AWS r53recovery documentation change

Service: r53recovery · 2025-10-16 · Documentation low

File: r53recovery/latest/dg/eventbridge-region-switch.md

Summary

Removed JSON IAM policy example for CloudWatch log group permissions and replaced with placeholder content

Security assessment

The removed JSON policy was a sample IAM resource policy for EventBridge to interact with CloudWatch logs. While IAM policies are security-related, there is no evidence this change addresses a specific vulnerability. The removal may impact documentation completeness but does not directly resolve a security issue.

Diff

diff --git a/r53recovery/latest/dg/eventbridge-region-switch.md b/r53recovery/latest/dg/eventbridge-region-switch.md
index a708a1e24..b83f2c9db 100644
--- a//r53recovery/latest/dg/eventbridge-region-switch.md
+++ b//r53recovery/latest/dg/eventbridge-region-switch.md
@@ -166,0 +167,7 @@ If you create or use a CloudWatch log group to use as a target using CloudWatch
+JSON
+    
+
+****
+    
+    
+    
@@ -168,20 +174,0 @@ If you create or use a CloudWatch log group to use as a target using CloudWatch
-    {
-      "Statement": [
-        {
-          "Action": [
-            "logs:CreateLogStream",
-            "logs:PutLogEvents"
-          ],
-          "Effect": "Allow",
-          "Principal": {
-            "Service": [
-              "events.amazonaws.com",
-              "delivery.logs.amazonaws.com"
-            ]
-          },
-          "Resource": "arn:aws:logs:region:account:log-group:/aws/events/*:*",
-          "Sid": "TrustEventsToStoreLogEvent"
-        }
-      ],
-      "Version": "2012-10-17"
-    }