AWS AmazonCloudWatch documentation change
Summary
Updated terminology from 'AWS Organization' to 'Organizations' and 'telemetry config' to 'telemetry configuration' for consistency. Clarified delegated administrator account usage scope and trusted access procedures.
Security assessment
Changes are primarily terminology updates (e.g., 'AWS Organization' to 'Organizations') and grammatical improvements. The clarification about delegated administrator accounts being usable outside CloudWatch improves documentation accuracy but doesn't address specific vulnerabilities. No evidence of security vulnerability fixes or new security features added.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md b/AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md index 7bced8e44..334f01671 100644 --- a//AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md +++ b//AmazonCloudWatch/latest/monitoring/telemetry-config-turn-on.md @@ -5 +5 @@ -Auditing telemetry configurations for your organizationTurning on telemetry auditing for your accountDeregistering a delegated administrator accountTurning off trusted access for an AWS Organization +Auditing telemetry configurations for your organizationTurning on telemetry auditing for your accountDeregistering a delegated administrator accountTurning off trusted access for Organizations @@ -21 +21 @@ Telemetry auditing remains on until you turn it off. For more information, see [ - * Turning off trusted access for an AWS Organization + * Turning off trusted access for Organizations @@ -28 +28 @@ Telemetry auditing remains on until you turn it off. For more information, see [ -To turn on telemetry config for your organization, you must use a management account or a delegated administrator account. CloudWatch uses this account to discover your organization's AWS resources and their telemetry configurations. +To turn on telemetry configuration for your organization, you must use a management account or a delegated administrator account. CloudWatch uses this account to discover your organization's AWS resources and their telemetry configurations. @@ -32 +32 @@ Before you can turn on telemetry auditing for your organization, you need to tur -To use a management account for telemetry config, log in with the account, turn on trusted access, and then turn on telemetry auditing. For more information, see Turning on telemetry auditing for your AWS Organizations. +To use a management account for telemetry configuration, log in with the account, turn on trusted access, and then turn on telemetry auditing. For more information, see Turning on telemetry auditing for your AWS Organizations. @@ -42 +42 @@ To use a management account for telemetry config, log in with the account, turn - 5. To review the role policy, choose **View permission details** and the role policy appears in a window. Choose **Enable trusted access**. The telemetry config **Overview** page appears and CloudWatch begins discovering AWS resources in the organization. As CloudWatch discovers resources, it updates information on the **Overview** page. + 5. To review the role policy, choose **View permission details** and the role policy appears in a window. Choose **Enable trusted access**. The telemetry configuration **Overview** page appears and CloudWatch begins discovering AWS resources in the organization. As CloudWatch discovers resources, it updates information on the **Overview** page. @@ -53 +53 @@ The time delay before resources appear on the **Overview** page depends on the n -A delegated administrator account is a member account that shares administrator access for service-managed permissions. The account that you register as a delegated administrator must be in your organization. A delegated administrator account for your organization has effects outside of CloudWatch, so make sure that you understand this account type before you follow this procedure. For more information, see [ Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. +A delegated administrator account is a member account that shares administrator access for service-managed permissions. The account that you register as a delegated administrator must be in your organization. A delegated administrator account for your organization can be used outside of CloudWatch, so make sure that you understand this account type before you follow this procedure. For more information, see [ Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. @@ -78 +78 @@ Turn on telemetry auditing for your AWS Organizations to monitor the telemetry f -You can turn off trusted access for your AWS Organization. For more information, see Turning off trusted access for an AWS Organization. +You can turn off trusted access across all your member accounts. For more information, see Turning off trusted access for Organizations. @@ -95 +95 @@ The delay before resources appear on the **Overview** page depends on the number -Turn on telemetry auditing for your AWS account to monitor telemetry for the AWS resources in that account. If you have an organization in AWS Organizations, turn on telemetry config for your organization instead. For more information, see Turning on telemetry auditing for your AWS Organizations. +Turn on telemetry auditing for your AWS account to monitor telemetry for the AWS resources in that account. If you have an organization in AWS Organizations, turn on telemetry configuration for your organization instead. For more information, see Turning on telemetry auditing for your AWS Organizations. @@ -101 +101 @@ Turn on telemetry auditing for your AWS account to monitor telemetry for the AWS - 3. Choose **Turn on** , then **This account** , if you are using a management account or a delegated administrator account. The telemetry config **Overview** page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it updates information on the **Overview** page. + 3. Choose **Turn on** , then **This account** , if you are using a management account or a delegated administrator account. The telemetry configuration **Overview** page appears and CloudWatch begins discovering AWS resources in your account. As CloudWatch discovers resources, it updates information on the **Overview** page. @@ -112 +112 @@ The delay before resources appear on the **Overview** page depends on the number -Deregister the delegated administrator account before turning off trusted access for your AWS Organization. You can also deregister a delegated administrator account if it no longer has access to the appropriate AWS resources for telemetry auditing or to choose a different AWS Organization account to be the delegated administrator. This account will not be able to perform account management tasks for your AWS Organization. For more information, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. +Deregister the delegated administrator account before turning off trusted access for Organizations. You can also deregister a delegated administrator account if it no longer has access to the appropriate AWS resources for telemetry auditing or to choose a different member account to be the delegated administrator. This account will not be able to perform account management tasks for Organizations. For more information, see [Amazon CloudWatch and AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudwatch.html) in the AWS Organizations User Guide. @@ -127 +127 @@ To register an account as a delegated administrator, see Registering a delegated -## Turning off trusted access for an AWS Organization +## Turning off trusted access for Organizations