AWS AmazonCloudWatch documentation change
Summary
Updated service telemetry table to indicate metrics and logs availability for various AWS resources
Security assessment
The changes document monitoring capabilities (metrics/logs) for multiple services, which aids security monitoring and auditing. However, there is no direct evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/services-with-related-telemetry.md b/AmazonCloudWatch/latest/monitoring/services-with-related-telemetry.md index 06844f446..5f5864964 100644 --- a//AmazonCloudWatch/latest/monitoring/services-with-related-telemetry.md +++ b//AmazonCloudWatch/latest/monitoring/services-with-related-telemetry.md @@ -15,141 +15,138 @@ AWS Service | Resource | Metrics | Logs -Amazon API Gateway | `AWS::ApiGateway::Method` | | -Amazon API Gateway | `AWS::ApiGateway::Resource` | | -Amazon API Gateway | `AWS::ApiGateway::RestApi` | | -Amazon API Gateway | `AWS::ApiGateway::Stage` | | -Amazon API Gateway | `AWS::ApiGateway::VpcLink` | | -Amazon API Gateway V2 | `AWS::ApiGatewayV2::Integration` | | -Amazon API Gateway V2 | `AWS::ApiGatewayV2::Route` | | -Amazon API Gateway V2 | `AWS::ApiGatewayV2::Stage` | | -Amazon API Gateway V2 | `AWS::ApiGatewayV2::Api` | | -AWS App Runner | `AWS::AppRunner::Service` | | -AWS Application Migration Service | `AWS::MGN::SourceServer` | | -Amazon AppStream 2.0 | `AWS::AppStream::Fleet` | | -AWS AppSync | `AWS::AppSync::GraphQLApi` | | -AWS B2B Data Interchange | `AWS::B2BI::Transformer` | | -AWS Backup gateway | `AWS::BackupGateway::Hypervisor` | | -Amazon Bedrock | `AWS::Bedrock::KnowledgeBase` | | -Amazon Bedrock | `AWS::Bedrock::ModelId` | | -Amazon Chime | `AWS::Chime::SipMediaApplication` | | -Amazon Chime | `AWS::Chime::VoiceConnector` | | -AWS Clean Rooms | `AWS::CleanRooms::Membership` | | -AWS CloudFormation | | | -AWS CloudFormation Hooks | | | -Amazon CloudFront | `AWS::CloudFront::Distribution` | | -AWS CloudTrail | `AWS::CloudTrail::EventDataStore` | | -AWS CloudTrail | `AWS::CloudTrail::Trail` | | -Amazon CloudWatch | `AWS::CloudWatch::MetricStream` | | -Amazon CloudWatch Evidently | `AWS::Evidently::Project` | | -Amazon CloudWatch Logs | `AWS::Logs::LogGroup` | | -Amazon CloudWatch RUM | `AWS::RUM::AppMonitor` | | -Amazon CloudWatch Synthetics | `AWS::Synthetics::Canary` | | -AWS CodeBuild | `AWS::CodeBuild::Project` | | -Amazon CodeWhisperer | `AWS::CodeWhisperer::Customization` | | -Amazon Cognito user pools | `AWS::Cognito::UserPool` | | -AWS Config | `AWS::Config::ConfigRule` | | -Amazon Connect | `AWS::Connect::Instance` | | -AWS Database Migration Service | `AWS::DMS::ReplicationInstance` | | -AWS Database Migration Service | `AWS::DMS::ReplicationTask` | | -AWS DataSync | `AWS::Datasync::Agent` | | -AWS DataSync | `AWS::DataSync::Task` | | -AWS Directory Service | `AWS::DirectoryService::MicrosoftAD` | | -Amazon DynamoDB | `AWS::DynamoDB::Table` | | -DynamoDB Accelerator | `AWS::DAX::Cluster` | | -Amazon EC2 | `AWS::EC2::CapacityReservation` | | -Amazon EC2 | `AWS::EC2::Instance` | | -Amazon EC2 | `AWS::EC2::FlowLog` | | -Amazon EC2 | `AWS::EC2::NATGateway` | | -Amazon EC2 | `AWS::EC2::NetworkInterface` | | -Amazon EC2 | `AWS::EC2::Subnet` | | -Amazon EC2 | `AWS::EC2::TransitGateway` | | -Amazon EC2 | `AWS::EC2::TransitGatewayAttachment` | | -Amazon EC2 | `AWS::EC2::VerifiedAccessInstance` | | -Amazon EC2 | `AWS::EC2::Volume` | | -Amazon EC2 | `AWS::EC2::VPC` | | -Amazon EC2 | `AWS::EC2::VPNConnection` | | -Amazon EC2 Auto Scaling | `AWS::AutoScaling::AutoScalingGroup` | | -AWS Elastic Beanstalk | `AWS::ElasticBeanstalk::Environment` | | -Amazon Elastic Container Service | `AWS::ECS::Cluster` | | -Amazon Elastic Container Service | `AWS::ECS::Service` | | -Amazon Elastic File System | `AWS::EFS::AccessPoint` | | -Amazon Elastic File System | `AWS::EFS::FileSystem` | | -Amazon Elastic File System | `AWS::EFS::MountTarget` | | -Amazon Elastic Kubernetes Service | `AWS::EKS::Cluster` | | -Amazon Elastic Kubernetes Service on AWS Fargate | | | -Elastic Load Balancing | `AWS::ElasticLoadBalancing::LoadBalancer` | | -Elastic Load Balancing V2 | `AWS::ElasticLoadBalancingV2::LoadBalancer` | | -Elastic Load Balancing V2 | `AWS::ElasticLoadBalancingV2::TargetGroup` | | -Amazon ElastiCache | `AWS::ElastiCache::CacheCluster` | | -AWS Elemental MediaConvert | `AWS::MediaConvert::Queue` | | -AWS Elemental MediaLive | | | -AWS Elemental MediaLive | `AWS::MediaLive::Channel` | | -AWS Elemental MediaPackage | `AWS::MediaPackage::Channel` | | -AWS Elemental MediaStore | `AWS::MediaStore::Container` | | -AWS Elemental MediaTailor | | | -Amazon EMR | `AWS::EMR::Cluster` | | -Amazon EventBridge | `AWS::Events::Rule` | | -Amazon EventBridge Pipes | `AWS::Pipes::Pipe` | | -AWS Fault Injection Service | `AWS::FIS::ExperimentTemplate` | | -Amazon FinSpace | `AWS::FinSpace::Environment` | | -Amazon FSx | `AWS::FSx::FileSystem` | | -Amazon GameLift Servers | `AWS::GameLift::Fleet` | | -AWS Glue | `AWS::Glue::Job` | | -AWS Identity Sync | `AWS::IdentitySync::Profile` | | -Amazon Interactive Video Service | `AWS::IVSChat::LoggingConfiguration` | | -AWS IoT | `AWS::IoT::TopicRule` | | -AWS IoT 1-Click | `AWS::IoT1Click::Device` | | -AWS IoT Analytics | | | -AWS IoT Events | | | -AWS IoT FleetWise | `AWS::IoTFleetWise::Vehicle` | | -AWS IoT SiteWise | | | -AWS Key Management Service | `AWS::KMS::Key` | | -Amazon Managed Service for Apache Flink | `AWS::KinesisAnalytics::Application` | | -Amazon Data Firehose | `AWS::KinesisFirehose::DeliveryStream` | | -Amazon Kinesis Data Streams | `AWS::Kinesis::Stream` | | -Amazon Kinesis Video Streams | `AWS::KinesisVideo::Stream` | | -AWS