AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2025-08-28 · Documentation low

File: AmazonCloudWatch/latest/logs/AWS-logs-infrastructure-V2-XRayTraces.md

Summary

Removed detailed IAM policy examples for X-Ray trace delivery permissions

Security assessment

Deletes policy examples without replacement. While this could impact security documentation completeness, there is no indication of addressing a specific vulnerability.

Diff

diff --git a/AmazonCloudWatch/latest/logs/AWS-logs-infrastructure-V2-XRayTraces.md b/AmazonCloudWatch/latest/logs/AWS-logs-infrastructure-V2-XRayTraces.md
index fc58bffb6..66e729813 100644
--- a//AmazonCloudWatch/latest/logs/AWS-logs-infrastructure-V2-XRayTraces.md
+++ b//AmazonCloudWatch/latest/logs/AWS-logs-infrastructure-V2-XRayTraces.md
@@ -11,58 +10,0 @@ To enable sending traces to AWS X-Ray, you must be signed in with the following
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "ReadWriteAccessForLogDeliveryActions",
-                "Effect": "Allow",
-                "Action": [
-                    "logs:GetDelivery",
-                    "logs:GetDeliverySource",
-                    "logs:PutDeliveryDestination",
-                    "logs:GetDeliveryDestinationPolicy",
-                    "logs:DeleteDeliverySource",
-                    "logs:PutDeliveryDestinationPolicy",
-                    "logs:CreateDelivery",
-                    "logs:GetDeliveryDestination",
-                    "logs:PutDeliverySource",
-                    "logs:DeleteDeliveryDestination",
-                    "logs:DeleteDeliveryDestinationPolicy",
-                    "logs:DeleteDelivery",
-                    "logs:UpdateDeliveryConfiguration"
-                ],
-                "Resource": [
-                    "arn:aws:logs:US East (N. Virginia):111122223333:delivery:*",
-                    "arn:aws:logs:US East (N. Virginia):111122223333:delivery-source:*",
-                    "arn:aws:logs:US East (N. Virginia):111122223333:delivery-destination:*"
-                ]
-            },
-            {
-                "Sid": "ListAccessForLogDeliveryActions",
-                "Effect": "Allow",
-                "Action": [
-                    "logs:DescribeDeliveryDestinations",
-                    "logs:DescribeDeliverySources",
-                    "logs:DescribeDeliveries",
-                    "logs:DescribeConfigurationTemplates"
-                ],
-                "Resource": "*"
-            },
-            {
-                "Sid": "AllowUpdatesToResourcePolicyXRay",
-                "Effect": "Allow",
-                "Action": [
-                    "xray:PutResourcePolicy",
-                    "xray:ListResourcePolicies"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-    
-
@@ -73,34 +14,0 @@ The destination account where the traces are being sent must have a resource pol
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "AWSLogDeliveryWrite20150319",
-                "Effect": "Allow",
-                "Action": [
-                    "xray:PutTraceSegments"
-                ],
-                "Resource": "*",
-                "Condition": {
-                    "StringEquals": {
-                        "aws:SourceAccount": [
-                            "0123456789"
-                        ]
-                    },
-                    "ArnLike": {
-                        "aws:SourceArn": [
-                        "arn:aws:logs:US East (N. Virginia):111122223333:delivery-source:my-delivery-source"
-                        ]
-                    }
-                }
-            }
-        ]
-    }
-    
-