AWS awscloudtrail documentation change

Service: awscloudtrail · 2025-10-25 · Documentation low

File: awscloudtrail/latest/userguide/lake-cli-manage-eds.md

Summary

Removed detailed JSON policy example for organization event data stores

Security assessment

Similar to other policy example removals, this reduces explicit permission disclosure but does not address a documented vulnerability. No security impact beyond documentation style.

Diff

diff --git a/awscloudtrail/latest/userguide/lake-cli-manage-eds.md b/awscloudtrail/latest/userguide/lake-cli-manage-eds.md
index 3a4c6b71d..9975f392b 100644
--- a//awscloudtrail/latest/userguide/lake-cli-manage-eds.md
+++ b//awscloudtrail/latest/userguide/lake-cli-manage-eds.md
@@ -190,61 +190 @@ The following example runs the `get-resource-policy` command on an organization
-Because the command was run on an organization event data store, the output shows both the provided resource-based policy and the [DelegatedAdminResourcePolicy](./cloudtrail-lake-organizations.html#cloudtrail-lake-organizations-eds-rbp) generated for the delegated administrator accounts `333333333333` and `111111111111`.
-    
-    
-    {
-      "ResourceArn": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207",
-      "ResourcePolicy": {
-        "Version": "2012-10-17",		 	 	 
-        "Statement": [{
-          "Sid": "EdsPolicyA",
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": "arn:aws:iam::666666666666:root"
-          },
-          "Action": [
-            "cloudtrail:geteventdatastore",
-            "cloudtrail:startquery",
-            "cloudtrail:describequery",
-            "cloudtrail:cancelquery",
-            "cloudtrail:generatequery",
-            "cloudtrail:generatequeryresultssummary"
-          ],
-          "Resource": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207"
-        }]
-      },
-      "DelegatedAdminResourcePolicy": {
-        "Version": "2012-10-17",		 	 	 
-        "Statement": [{
-          "Sid": "Organization-EventDataStore-Auto-Generated-Delegated-Admin-Statement",
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": ["333333333333", "111111111111"]
-          },
-          "Action": [
-            "cloudtrail:AddTags",
-            "cloudtrail:CancelQuery",
-            "cloudtrail:CreateEventDataStore",
-            "cloudtrail:DeleteEventDataStore",
-            "cloudtrail:DescribeQuery",
-            "cloudtrail:DisableFederation",
-            "cloudtrail:EnableFederation",
-            "cloudtrail:GenerateQuery",
-            "cloudtrail:GenerateQueryResultsSummary",
-            "cloudtrail:GetEventConfiguration",
-            "cloudtrail:GetEventDataStore",
-            "cloudtrail:GetInsightSelectors",
-            "cloudtrail:GetQueryResults",
-            "cloudtrail:ListEventDataStores",
-            "cloudtrail:ListQueries",
-            "cloudtrail:ListTags",
-            "cloudtrail:RemoveTags",
-            "cloudtrail:RestoreEventDataStore",
-            "cloudtrail:UpdateEventDataStore",
-            "cloudtrail:StartEventDataStoreIngestion",
-            "cloudtrail:StartQuery",
-            "cloudtrail:StopEventDataStoreIngestion",
-            "cloudtrail:UpdateEventDataStore"
-          ],
-          "Resource": "arn:aws:cloudtrail:us-east-1:888888888888:eventdatastore/example6-d493-4914-9182-e52a7934b207"
-        }]
-      }
-    }
+Because the command was run on an organization event data store, the output will show both the provided resource-based policy and the [DelegatedAdminResourcePolicy](./cloudtrail-lake-organizations.html#cloudtrail-lake-organizations-eds-rbp) generated for the delegated administrator accounts.