AWS Security ChangesHomeSearch

AWS inspector medium security documentation change

Service: inspector · 2025-06-16 · Security-related medium

File: inspector/latest/user/encryption-rest.md

Summary

Added note about KMS service principal change for CloudTrail logs (codeguru-reviewer to 'q') effective June 2025

Security assessment

Alerts users to a future logging change critical for audit trail accuracy, which impacts security monitoring.

Diff

diff --git a/inspector/latest/user/encryption-rest.md b/inspector/latest/user/encryption-rest.md
index f6f31aadb..e7ad359c5 100644
--- a//inspector/latest/user/encryption-rest.md
+++ b//inspector/latest/user/encryption-rest.md
@@ -127,0 +128,4 @@ To configure encryption for your account using a customer managed key you must b
+###### Note
+
+Effective June 13th, 2025, the service principal in AWS KMS requests logged in CloudTrail during code snippet encryption/decryption is changing from "codeguru-reviewer" to "q". 
+