Lambda | `AWS::Lambda::Function` | | -Amazon Lex | | | -AWS Mainframe Modernization | `AWS::M2::Application` | | -Amazon Managed Streaming for Apache Kafka | `AWS::Kafka::Cluster` | | -Amazon Managed Streaming for Apache Kafka | `AWS::KafkaConnect::Connector` | | -Amazon Managed Streaming for Apache Kafka | `AWS::MSK::Cluster` | | -Amazon MemoryDB | `AWS::Mmemorydb::Cluster` | | -Amazon MQ | `AWS::AmazonMQ::Broker` | | -AWS Network Firewall | `AWS::NetworkFirewall::Firewall` | | -Amazon OpenSearch Service | `AWS::OpenSearchService::Domain` | | -Amazon OpenSearch Service | | | -Amazon OpenSearch Service Ingestion | `AWS::OSIS::Pipeline` | | -AWS OpsWorks | `AWS::OpsWorks::Instance` | | -AWS OpsWorks | `AWS::OpsWorks::Layer` | | -AWS OpsWorks | `AWS::OpsWorks::Stack` | | -AWS Organizations | `AWS::Organizations::Organization` | | -AWS Outposts | `AWS::Outposts::Outpost` | | -Amazon Managed Service for Prometheus | `AWS::Prometheus::Resource` | | -Amazon Q Business | | | -Amazon QLDB | `AWS::QLDB::Ledger` | | -Amazon QuickSight | `AWS::Quicksight::Dashboard` | | -Amazon QuickSight | `AWS::Quicksight::DataSet` | | -Amazon Redshift | `AWS::Redshift::Cluster` | | -Amazon Redshift Serverless | `AWS::RedshiftServerless::Workgroup` | | -Amazon Relational Database Service | `AWS::RDS::DBCluster` | | -Amazon Relational Database Service | `AWS::RDS::DBInstance` | | -AWS RoboMaker | `AWS::RoboMaker::SimulationJob` | | -Amazon Route 53 | `AWS::Route53::HealthCheck` | | -Amazon Route 53 | `AWS::Route53::HostedZone` | | -Amazon Route 53 Resolver | `AWS::Route53Resolver::ResolverEndpoint` | | -Amazon S3 | `AWS::S3::Bucket` | | -Amazon SageMaker AI | `AWS::SageMaker::Endpoint` | | -Amazon SageMaker AI | `AWS::SageMaker::Workteam` | | -AWS Service Catalog | `AWS::ServiceCatalog::CloudFormationProduct` | | -Amazon Simple Email Service | `AWS::SES::ConfigurationSet` | | -Amazon Simple Notification Service | `AWS::SNS::Topic` | | -Amazon Simple Notification Service | | | -Amazon Simple Queue Service | `AWS::SQS::Queue` | | -AWS Step Functions | `AWS::StepFunctions::Activity` | | -AWS Step Functions | `AWS::StepFunctions::StateMachine` | | -AWS Storage Gateway | `AWS::StorageGateway::Gateway` | | -AWS Storage Gateway | `AWS::StorageGateway::Share` | | -AWS Transfer Family | `AWS::Transfer::Server` | | -Amazon VPC Lattice | `AWS::VpcLattice::Service` | | -AWS WAFV2 | `AWS::WAFv2::WebAcl` | | -Amazon WorkMail | `AWS::WorkMail::Organization` | | -Amazon WorkSpaces | `AWS::WorkSpaces::Workspace` | | +Amazon API Gateway | `AWS::ApiGateway::Method` | Yes | No +Amazon API Gateway | `AWS::ApiGateway::Resource` | Yes | No +Amazon API Gateway | `AWS::ApiGateway::RestApi` | Yes | No +Amazon API Gateway | `AWS::ApiGateway::Stage` | Yes | Yes +Amazon API Gateway | `AWS::ApiGateway::VpcLink` | Yes | No +Amazon API Gateway V2 | `AWS::ApiGatewayV2::Integration` | Yes | No +Amazon API Gateway V2 | `AWS::ApiGatewayV2::Route` | Yes | No +Amazon API Gateway V2 | `AWS::ApiGatewayV2::Stage` | No | Yes +Amazon API Gateway V2 | `AWS::ApiGatewayV2::Api` | Yes | No +AWS App Runner | `AWS::AppRunner::Service` | No | Yes +AWS Application Migration Service | `AWS::MGN::SourceServer` | Yes | No +Amazon AppStream 2.0 | `AWS::AppStream::Fleet` | Yes | Yes +AWS AppSync | `AWS::AppSync::GraphQLApi` | Yes | Yes +AWS B2B Data Interchange | `AWS::B2BI::Transformer` | No | Yes +AWS Backup gateway | `AWS::BackupGateway::Hypervisor` | No | Yes +Amazon Bedrock | `AWS::Bedrock::KnowledgeBase` | No | Yes +Amazon Bedrock | `AWS::Bedrock::ModelId` | Yes | No +Amazon Chime | `AWS::Chime::SipMediaApplication` | No | Yes +Amazon Chime | `AWS::Chime::VoiceConnector` | No | Yes +AWS Clean Rooms | `AWS::CleanRooms::Membership` | No | Yes +AWS CloudFormation | | No | Yes +AWS CloudFormation Hooks | | No | Yes +Amazon CloudFront | `AWS::CloudFront::Distribution` | Yes | Yes +AWS CloudTrail | `AWS::CloudTrail::EventDataStore` | No | Yes +AWS CloudTrail | `AWS::CloudTrail::Trail` | No | Yes +Amazon CloudWatch | `AWS::CloudWatch::MetricStream` | Yes | No +Amazon CloudWatch Evidently | `AWS::Evidently::Project` | No | Yes +Amazon CloudWatch Logs | `AWS::Logs::LogGroup` | Yes | No +Amazon CloudWatch RUM | `AWS::RUM::AppMonitor` | No | Yes +Amazon CloudWatch Synthetics | `AWS::Synthetics::Canary` | Yes | No +AWS CodeBuild | `AWS::CodeBuild::Project` | Yes | No +Amazon CodeWhisperer | `AWS::CodeWhisperer::Customization` | No | Yes +Amazon Cognito user pools | `AWS::Cognito::UserPool` | Yes | Yes +AWS Config | `AWS::Config::ConfigRule` | No | Yes +Amazon Connect | `AWS::Connect::Instance` | No | Yes +AWS Database Migration Service | `AWS::DMS::ReplicationInstance` | Yes | No +AWS Database Migration Service | `AWS::DMS::ReplicationTask` | Yes | No +AWS DataSync | `AWS::Datasync::Agent` | Yes | No +AWS DataSync | `AWS::DataSync::Task` | Yes | Yes +AWS Directory Service | `AWS::DirectoryService::MicrosoftAD` | No | Yes +Amazon DynamoDB | `AWS::DynamoDB::Table` | Yes | No +DynamoDB Accelerator | `AWS::DAX::Cluster` | Yes | No +Amazon EC2 | `AWS::EC2::CapacityReservation` | Yes | No +Amazon EC2 | `AWS::EC2::Instance` | Yes | No +Amazon EC2 | `AWS::EC2::FlowLog` | Yes | No +Amazon EC2 | `AWS::EC2::NATGateway` | Yes | No +Amazon EC2 | `AWS::EC2::NetworkInterface` | Yes | Yes +Amazon EC2 | `AWS::EC2::Subnet` | Yes | Yes +Amazon EC2 | `AWS::EC2::TransitGateway` | Yes | No +Amazon EC2 | `AWS::EC2::TransitGatewayAttachment` | Yes | Yes +Amazon EC2 | `AWS::EC2::VerifiedAccessInstance` | No | Yes +Amazon EC2 | `AWS::EC2::Volume` | Yes | No +Amazon EC2 | `AWS::EC2::VPC` | No | Yes +Amazon EC2 | `AWS::EC2::VPNConnection` | Yes | Yes