AWS AWSCloudFormation documentation change
Summary
Updated descriptions for DataProtectionPolicy and RetentionInDays properties. Removed link to masking documentation.
Security assessment
The changes clarify log retention behavior and resource policy definitions but do not introduce or modify security-specific content. The removed masking documentation link does not indicate a security issue but reduces visibility of a security feature.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-logs-loggroup.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-logs-loggroup.md index bbeeb6a6f..5670a2dd8 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-logs-loggroup.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-logs-loggroup.md @@ -69,2 +68,0 @@ Creates a data protection policy and assigns it to the log group. A data protect -For more information, including a list of types of data that can be audited and masked, see [Protect sensitive log data with masking](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.html). - @@ -155 +153 @@ _Required_ : No -Property description not available. +Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy. @@ -168 +166 @@ The number of days to retain the log events in the specified log group. Possible -To set a log group so that its log events do not expire, use [DeleteRetentionPolicy](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteRetentionPolicy.html). +To set a log group so that its log events do not expire, do not specify this property.