AWS awscloudtrail documentation change

Service: awscloudtrail · 2025-05-31 · Documentation low

File: awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.md

Summary

Expanded list of AWS services that log network activity events with CloudTrail by adding 18+ new services including AWS AppConfig, CloudHSM, DynamoDB, and security-adjacent services like Systems Manager Incident Manager

Security assessment

The change enhances security documentation by expanding visibility into network activity for additional services. While CloudHSM (hardware security modules) and Systems Manager Incident Manager have security relevance, the change itself is a routine documentation update reflecting expanded service coverage rather than addressing a specific vulnerability. Improved logging capabilities help security monitoring but aren't tied to a disclosed security issue.

Diff

diff --git a/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.md b/awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.md
index 6be9cb7c0..e49620a20 100644
--- a//awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.md
+++ b//awscloudtrail/latest/userguide/logging-network-events-with-cloudtrail.md
@@ -13 +13,11 @@ You can log network activity events for the following services:
-  * AWS CloudTrail
+  * AWS AppConfig
+
+  * AWS B2B Data Interchange
+
+  * Billing and Cost Management
+
+  * AWS Pricing Calculator
+
+  * AWS Cost Explorer
+
+  * AWS CloudHSM
@@ -16,0 +27,6 @@ You can log network activity events for the following services:
+  * AWS CloudTrail
+
+  * AWS Data Exports
+
+  * Amazon DynamoDB
+
@@ -18,0 +35,8 @@ You can log network activity events for the following services:
+  * Amazon Elastic Container Service
+
+  * Amazon EventBridge Scheduler
+
+  * AWS Free Tier
+
+  * Amazon FSx
+
@@ -20,0 +45,2 @@ You can log network activity events for the following services:
+  * AWS Invoicing
+
@@ -24,0 +51,4 @@ You can log network activity events for the following services:
+  * Amazon Lookout for Equipment
+
+  * Amazon Rekognition
+
@@ -32,0 +63,6 @@ Amazon S3 [Multi-Region Access Points](https://docs.aws.amazon.com/AmazonS3/late
+  * AWS Systems Manager Incident Manager
+
+  * Amazon Textract
+
+  * Amazon WorkMail
+
@@ -92,0 +129,14 @@ Valid values include:
+    * `appconfig.amazonaws.com`
+
+    * `b2bi.amazonaws.com`
+
+    * `bcm-data-exports.amazonaws.com`
+
+    * `bcm-pricing-calculator.amazonaws.com`
+
+    * `billing.amazonaws.com`
+
+    * `ce.amazonaws.com`
+
+    * `cloudhsm.amazonaws.com`
+
@@ -96,0 +147,2 @@ Valid values include:
+    * `dynamodb.amazonaws.com`
+
@@ -98,0 +151,10 @@ Valid values include:
+    * `ecs.amazonaws.com`
+
+    * `freetier.amazonaws.com`
+
+    * `fsx.amazonaws.com`
+
+    * `invoicing.amazonaws.com`
+
+    * `iotfleetwise.amazonaws.com`
+
@@ -102,0 +165,4 @@ Valid values include:
+    * `lookoutequipment.amazonaws.com`
+
+    * `rekognition.amazonaws.com`
+
@@ -104,0 +171,2 @@ Valid values include:
+    * `scheduler.amazonaws.com`
+
@@ -106,0 +175,6 @@ Valid values include:
+    * `ssm-contacts.amazonaws.com`
+
+    * `textract.amazonaws.com`
+
+    * `workmail.amazonaws.com`
+
@@ -1209 +1283 @@ Filtering data events by using advanced event selectors
-CloudTrail record contents for management, data, and network activity events
+Add resource tag keys and IAM global condition keys to events