AWS AmazonCloudWatch documentation change
Summary
Clarified Auto Scaling policy reference by specifying 'Amazon EC2 Auto Scaling policy' instead of generic 'Auto Scaling policy'
Security assessment
The change adds specificity to policy types but does not introduce new security controls or address vulnerabilities. The existing security context about IAM permissions remains unchanged.
Diff
diff --git a/AmazonCloudWatch/latest/cli/cli-mon-put-metric-alarm.md b/AmazonCloudWatch/latest/cli/cli-mon-put-metric-alarm.md index f302aed44..bd28e0ffe 100644 --- a//AmazonCloudWatch/latest/cli/cli-mon-put-metric-alarm.md +++ b//AmazonCloudWatch/latest/cli/cli-mon-put-metric-alarm.md @@ -40 +40 @@ If you are using an AWS Identity and Access Management (IAM) account to create o -If you have read/write permissions for Amazon CloudWatch but not for Amazon EC2, you can still create an alarm but the stop or terminate actions won’t be performed on the Amazon EC2 instance. However, if you are later granted permission to use the associated Amazon EC2 APIs, the alarm actions you created earlier will be performed. For more information about IAM permissions, see [Permissions and Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/PermissionsAndPolicies.html) in _IAM User Guide_.If you are using an IAM role (for example, an Amazon EC2 instance profile), you cannot stop or terminate the instance using alarm actions. However, you can still see the alarm state and perform any other actions such as Amazon SNS notifications or Amazon EC2 Auto Scaling policies.If you are using temporary security credentials granted using the AWS Security Token Service (AWS STS), you cannot stop or terminate an Amazon EC2 instance using alarm actions. Type: String Valid values: An ARN for an Amazon SNS topic, an Auto Scaling policy, or an ARN to stop, terminate, or recover an Amazon EC2 instance. Default: n/a Required: No +If you have read/write permissions for Amazon CloudWatch but not for Amazon EC2, you can still create an alarm but the stop or terminate actions won’t be performed on the Amazon EC2 instance. However, if you are later granted permission to use the associated Amazon EC2 APIs, the alarm actions you created earlier will be performed. For more information about IAM permissions, see [Permissions and Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/PermissionsAndPolicies.html) in _IAM User Guide_.If you are using an IAM role (for example, an Amazon EC2 instance profile), you cannot stop or terminate the instance using alarm actions. However, you can still see the alarm state and perform any other actions such as Amazon SNS notifications or Amazon EC2 Auto Scaling policies.If you are using temporary security credentials granted using the AWS Security Token Service (AWS STS), you cannot stop or terminate an Amazon EC2 instance using alarm actions. Type: String Valid values: An ARN for an Amazon SNS topic, an Amazon EC2 Auto Scaling policy, or an ARN to stop, terminate, or recover an Amazon EC2 instance. Default: n/a Required: No