AWS AWSCloudFormation documentation change
Summary
Documentation updates for CloudTrail ContextKeySelector and CloudWatch InsightRule log transformation
Security assessment
ContextKeySelector documentation addition describes security-related event filtering capabilities, though not tied to a specific security issue
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/doc-history.md b/AWSCloudFormation/latest/TemplateReference/doc-history.md index e3fa5e243..fd6483887 100644 --- a//AWSCloudFormation/latest/TemplateReference/doc-history.md +++ b//AWSCloudFormation/latest/TemplateReference/doc-history.md @@ -10,0 +11,10 @@ Change| Description| Date +[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudTrail)| The following structure was added: AWS::CloudTrail::EventDataStore ContextKeySelector + +[AWS::CloudTrail::EventDataStore ContextKeySelector](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudtrail-eventdatastore-contextkeyselector.html) + A structure that defines criteria for filtering events based on specific context key values in the event record. +| May 29, 2025 +[Updated resource](./aws-template-resource-type-ref.html#AWS_CloudWatch)| The following resource was updated: AWS::CloudWatch::InsightRule + +[AWS::CloudWatch::InsightRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-insightrule.html) + The AWS::CloudWatch::InsightRule resource can now displays whether the rule is evaluated on the transformed versions of logs, for log groups that have Log transformation enabled. For more information, see [Transform logs during ingestion](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html). +| May 25, 2025