AWS awscloudtrail documentation change
Summary
Added Important note about trail deletion impacts similar to CLI documentation
Security assessment
This mirrors the CLI documentation update to emphasize log retention after trail deletion. While security-relevant for audit trail awareness, there is no evidence of addressing a specific vulnerability.
Diff
diff --git a/awscloudtrail/latest/userguide/cloudtrail-delete-trails-console.md b/awscloudtrail/latest/userguide/cloudtrail-delete-trails-console.md index 7234d51fd..53ca1ae4f 100644 --- a//awscloudtrail/latest/userguide/cloudtrail-delete-trails-console.md +++ b//awscloudtrail/latest/userguide/cloudtrail-delete-trails-console.md @@ -8,0 +9,6 @@ You can delete trails with the CloudTrail console. If an organization's manageme +###### Important + +While deleting a CloudTrail trail is an irreversible action, CloudTrail does not delete log files in the Amazon S3 bucket for that trail, the Amazon S3 bucket itself, or the CloudWatch log group to which the trail delivers events. Deleting a multi-Region trail will stop logging of events in all AWS Regions enabled in your AWS account. Deleting a single-Region trail will stop logging of events in that Region only. It will not stop logging of events in other Regions even if the trails in those other Regions have identical names to the deleted trail. + +For information about account closure and deletion of CloudTrail trails, see [AWS account closure and trails](./cloudtrail-account-closure.html). +