AWS detective documentation change
Summary
Fixed URL formatting in three locations (EKS permissions, Security Lake OCSF reference, and raw logs query link)
Security assessment
Changes only correct URL paths without modifying security content. The mention of required IAM permissions (ram:ListResources) was pre-existing and not altered.
Diff
diff --git a/detective/latest/userguide/securitylake-integration.md b/detective/latest/userguide/securitylake-integration.md index 844f709b0..72132f6ae 100644 --- a//detective/latest/userguide/securitylake-integration.md +++ b//detective/latest/userguide/securitylake-integration.md @@ -17 +17 @@ Using this integration, you can collect logs and events from the following sourc - * Amazon Elastic Kubernetes Service (Amazon EKS) Audit Log version 2.0. — To use Amazon EKS audit logs as a source you must add `ram:ListResources` to the IAM permissions. For more details, see [Add the required IAM permissions to your account](https://docs.aws.amazon.com/detective/latest/userguide/securitylake-integration.html#iam-permissions). + * Amazon Elastic Kubernetes Service (Amazon EKS) Audit Log version 2.0. — To use Amazon EKS audit logs as a source you must add `ram:ListResources` to the IAM permissions. For more details, see [Add the required IAM permissions to your account](https://docs.aws.amazon.com//detective/latest/userguide/securitylake-integration.html#iam-permissions). @@ -22 +22 @@ Using this integration, you can collect logs and events from the following sourc -For details on how Security Lake automatically converts logs and events that come from natively-supported AWS services to the OCSF schema, see the [Amazon Security Lake User Guide](https://docs.aws.amazon.com/security-lake/latest/userguide/open-cybersecurity-schema-framework.html). +For details on how Security Lake automatically converts logs and events that come from natively-supported AWS services to the OCSF schema, see the [Amazon Security Lake User Guide](https://docs.aws.amazon.com//security-lake/latest/userguide/open-cybersecurity-schema-framework.html). @@ -24 +24 @@ For details on how Security Lake automatically converts logs and events that com -After you integrate Detective with Security Lake, Detective begins pulling raw logs from Security Lake related to AWS CloudTrail management events and Amazon VPC Flow Logs. For more details, see [Querying raw logs](https://docs.aws.amazon.com/detective/latest/userguide/profile-panel-drilldown-overall-api-volume.html#drilldown-api-volume-time-range). +After you integrate Detective with Security Lake, Detective begins pulling raw logs from Security Lake related to AWS CloudTrail management events and Amazon VPC Flow Logs. For more details, see [Querying raw logs](https://docs.aws.amazon.com//detective/latest/userguide/profile-panel-drilldown-overall-api-volume.html#drilldown-api-volume-time-range).