AWS awscloudtrail documentation change
Summary
Updated service-linked role documentation link for organization trails
Security assessment
The change corrects a hyperlink reference but does not alter security-related content or address vulnerabilities.
Diff
diff --git a/awscloudtrail/latest/userguide/cloudtrail-troubleshooting.md b/awscloudtrail/latest/userguide/cloudtrail-troubleshooting.md index 43836ef9d..4851043cc 100644 --- a//awscloudtrail/latest/userguide/cloudtrail-troubleshooting.md +++ b//awscloudtrail/latest/userguide/cloudtrail-troubleshooting.md @@ -60 +60 @@ If the organization trail is multi-Region and the home Region is an opt-in Regio -CloudTrail uses the service-linked role named [AWSServiceRoleForCloudTrail](./using-service-linked-roles.html#slr-permissions) to support organization trails. This service-linked role allows CloudTrail to perform actions on organization resources, such as `organizations:DescribeOrganization`. If the organization's resource-based policy denies an action that is allowed in the service-linked role policy, CloudTrail will not be able to perform the action even though it is allowed in the service-linked role policy. To resolve the issue, fix the organization's resource-based policy so that it doesn't deny actions that are allowed in the service-linked role policy. +CloudTrail uses the service-linked role named [AWSServiceRoleForCloudTrail](./using-service-linked-roles-create-slr-for-org-trails.html#service-linked-role-permissions-create-slr-for-org-trails) to support organization trails. This service-linked role allows CloudTrail to perform actions on organization resources, such as `organizations:DescribeOrganization`. If the organization's resource-based policy denies an action that is allowed in the service-linked role policy, CloudTrail will not be able to perform the action even though it is allowed in the service-linked role policy. To resolve the issue, fix the organization's resource-based policy so that it doesn't deny actions that are allowed in the service-linked role policy.