AWS AmazonCloudWatch documentation change
Summary
Added entries for new AWSObservabilityAdminLogsCentralizationServiceRolePolicy, cross-account log centralization support, and EC2 instance store metrics collection
Security assessment
The changes document new security-related features (log centralization policies) but do not address a specific security vulnerability. The log centralization improvements enhance security posture by enabling centralized monitoring.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index 3aafb8e20..6c17079c5 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11,3 @@ Change| Description| Date +New AWSObservabilityAdminLogsCentralizationServiceRolePolicy policy| CloudWatch added the **AWSObservabilityAdminLogsCentralizationServiceRolePolicy** that grants CloudWatch permission to use telemetry data from other AWS accounts that you specify to create CloudWatch log groups, log streams, and log events in your organization's monitoring account. The SLR only provides the assume role permission to allow the CloudWatch service to assume the role in the monitoring account. For more information, see [AWSObservabilityAdminLogsCentralizationServiceRolePolicy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#service-linked-role-logscentralization).| September 17, 2025 +CloudWatch added support for Cross-account cross-Region log centralization| CloudWatch added support for the **Cross-account cross-Region log centralization** that enables CloudWatch Logs to gather log data from AWS Organizations member accounts into a central account for analysis. For more information, see [Monitor across accounts and Regions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Cross-Account-Methods.html). | September 17, 2025 +[Collect EC2 instance store volume NVMe driver metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Container-Insights-metrics-instance-store-Collect.html)| You can now use the CloudWatch agent to collect AWS NVMe driver metrics for instance store volumes attached to Nitro-based Amazon EC2 instances.| September 16, 2025