AWS managedservices documentation change

Service: managedservices · 2025-08-19 · Documentation low

File: managedservices/latest/accelerate-guide/tr-logging.md

Summary

Added detailed logging documentation for Compute Optimizer recommendations, including separate log locations, formats, and examples. Updated structure to differentiate between Trusted Advisor and Compute Optimizer logging paths and content.

Security assessment

Enhanced logging documentation improves audit capabilities for remediation actions involving Compute Optimizer recommendations. While not addressing a specific security flaw, detailed logging supports security monitoring and compliance efforts by providing clearer trails for both Trusted Advisor and Compute Optimizer-related remediations.

Diff

diff --git a/managedservices/latest/accelerate-guide/tr-logging.md b/managedservices/latest/accelerate-guide/tr-logging.md
index c0af8ae88..844fc19c3 100644
--- a//managedservices/latest/accelerate-guide/tr-logging.md
+++ b//managedservices/latest/accelerate-guide/tr-logging.md
@@ -13,11 +12,0 @@ For more information, see [Trusted Remediator integration with QuickSight](./tr-
-###### Topics
-
-  * Remediation item log
-
-  * Automated remediation execution log
-
-  * Member accounts log
-
-
-
-
@@ -28 +17,5 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log location**
+**Remediation item log location for Compute Optimizer recommendations**
+
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs/compute_optimizer_remediation_items/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`- `Resource ID`.json`
+
+**Remediation item log location for Trusted Advisor checks**
@@ -36 +29,14 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log format**
+**Compute Optimizer Remediation item log format**
+    
+    
+    {
+      "AccountID": "Account_ID",
+      "ComputeOptimizerCheckID": "Compute Optimizer check ID",
+      "ComputeOptimizerCheckName": "Compute Optimizer check name",
+      "ResourceID": "Resource ID",
+      "RemediationTime": Remediation creation time,
+      "ExecutionMode": "Automated or Manual",
+      "OpsItemID": "OpsItem ID"
+    }
+
+**Trusted Advisor Remediation item log format**
@@ -46 +52 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-       "OpsItemID": OpsItem ID,
+       "OpsItemID": OpsItem ID
@@ -48,0 +55 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
+**Compute Optimizer Remediation item log format sample content**
@@ -50 +57,12 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log format sample content**
+    
+    {
+      "AccountID": "123456789012",
+      "ComputeOptimizerCheckID": "compute-optimizer-ebs",
+      "ComputeOptimizerCheckName": "EBS volumes",
+      "ResourceID": "vol-1235589366f77aca7",
+      "RemediationTime": 1755044783,
+      "ExecutionMode": "Manual",
+      "OpsItemID": "oi-b8888b38fe78"
+    }
+
+**Trusted Advisor Remediation item log format sample content**
@@ -62,2 +80 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-
-## Automated remediation execution log
+## Automated remediation execution log, Compute Optimizer and Trusted Advisor
@@ -67 +84 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log location**
+**Compute Optimizer Automated remediation log location**
@@ -69 +86 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`-`Resource ID`.json`
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Compute Optimizer recommendation ID`.json`
@@ -71 +88 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log location example**
+**Trusted Advisor Automated remediation log location**
@@ -73 +90 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2023-02-06/1675660573-DAvU99Dc4C-vol-00bd8965660b4c16d.json`
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`-`Resource ID`.json`
@@ -75 +92 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log format**
+**Compute Optimizer Automated remediation log location example**
@@ -76,0 +94 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
+`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2025-06-26/1750908858-123456789012-compute-optimizer-ec2-i-1235173471d2cd789.json`
@@ -78,5 +96 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-    {
-       "OpsItemID": OpsItem ID,
-       "SSMExecutionID": SSM Execution ID,
-       "SSMExecutionStatus": Success/Failed,       
-     }
+**Trusted Advisor Automated remediation log location example**
@@ -83,0 +98 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
+`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2023-02-06/1675660573-DAvU99Dc4C-vol-00bd8965660b4c16d.json`
@@ -91,4 +106 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-        "SSMExecutionStatus": "Success"
-    }
-    
-          
+        "SSMExecutionStatus": "Success"}