AWS awscloudtrail documentation change

Service: awscloudtrail · 2025-05-31 · Documentation low

File: awscloudtrail/latest/userguide/lake-managed-dashboards.md

Summary

Added Enriched events dashboard section with widgets tracking resource/principal tags and IAM global condition key usage

Security assessment

The change adds monitoring capabilities for security-related attributes like principal tags, access denied actions, and IAM condition keys. While this enhances security visibility, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/awscloudtrail/latest/userguide/lake-managed-dashboards.md b/awscloudtrail/latest/userguide/lake-managed-dashboards.md
index db5e83017..07b824f10 100644
--- a//awscloudtrail/latest/userguide/lake-managed-dashboards.md
+++ b//awscloudtrail/latest/userguide/lake-managed-dashboards.md
@@ -5 +5 @@
-Security monitoring dashboardIAM activity dashboardUser activity dashboardError analysis dashboardEC2 activity dashboardOrganizations activity dashboardResource changes dashboardData events overview dashboardLambda data events dashboardDynamoDB data events dashboardS3 data events dashboardInsights events dashboardManagement events dashboardOverview dashboard
+Security monitoring dashboardIAM activity dashboardUser activity dashboardEnriched events dashboardError analysis dashboardEC2 activity dashboardOrganizations activity dashboardResource changes dashboardData events overview dashboardLambda data events dashboardDynamoDB data events dashboardS3 data events dashboardInsights events dashboardManagement events dashboardOverview dashboard
@@ -18,0 +19,2 @@ The section provides information about the available managed dashboards and prov
+  * Enriched events dashboard
+
@@ -196,0 +199,46 @@ Tracks the most frequent actions by highly privileged IAM users, such as adminis
+## Enriched events dashboard
+
+This enriched events dashboard provides insights on trends across tagged resources, principal activities, and AWS global condition keys. These insights help you analyze the most frequent resource and principal tag distributions as well as frequently used global condition keys in role sessions, requests, and principals in request context.
+
+This dashboard is available for event data stores that collect management events and includes the following widgets:
+
+**Enriched events over time**
+    
+
+Tracks the count of enriched events over time.
+
+**Most frequent resource tag key value pairs**
+    
+
+Displays the most frequently used resource tag key-value pairs across enriched events. 
+
+**Most frequent resource tag key value pairs with associated resources and users**
+    
+
+Displays the most frequently used resource tag key-value pairs, showing which resources use these tags and which users are associated with them.
+
+**Most frequent principal tag key value pairs**
+    
+
+Displays the most frequently used principal tag key-value pairs across enriched events.
+
+**Most frequent access denied actions grouped by principal tag key value pairs**
+    
+
+Displays the most frequent access-denied actions grouped by principal tag key-value pairs across enriched events.
+
+**Most frequent principal properties in IAM global condition keys**
+    
+
+Displays the most frequently used IAM global condition keys for principal properties, showing their key-value pairs and counts across all events.
+
+**Most frequent request properties in IAM global condition keys**
+    
+
+Displays the most frequently used IAM global condition keys for request properties, showing their key-value pairs and counts across all events.
+
+**Most frequent role session properties in IAM global condition keys**
+    
+
+Displays the most frequently used IAM global condition keys for role session properties, showing their key-value pairs and counts across all events.
+