AWS Security ChangesHomeSearch

AWS personalize documentation change

Service: personalize · 2025-07-16 · Documentation low

File: personalize/latest/dg/recording-events.md

Summary

Clarified user tracking requirements for anonymous sessions

Security assessment

Improved documentation about user session tracking without addressing security vulnerabilities or controls

Diff

diff --git a/personalize/latest/dg/recording-events.md b/personalize/latest/dg/recording-events.md
index a70bda0a4..0db4c6fa1 100644
--- a//personalize/latest/dg/recording-events.md
+++ b//personalize/latest/dg/recording-events.md
@@ -70 +70 @@ If the item, action, or user in the event is new, how the Amazon Personalize use
-If you don't record at minimum one event with a `sessionId` and `userId` for a user, Amazon Personalize won't use the activity tracked to only the `sessionId` when training. And after training completes, recommendations will no longer be based on activity tracked to the `sessionId`. 
+If you don't record at minimum one event with a `sessionId` and `userId` for a user, Amazon Personalize won't use the activity tracked to only the `sessionId` when training. And after training completes, recommendations will no longer be based on activity tracked to the `sessionId`. This will create a continuous event history for userIds before and after they log in.
@@ -74 +74 @@ You can record item interaction or action interaction events for users before th
-To record events for anonymous users (users that haven't logged in), for each event specify only a `sessionId`. Your application generates a unique `sessionId` when a user first visits your website or uses your application. You must use the same `sessionId` in all events throughout the session. Amazon Personalize uses the `sessionId` to associate events with the user before they log in. 
+To record events for anonymous users (users who haven't logged in), for each event specify only a `sessionId`. Your application generates a unique `sessionId` when a user first visits your website or uses your application. You must use the same `sessionId` in all events throughout the session. Amazon Personalize uses the `sessionId` to associate events with the user before they log in.