AWS awscloudtrail documentation change

Service: awscloudtrail · 2025-10-25 · Documentation low

File: awscloudtrail/latest/userguide/cloudtrail-lake-organizations.md

Summary

Replaced detailed JSON policy example with generic description of output

Security assessment

The removal of a specific policy example reduces exposure of sensitive permission configurations but does not indicate a security fix. It's a documentation simplification without security evidence.

Diff

diff --git a/awscloudtrail/latest/userguide/cloudtrail-lake-organizations.md b/awscloudtrail/latest/userguide/cloudtrail-lake-organizations.md
index a1b69c00b..19480d52c 100644
--- a//awscloudtrail/latest/userguide/cloudtrail-lake-organizations.md
+++ b//awscloudtrail/latest/userguide/cloudtrail-lake-organizations.md
@@ -176,61 +176 @@ The following example runs the `get-resource-policy` command on an organization
-The following example output shows both the provided resource-based policy and the `DelegatedAdminResourcePolicy` generated for the delegated administrator accounts `333333333333` and `111111111111`.
-    
-    
-    {
-      "ResourceArn": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207",
-      "ResourcePolicy": {
-        "Version": "2012-10-17",		 	 	 
-        "Statement": [{
-          "Sid": "EdsPolicyA",
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": "arn:aws:iam::666666666666:root"
-          },
-          "Action": [
-            "cloudtrail:geteventdatastore",
-            "cloudtrail:startquery",
-            "cloudtrail:describequery",
-            "cloudtrail:cancelquery",
-            "cloudtrail:generatequery",
-            "cloudtrail:generatequeryresultssummary"
-          ],
-          "Resource": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207"
-        }]
-      },
-      "DelegatedAdminResourcePolicy": {
-        "Version": "2012-10-17",		 	 	 
-        "Statement": [{
-          "Sid": "Organization-EventDataStore-Auto-Generated-Delegated-Admin-Statement",
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": ["333333333333", "111111111111"]
-          },
-          "Action": [
-            "cloudtrail:AddTags",
-            "cloudtrail:CancelQuery",
-            "cloudtrail:CreateEventDataStore",
-            "cloudtrail:DeleteEventDataStore",
-            "cloudtrail:DescribeQuery",
-            "cloudtrail:DisableFederation",
-            "cloudtrail:EnableFederation",
-            "cloudtrail:GenerateQuery",
-            "cloudtrail:GenerateQueryResultsSummary",
-            "cloudtrail:GetEventConfiguration",
-            "cloudtrail:GetEventDataStore",
-            "cloudtrail:GetInsightSelectors",
-            "cloudtrail:GetQueryResults",
-            "cloudtrail:ListEventDataStores",
-            "cloudtrail:ListQueries",
-            "cloudtrail:ListTags",
-            "cloudtrail:RemoveTags",
-            "cloudtrail:RestoreEventDataStore",
-            "cloudtrail:UpdateEventDataStore",
-            "cloudtrail:StartEventDataStoreIngestion",
-            "cloudtrail:StartQuery",
-            "cloudtrail:StopEventDataStoreIngestion",
-            "cloudtrail:UpdateEventDataStore"
-          ],
-          "Resource": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207"
-        }]
-      }
-    }
+The output of this command will show the resource-based policy and the `DelegatedAdminResourcePolicy` policy generated for the delegated administrator accounts.