AWS AmazonS3 documentation change
Summary
Added example CloudTrail log entries for S3 Tables maintenance management events
Security assessment
Expanded logging examples improve audit trail documentation but do not indicate a security vulnerability fix.
Diff
diff --git a/AmazonS3/latest/userguide/s3-tables-log-files.md b/AmazonS3/latest/userguide/s3-tables-log-files.md index 33b577221..14e2fbe7b 100644 --- a//AmazonS3/latest/userguide/s3-tables-log-files.md +++ b//AmazonS3/latest/userguide/s3-tables-log-files.md @@ -5 +5 @@ -Example – CloudTrail log file for GetObject data eventExample – CloudTrail log file for PutObject data event +Example – CloudTrail log file for GetObject data eventExample – CloudTrail log file for a table maintenance management eventExample – CloudTrail log file for PutObject data event @@ -14,0 +15,2 @@ A AWS CloudTrail log file includes information about the requested API operation + * Example – CloudTrail log file for a table maintenance management event + @@ -78,0 +81,44 @@ The following example shows a CloudTrail log file example that demonstrates the +## Example – CloudTrail log file for a table maintenance management event + +The following is a CloudTrail log file example that demonstrates a maintenance event for table compaction performed by S3 as part of automatic table maintenance. For more information on events for table maintenance, see [CloudTrail management events for S3 Tables maintenance ](./s3-tables-logging.html#s3-tables-maintenance-events) + + + { + "eventVersion": "1.11", + "userIdentity": { + "type": "AWSService", + "invokedBy": "maintenance.s3tables.amazonaws.com" + }, + "eventTime": "2025-09-18T20:13:14Z", + "eventSource": "s3tables.amazonaws.com", + "eventName": "TablesMaintenanceEvent", + "awsRegion": "us-east-1", + "sourceIPAddress": "maintenance.s3tables.amazonaws.com", + "userAgent": "maintenance.s3tables.amazonaws.com", + "requestParameters": null, + "responseElements": null, + "eventID": "b8f96329-ef5c-32b5-94f6-eeed9061ea32", + "readOnly": false, + "resources": [ + { + "accountId": "111122223333", + "type": "AWS::S3Tables::TableBucket", + "ARN": "arn:aws:s3tables:us-east-1:111122223333:bucket/amzn-s3-demo-table-bucket" + }, + { + "accountId": "111122223333", + "type": "AWS::S3Tables::Table", + "ARN": "arn:aws:s3tables:us-east-1:111122223333:bucket/amzn-s3-demo-table-bucket/table/7ff7750e-23b3-481e-a90a-7d87d423d336" + } + ], + "eventType": "AwsServiceEvent", + "managementEvent": true, + "recipientAccountId": "111122223333", + "sharedEventID": "62a57826-a66e-479b-befa-0e65663ee9e8", + "serviceEventDetails": { + "activityType": "icebergCompaction" + }, + "eventCategory": "Management" + } + + @@ -148 +194 @@ Logging with AWS CloudTrail for S3 Tables -Working with S3 Vectors and vector buckets +Monitoring metrics with Amazon CloudWatch