AWS AmazonS3 documentation change
Summary
Documented CloudTrail management events for S3 Tables maintenance operations
Security assessment
Added details about maintenance event logging enhance audit capabilities without evidence of addressing a security flaw.
Diff
diff --git a/AmazonS3/latest/userguide/s3-tables-logging.md b/AmazonS3/latest/userguide/s3-tables-logging.md index 4f37de8aa..0d8104782 100644 --- a//AmazonS3/latest/userguide/s3-tables-logging.md +++ b//AmazonS3/latest/userguide/s3-tables-logging.md @@ -5 +5 @@ -CloudTrail management events for S3 Tables CloudTrail data events for S3 Tables +CloudTrail management events for S3 Tables CloudTrail management events for S3 Tables maintenance CloudTrail data events for S3 Tables @@ -15 +15 @@ Management events provide information about management operations that are perfo -By default, CloudTrail logs management events for S3 Tables. The `eventsource` for CloudTrail management events for S3 Tables is ` s3tables.amazonaws.com`. When you set up your AWS account, CloudTrail management events are enabled by default. The following management events are logged to CloudTrail. +By default, CloudTrail logs management events for S3 Tables. The `eventsource` for CloudTrail management events for S3 Tables is ` s3tables.amazonaws.com`. When you set up your AWS account, CloudTrail management events are enabled by default. The following API actions are tracked by CloudTrail and logged as management events. @@ -73,0 +74,25 @@ For more information on CloudTrail management events, see [Logging management ev +## CloudTrail management events for S3 Tables maintenance + +S3 logs automatic maintenance operations as `TablesMaintenanceEvent` management events in CloudTrail. These events occur during operations like compaction and snapshot expiration. For more information about S3 table maintenance, see [Maintenance for tables](./s3-tables-maintenance.html). + +### How to identify maintenance events + +You can identify S3 Tables maintenance events in CloudTrail logs by these attribute values: + + * `eventSource: s3tables.amazonaws.com` + + * `eventType: AwsServiceEvent` + + * `userAgent: maintenance.s3tables.amazonaws.com` + + * `activityType:` + + * `IcebergCompaction` (for compaction) + + * `IcebergSnapshotManagement` (for snapshot expiration) + + + + +For an example of a compaction maintenance event, see [Example – CloudTrail log file for a table maintenance management event](./s3-tables-log-files.html#example-ct-log-s3tables-3). + @@ -118 +143 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Restrictions and limitations +Logging and monitoring