AWS AWSCloudFormation documentation change
Summary
Added ContextKeySelectors for event filtering and MaxEventSize requirement when using selectors
Security assessment
ContextKeySelectors enable more granular event filtering which could be used for security monitoring purposes, but no direct vulnerability addressed
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudtrail-eventdatastore.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-cloudtrail-eventdatastore.md index 5bfb2e0c2..8a79bacce 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-cloudtrail-eventdatastore.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-cloudtrail-eventdatastore.md @@ -22,0 +23 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "ContextKeySelectors" : [ [ContextKeySelector](./aws-properties-cloudtrail-eventdatastore-contextkeyselector.html), ... ], @@ -28,0 +30 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "MaxEventSize" : String, @@ -46,0 +49,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + ContextKeySelectors: + - [ContextKeySelector](./aws-properties-cloudtrail-eventdatastore-contextkeyselector.html) @@ -53,0 +58 @@ To declare this entity in your AWS CloudFormation template, use the following sy + MaxEventSize: String @@ -107,0 +113,13 @@ _Required_ : No +`ContextKeySelectors` + + +The list of context key selectors that are configured for the event data store. + +_Required_ : No + + _Type_ : Array of [ContextKeySelector](./aws-properties-cloudtrail-eventdatastore-contextkeyselector.html) + + _Maximum_ : `2` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -215,0 +234,13 @@ _Minimum_ : `1` + +`MaxEventSize` + + +The maximum allowed size for events to be stored in the specified event data store. If you are using context key selectors, MaxEventSize must be set to Large. + +_Required_ : No + + _Type_ : String + + _Allowed values_ : `Standard | Large` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)