AWS AmazonCloudWatch documentation change
Summary
Updated permissions documentation table for multiple AWS services, removing redundant V2 permissions references in the last column for most entries and adding V2 permissions support for Network Load Balancer access logs.
Security assessment
The changes primarily correct documentation formatting by removing duplicated V2 permissions links. The addition of V2 permissions for Network Load Balancer access logs introduces documentation about updated access control capabilities, which is a security-related feature. However, there is no explicit mention of addressing a specific security vulnerability or incident in the diff.
Diff
diff --git a/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md b/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md index 1503f89a1..ee9e5c7fd 100644 --- a//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md +++ b//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md @@ -20,2 +20,2 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon Bedrock Knowledge bases logging](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-bases-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[Amazon Bedrock Agent logging](https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon Bedrock Knowledge bases logging](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-bases-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | +[Amazon Bedrock Agent logging](https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -27 +27 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[ CloudFront: access logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[ CloudFront: access logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -33 +33 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon CodeWhisperer event logs](https://docs.aws.amazon.com/eventbridge/latest/ref/events-ref-codewhisperer.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon CodeWhisperer event logs](https://docs.aws.amazon.com/eventbridge/latest/ref/events-ref-codewhisperer.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -41,3 +41,3 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[AWS Elemental MediaPackage access logs](https://docs.aws.amazon.com/mediapackage/latest/ug/access-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[AWS Elemental MediaTailor logs](https://docs.aws.amazon.com/mediatailor/latest/ug/monitoring-cw-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[AWS Entity Resolution logs](https://docs.aws.amazon.com/entityresolution/latest/userguide/what-is-service.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[AWS Elemental MediaPackage access logs](https://docs.aws.amazon.com/mediapackage/latest/ug/access-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | +[AWS Elemental MediaTailor logs](https://docs.aws.amazon.com/mediatailor/latest/ug/monitoring-cw-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | +[AWS Entity Resolution logs](https://docs.aws.amazon.com/entityresolution/latest/userguide/what-is-service.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -45 +45 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon EventBridge event buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon EventBridge event buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -51 +51 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[ IAM Identity Center error logs](https://docs.aws.amazon.com/singlesignon/latest/userguide/logging-ad-sync-errors.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[ IAM Identity Center error logs](https://docs.aws.amazon.com/singlesignon/latest/userguide/logging-ad-sync-errors.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -57 +57 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[ Amazon SES logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[ Amazon SES logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -64 +64 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[ Network Load Balancer access logs](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.html) | Vended logs | | [Supported [V1 Permissions]](./AWS-vended-logs-permissions.html) | | +[ Network Load Balancer access logs](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-access-logs.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -67 +67 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/monitoring-overview.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/monitoring-overview.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -69,3 +69,3 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[AWS RTB Fabric](https://docs.aws.amazon.com/rtb-fabric/latest/userguide/what-is-rtb-fabric.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[ Amazon Q Business connector logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connectors-list.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) -[ Amazon Q Business conversation logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/cw-logs-enable-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[AWS RTB Fabric](https://docs.aws.amazon.com/rtb-fabric/latest/userguide/what-is-rtb-fabric.html) logs | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | +[ Amazon Q Business connector logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connectors-list.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | +[ Amazon Q Business conversation logs](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/cw-logs-enable-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -77 +77 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon Simple Email Service logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon Simple Email Service logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -87 +87 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon VPC Route Server](https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon VPC Route Server](https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | @@ -89 +89 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon WorkMail audit logs](https://docs.aws.amazon.com/workmail/latest/adminguide/monitoring-audit-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) +[Amazon WorkMail audit logs](https://docs.aws.amazon.com/workmail/latest/adminguide/monitoring-audit-logging.html) | Vended logs | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) | [Supported [V2 Permissions]](./AWS-vended-logs-permissions-V2.html) |