AWS AmazonCloudWatch documentation change
Summary
Updated scope definition to support multi-account monitoring through AWS Organizations (up to 100 accounts)
Security assessment
Enhancing observability across multiple accounts improves security monitoring capabilities but doesn't directly address a specific vulnerability. The change enables better cross-account visibility which is a security best practice, but isn't a response to a security incident.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-components.md b/AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-components.md index b40f05426..3235d398a 100644 --- a//AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-components.md +++ b//AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-components.md @@ -55 +55,3 @@ For more information about agents, see [View Network Flow Monitor metrics in Clo -In Network Flow Monitor, the _scope_ is the account and the resources it owns that Network Flow Monitor returns or displays performance metrics for. At this time, Network Flow Monitor sets the scope to the AWS account that enables the feature. Network Flow Monitor generates a unique **scope ID** for the scope. Queries for metrics data use the scope ID to determine the resources that the Network Flow Monitor generates metrics for. (You must install agents to gather and submit metrics data before you can view the performance metrics for an account with Network Flow Monitor.) +In Network Flow Monitor, the _scope_ is the account or accounts that you have observability for when you look at network performance indicators. If you sign in as a management account and configure AWS Organizations with CloudWatch, you can set your scope to more than one account in your organization (up to 100 accounts total). Otherwise, if you sign in with an AWS account that does not have management permissions in Organizations, or if you have not configured Organizations with CloudWatch, Network Flow Monitor sets your scope to the account that you're signed in with. + +Network Flow Monitor generates a unique **scope ID** for the scope. Queries for metrics data use the scope ID to determine the resources that the Network Flow Monitor generates metrics for. (You must install agents to gather and submit metrics data before you can view the performance metrics for an account with Network Flow Monitor.)