AWS awscloudtrail documentation change
Summary
Expanded documentation to include data events for CloudTrail Insights, added new CLI/API commands (list-insights-data/ListInsightsData), and updated requirements for logging Insights events to include data events
Security assessment
The changes enhance documentation about monitoring capabilities (Insights events for data events) which helps identify unusual activity, but there's no evidence of addressing a specific vulnerability. The update improves awareness of security monitoring features.
Diff
diff --git a/awscloudtrail/latest/userguide/view-insights-events.md b/awscloudtrail/latest/userguide/view-insights-events.md index 6444e39b5..4e1f93b5b 100644 --- a//awscloudtrail/latest/userguide/view-insights-events.md +++ b//awscloudtrail/latest/userguide/view-insights-events.md @@ -11 +11,8 @@ You can view, filter, and download the last 90 days of Insights events for a tra -You can lookup the last 90 days of Insights events programmatically by running the AWS CLI [lookup-events](https://docs.aws.amazon.com/cli/latest/reference/cloudtrail/lookup-events.html) command, or the [LookupEvents](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html) API operation. +You can fetch the last 90 days of Insights events programmatically: + + * For Trails logging management events by running the AWS CLI [lookup-events](https://docs.aws.amazon.com/cli/latest/reference/cloudtrail/lookup-events.html) command, or the [LookupEvents](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html) API operation. + + * For Trails logging data events by running the AWS CLI [list-insights-data](https://docs.aws.amazon.com/cli/latest/reference/cloudtrail/list-insights-data.html) command, or the [ListInsightsData](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListInsightsData.html) API operation. + + + @@ -17 +24 @@ For descriptions of Insights events record fields for trails, see [CloudTrail re -The **Insights** page and AWS CLI `lookup-events` command only list Insights events if you've enabled Insights on a trail that is logging management events. For information about enabling Insights on a trail, see [Enabling CloudTrail Insights on an existing trail with the console](./insights-events-enable.html#insights-events-enable-trail) and [Logging Insights events for a trail using the AWS CLI](./insights-events-CLI-enable.html#insights-events-CLI-enable-trails). +The **Insights** page and AWS CLI `lookup-events` or `list-insights-data` command only list Insights events if you've enabled Insights on a trail that is logging management or data events. For information about enabling Insights on a trail, see [Enabling CloudTrail Insights on an existing trail with the console](./insights-events-enable.html#insights-events-enable-trail) and [Logging Insights events for a trail using the AWS CLI](./insights-events-CLI-enable.html#insights-events-CLI-enable-trails). @@ -19 +26 @@ The **Insights** page and AWS CLI `lookup-events` command only list Insights eve -To log Insights events on the API call rate, the trail must log `write` management events. To log Insights events on the API error rate, the trail must log `read` or `write` management events. +To log Insights events on the API call rate, the trail must log `write` management or data events. To log Insights events on the API error rate, the trail must log `read` or `write` management or data events.