AWS managedservices documentation change

Service: managedservices · 2025-08-19 · Documentation low

File: managedservices/latest/userguide/tr-logging.md

Summary

Restructured logging documentation to differentiate between Compute Optimizer and Trusted Advisor implementations, added specific log formats, locations, and sample content for both services

Security assessment

The changes enhance logging documentation by providing explicit details about log formats/storage locations, which improves auditability and monitoring capabilities - a security best practice. However, there's no evidence this addresses an active security vulnerability.

Diff

diff --git a/managedservices/latest/userguide/tr-logging.md b/managedservices/latest/userguide/tr-logging.md
index f36d6ef25..a1d40f926 100644
--- a//managedservices/latest/userguide/tr-logging.md
+++ b//managedservices/latest/userguide/tr-logging.md
@@ -11,9 +10,0 @@ Trusted Remediator creates logs in JSON format and uploads them to Amazon Simple
-###### Topics
-
-  * Remediation item log
-
-  * Automated remediation execution log
-
-
-
-
@@ -24 +15,5 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log location**
+**Remediation item log location for Compute Optimizer recommendations**
+
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs/compute_optimizer_remediation_items/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`- `Resource ID`.json`
+
+**Remediation item log location for Trusted Advisor checks**
@@ -32 +27,14 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log format**
+**Compute Optimizer Remediation item log format**
+    
+    
+    {
+      "AccountID": "Account_ID",
+      "ComputeOptimizerCheckID": "Compute Optimizer check ID",
+      "ComputeOptimizerCheckName": "Compute Optimizer check name",
+      "ResourceID": "Resource ID",
+      "RemediationTime": Remediation creation time,
+      "ExecutionMode": "Automated or Manual",
+      "OpsItemID": "OpsItem ID"
+    }
+
+**Trusted Advisor Remediation item log format**
@@ -42 +50 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-       "OpsItemID": OpsItem ID,
+       "OpsItemID": OpsItem ID
@@ -44,0 +53 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
+**Compute Optimizer Remediation item log format sample content**
@@ -46 +55,12 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-**Remediation item log format sample content**
+    
+    {
+      "AccountID": "123456789012",
+      "ComputeOptimizerCheckID": "compute-optimizer-ebs",
+      "ComputeOptimizerCheckName": "EBS volumes",
+      "ResourceID": "vol-1235589366f77aca7",
+      "RemediationTime": 1755044783,
+      "ExecutionMode": "Manual",
+      "OpsItemID": "oi-b8888b38fe78"
+    }
+
+**Trusted Advisor Remediation item log format sample content**
@@ -58,2 +78 @@ Trusted Remediator creates the `Remediation item log` when a remediation OpsItem
-
-## Automated remediation execution log
+## Automated remediation execution log, Compute Optimizer and Trusted Advisor
@@ -63 +82 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log location**
+**Compute Optimizer Automated remediation log location**
@@ -65 +84 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`-`Resource ID`.json`
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Compute Optimizer recommendation ID`.json`
@@ -67 +86 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log location example**
+**Trusted Advisor Automated remediation log location**
@@ -69 +88 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2023-02-06/1675660573-DAvU99Dc4C-vol-00bd8965660b4c16d.json`
+`s3://ams-trusted-remediator-`delegated-administrator-account-id`-logs//remediation_executions/`remediation creation time in yyyy-mm-dd format`/`10 digits epoch time or unix timestamp`-`Trusted Advisor check ID`-`Resource ID`.json`
@@ -71 +90 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-**Automated remediation log format**
+**Compute Optimizer Automated remediation log location example**
@@ -72,0 +92 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
+`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2025-06-26/1750908858-123456789012-compute-optimizer-ec2-i-1235173471d2cd789.json`
@@ -74,5 +94 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-    {
-       "OpsItemID": OpsItem ID,
-       "SSMExecutionID": SSM Execution ID,
-       "SSMExecutionStatus": Success/Failed,       
-     }
+**Trusted Advisor Automated remediation log location example**
@@ -79,0 +96 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
+`s3://ams-trusted-remediator-`111122223333`-logs/remediation_executions/2023-02-06/1675660573-DAvU99Dc4C-vol-00bd8965660b4c16d.json`
@@ -87,4 +104 @@ Trusted Remediator creates the `Automated remediation execution log` when an aut
-        "SSMExecutionStatus": "Success"
-    }
-    
-          
+        "SSMExecutionStatus": "Success"}