AWS awscloudtrail documentation change

Service: awscloudtrail · 2025-11-22 · Documentation low

File: awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.md

Summary

Expanded log file naming conventions to include Insights, NetworkActivity, and Aggregated event types

Security assessment

Clarifies log file categorization for different event types, improving operational visibility. While auditing is security-relevant, this change does not directly address vulnerabilities or document security features.

Diff

diff --git a/awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.md b/awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.md
index c351122e9..074f31da6 100644
--- a//awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.md
+++ b//awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.md
@@ -38 +38,7 @@ CloudTrail publishes log files to your S3 bucket in a gzip archive. In the S3 bu
-  * The string "CloudTrail"
+  * The string "CloudTrail" for data, management events
+
+  * The string "CloudTrail-Insight" for insights events
+
+  * The string "CloudTrail-NetworkActivity" for network activity events
+
+  * The string "CloudTrail-Aggregated" for aggregated events for data events
@@ -53 +59 @@ CloudTrail publishes log files to your S3 bucket in a gzip archive. In the S3 bu
-The following example shows a complete log file object name:
+The following example shows a complete log file object name for data, management events:
@@ -57,0 +64,15 @@ The following example shows a complete log file object name:
+The following example shows a complete log file object name for insight events:
+    
+    
+    amzn-s3-demo-bucket/prefix_name/AWSLogs/Account ID/CloudTrail-Insight/region/YYYY/MM/DD/file_name.json.gz
+
+The following example shows a complete log file object name for network activity events:
+    
+    
+    amzn-s3-demo-bucket/prefix_name/AWSLogs/Account ID/CloudTrail-NetworkActivity/region/YYYY/MM/DD/file_name.json.gz
+
+The following example shows a complete log file object name for data event aggregations:
+    
+    
+    amzn-s3-demo-bucket/prefix_name/AWSLogs/Account ID/CloudTrail-Aggregated/region/YYYY/MM/DD/file_name.json.gz
+