AWS managedservices documentation change

Service: managedservices · 2025-04-25 · Documentation medium

File: managedservices/latest/accelerate-guide/acc-log-mgmt.md

Summary

Restructured log file list format, added auth.log/syslog/dpkg.log, removed cloud-init.log, standardized Windows paths

Security assessment

Added security-relevant logs like auth.log and syslog improves audit capabilities, but doesn't address a specific vulnerability. Removal of some logs might reduce visibility but no direct evidence of security impact.

Diff

diff --git a/managedservices/latest/accelerate-guide/acc-log-mgmt.md b/managedservices/latest/accelerate-guide/acc-log-mgmt.md
index a4375aef7..b66f34655 100644
--- a//managedservices/latest/accelerate-guide/acc-log-mgmt.md
+++ b//managedservices/latest/accelerate-guide/acc-log-mgmt.md
@@ -79,25 +78,0 @@ The following log files are sent to CloudWatch Logs, into a log group of the sam
-  * /var/log/amazon/ssm/amazon-ssm-agent.log
-
-  * /var/log/amazon/ssm/errors.log
-
-  * /var/log/audit/audit.log
-
-  * /var/log/cloud-init-output.log
-
-  * /var/log/cloud-init.log
-
-  * /var/log/cron
-
-  * /var/log/maillog
-
-  * /var/log/messages
-
-  * /var/log/secure
-
-  * /var/log/spooler
-
-  * /var/log/yum.log
-
-  * /var/log/zypper.log
-
-
@@ -104,0 +80,15 @@ The following log files are sent to CloudWatch Logs, into a log group of the sam
+    /var/log/amazon/ssm/amazon-ssm-agent.log
+    /var/log/amazon/ssm/errors.log
+    /var/log/audit/audit.log
+    /var/log/auth.log
+    /var/log/cloud-init-output.log
+    /var/log/cron
+    /var/log/dnf.log
+    /var/log/dpkg.log
+    /var/log/maillog
+    /var/log/messages
+    /var/log/secure
+    /var/log/spooler
+    /var/log/syslog
+    /var/log/yum.log
+    /var/log/zypper.log
@@ -110,9 +99,0 @@ For more information, see [Manually Create or Edit the CloudWatch Agent Configur
-  * C:\\\ProgramData\\\Amazon\\\SSM\\\Logs\\\amazon-ssm-agent.log
-
-  * C:\\\ProgramData\\\Amazon\\\SSM\\\Logs\\\amazon-cloudwatch-agent.log
-
-  * C:\\\ProgramData\\\Amazon\\\SSM\\\Logs\\\errors.log
-
-  * C:\\\cfn\\\log\\\cfn-init.log
-
-
@@ -119,0 +101,4 @@ For more information, see [Manually Create or Edit the CloudWatch Agent Configur
+    C:\\ProgramData\\Amazon\\SSM\\Logs\\amazon-ssm-agent.log
+    C:\\ProgramData\\Amazon\\SSM\\Logs\\amazon-cloudwatch-agent.log
+    C:\\ProgramData\\Amazon\\SSM\\Logs\\errors.log
+    C:\\cfn\\log\\cfn-init.log