AWS AmazonS3 documentation change
Summary
Added same DeleteObjects logging note as in other S3 files
Security assessment
Consistency update without security implications
Diff
diff --git a/AmazonS3/latest/userguide/enable-cloudtrail-logging-for-s3.md b/AmazonS3/latest/userguide/enable-cloudtrail-logging-for-s3.md index f3da2097f..d8ec92bdb 100644 --- a//AmazonS3/latest/userguide/enable-cloudtrail-logging-for-s3.md +++ b//AmazonS3/latest/userguide/enable-cloudtrail-logging-for-s3.md @@ -44,0 +45,4 @@ CloudTrail does not populate data events in the CloudTrail event history. Additi +###### Note + +If you are logging data activity with AWS CloudTrail, the event record for an Amazon S3 `DeleteObjects` data event includes both the `DeleteObjects` event and a `DeleteObject` event for each object deleted as part of that operation. You can exclude the additional visibility about deleted objects from the event record. For more information, see [AWS CLI examples for filtering data events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/filtering-data-events.html#filtering-data-events-deleteobjects) in the _AWS CloudTrail User Guide_. +