AWS Security ChangesHomeSearch

AWS AmazonCloudWatch medium security documentation change

Service: AmazonCloudWatch · 2025-08-10 · Security-related medium

File: AmazonCloudWatch/latest/monitoring/download-CloudWatch-Agent-on-EC2-Instance-commandline-first.md

Summary

Updated download links to use 'us-east-1' as explicit default region in URLs, added notes about replacing region in links, and standardized region placeholder usage

Security assessment

The change ensures region-specific URLs use explicit 'us-east-1' as default and emphasize region replacement. This prevents potential misconfigurations where users might inadvertently use incorrect regional endpoints, which could lead to downloading unsigned packages or versions from unintended regions. Signature file links were also updated consistently, which is critical for package integrity verification.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/download-CloudWatch-Agent-on-EC2-Instance-commandline-first.md b/AmazonCloudWatch/latest/monitoring/download-CloudWatch-Agent-on-EC2-Instance-commandline-first.md
index 246d8563d..a3ba9677c 100644
--- a//AmazonCloudWatch/latest/monitoring/download-CloudWatch-Agent-on-EC2-Instance-commandline-first.md
+++ b//AmazonCloudWatch/latest/monitoring/download-CloudWatch-Agent-on-EC2-Instance-commandline-first.md
@@ -18 +18,3 @@ On all supported operating systems, you can download and install the CloudWatch
-For each download link, there is a general link as well as links for each Region. For example, for Amazon Linux 2023 and Amazon Linux 2 and the x86-64 architecture, three of the valid download links are:
+For each download link, there is a general link as well as links for each AWS Region.
+
+If you use the Region-specific links, replace the default Region (`us-east-1`) with the appropriate Region for your account. For example, for Amazon Linux 2023 and Amazon Linux 2 and the x86-64 architecture, three of the valid download links are:
@@ -31 +33,5 @@ You can also download a README file about the latest changes to the agent, and a
-  * `https://amazoncloudwatch-agent.s3.amazonaws.com/info/latest/RELEASE_NOTES` or `https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/info/latest/RELEASE_NOTES`
+###### Note
+
+If you use the Region-specific links, replace the default Region (`us-east-1`) with the appropriate Region for your account.
+
+  * `https://amazoncloudwatch-agent.s3.amazonaws.com/info/latest/RELEASE_NOTES` or `https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/info/latest/RELEASE_NOTES`
@@ -33 +39 @@ You can also download a README file about the latest changes to the agent, and a
-  * `https://amazoncloudwatch-agent.s3.amazonaws.com/info/latest/CWAGENT_VERSION` or `https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/info/latest/CWAGENT_VERSION`
+  * `https://amazoncloudwatch-agent.s3.amazonaws.com/info/latest/CWAGENT_VERSION` or `https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/info/latest/CWAGENT_VERSION`
@@ -40,15 +46,15 @@ Architecture | Platform | Download link | Signature file link
-x86-64 |  Amazon Linux 2023 and Amazon Linux 2 |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
-x86-64 |  Centos |  https://amazoncloudwatch-agent.s3.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
-x86-64 |  Redhat |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
-x86-64 |  SUSE |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
-x86-64 |  Debian |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb.sig  
-x86-64 |  Ubuntu |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb.sig  
-x86-64 |  Oracle |  https://amazoncloudwatch-agent.s3.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
-x86-64 |  macOS |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg.sig  
-x86-64 |  Windows |  https://amazoncloudwatch-agent.s3.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi |  https://amazoncloudwatch-agent.s3.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi.sig  
-ARM64 |  Amazon Linux 2023 and Amazon Linux 2 |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
-ARM64 |  Redhat |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
-ARM64 |  Ubuntu |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb.sig  
-ARM64 |  Debian |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb.sig  
-ARM64 |  SUSE |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
-ARM64 |  MacOS |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg.sig https://amazoncloudwatch-agent-`region`.s3.`region`.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg.sig  
+x86-64 |  Amazon Linux 2023 and Amazon Linux 2 |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
+x86-64 |  Centos |  https://amazoncloudwatch-agent.s3.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/centos/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
+x86-64 |  Redhat |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/redhat/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
+x86-64 |  SUSE |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/suse/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
+x86-64 |  Debian |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/debian/amd64/latest/amazon-cloudwatch-agent.deb.sig  
+x86-64 |  Ubuntu |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/ubuntu/amd64/latest/amazon-cloudwatch-agent.deb.sig  
+x86-64 |  Oracle |  https://amazoncloudwatch-agent.s3.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/oracle_linux/amd64/latest/amazon-cloudwatch-agent.rpm.sig  
+x86-64 |  macOS |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/darwin/amd64/latest/amazon-cloudwatch-agent.pkg.sig  
+x86-64 |  Windows |  https://amazoncloudwatch-agent.s3.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi |  https://amazoncloudwatch-agent.s3.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/windows/amd64/latest/amazon-cloudwatch-agent.msi.sig  
+ARM64 |  Amazon Linux 2023 and Amazon Linux 2 |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/amazon_linux/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
+ARM64 |  Redhat |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/redhat/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
+ARM64 |  Ubuntu |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/ubuntu/arm64/latest/amazon-cloudwatch-agent.deb.sig  
+ARM64 |  Debian |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb |  https://amazoncloudwatch-agent.s3.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/debian/arm64/latest/amazon-cloudwatch-agent.deb.sig  
+ARM64 |  SUSE |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm |  https://amazoncloudwatch-agent.s3.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/suse/arm64/latest/amazon-cloudwatch-agent.rpm.sig  
+ARM64 |  MacOS |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg |  https://amazoncloudwatch-agent.s3.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg.sig https://amazoncloudwatch-agent-`us-east-1`.s3.`us-east-1`.amazonaws.com/darwin/arm64/latest/amazon-cloudwatch-agent.pkg.sig