AWS awscloudtrail documentation change
Summary
Added clarification about IAM Identity Center 'userName' field availability in sign-in CloudTrail events.
Security assessment
Enhances documentation about user identity tracking in audit logs, aiding security monitoring. Does not address a specific vulnerability but improves security visibility.
Diff
diff --git a/awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.md b/awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.md index 59d5a15b3..aeeeb71e4 100644 --- a//awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.md +++ b//awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.md @@ -159 +159 @@ The friendly name of the identity that made the call. The value that appears in -`IdentityCenterUser` | Not present | The `onBehalfOf` section contains information about the IAM Identity Center user ID and identity store ARN for which the call was made. To learn more about how you can use these two fields, see [Identifying the user and session in IAM Identity Center user-initiated CloudTrail events](https://docs.aws.amazon.com/singlesignon/latest/userguide/sso-cloudtrail-use-cases.html#user-session-iam-identity-center) in the _IAM Identity Center User Guide_. +`IdentityCenterUser` | Not present* | The `onBehalfOf` section contains information about the IAM Identity Center user ID and identity store ARN for which the call was made. To learn more about how you can use these two fields, see [Identifying the user and session in IAM Identity Center user-initiated CloudTrail events](https://docs.aws.amazon.com/singlesignon/latest/userguide/sso-cloudtrail-use-cases.html#user-session-iam-identity-center) in the IAM Identity Center User Guide. * IAM Identity Center emits the `userName` field under the `additionalEventData` element in two sign-in CloudTrail events. For more information, see [Username in sign-in CloudTrail events ](https://docs.aws.amazon.com/singlesignon/latest/userguide/username-sign-in-cloudtrail-events.html) in the IAM Identity Center User Guide.