/Investigations-Security.md
+++ b//AmazonCloudWatch/latest/monitoring/Investigations-Security.md
@@ -5 +5 @@
-User permissionsHow to control what data Amazon Q Developer has access to during investigationsEncryption of investigation data
+User permissionsHow to control what data Amazon Q Developer has access to during investigationsEncryption of investigation dataCross-Region inference
@@ -11 +11,28 @@ User permissionsHow to control what data Amazon Q Developer has access to during
-The Amazon Q Developer operational investigations feature is in preview release and is subject to change. It is currently available only in the US East (N. Virginia) and US West (Oregon) Regions.
+The Amazon Q Developer operational investigations feature is in preview release and is subject to change. It is currently available in the following Regions:
+
+  * US East (N. Virginia)
+
+  * US East (Ohio)
+
+  * US West (N. California)
+
+  * Asia Pacific (Hong Kong)
+
+  * Asia Pacific (Mumbai)
+
+  * Asia Pacific (Singapore)
+
+  * Asia Pacific (Sydney)
+
+  * Asia Pacific (Tokyo)
+
+  * Europe (Frankfurt)
+
+  * Europe (Ireland)
+
+  * Europe (Spain)
+
+  * Europe (Stockholm)
+
+
+
@@ -22,0 +50,2 @@ This section includes topics about how Amazon Q Developer operational investigat
+  * Cross-Region inference
+
@@ -328,0 +358,21 @@ As long as a previously-used key is active and Amazon Q has access to it for inv
+## Cross-Region inference
+
+Amazon Q Developer operational investigations uses _cross-Region inference_ to distribute traffic across different AWS Region. Although the data remains stored only in the primary Region, when using cross-Region inference, your investigation data might move outside of your primary Region. All data will be transmitted encrypted across Amazon’s secure network. For more information see [Cross-Region inference](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/cross-region-inference.html) in the Amazon Q Developer user guide.
+
+For details about where cross-Region inference distribution occurs for each Region, see the following table.
+
+Supported Amazon Q Developer operational investigations geography | Investigation Region | Possible inference Regions  
+---|---|---  
+**United States (US)** | US East (N. Virginia) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| US East (Ohio) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| US West (Oregon) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+**Europe (EU)** | Europe (Frankfurt) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Europe (Ireland) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Europe (Spain) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Europe (Stockholm) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+**Asia-Pacific (AP)** | Asia Pacific (Hong Kong) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Asia Pacific (Mumbai) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Asia Pacific (Singapore) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Asia Pacific (Sydney) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+| Asia Pacific (Tokyo) | US East (N. Virginia), US East (Ohio), US West (Oregon)  
+