AWS AmazonCloudWatch documentation change
Summary
Added documentation for deletion protection feature to prevent accidental log group deletion
Security assessment
Introduces documentation for a security feature (deletion protection) that prevents accidental data loss, but no evidence of addressing a specific security vulnerability or incident is provided in the diff.
Diff
diff --git a/AmazonCloudWatch/latest/logs/CloudWatchLogsConcepts.md b/AmazonCloudWatch/latest/logs/CloudWatchLogsConcepts.md index 58183aab0..511d35c86 100644 --- a//AmazonCloudWatch/latest/logs/CloudWatchLogsConcepts.md +++ b//AmazonCloudWatch/latest/logs/CloudWatchLogsConcepts.md @@ -40,0 +41,5 @@ Retention settings can be used to specify how long log events are kept in CloudW +**Deletion protection** + + +Deletion protection is a safeguard that prevents accidental deletion of log groups and their log streams. When enabled on a log group, deletion protection blocks all deletion operations until it is explicitly disabled. By default, deletion protection is not enabled. This optional feature helps protect critical operational and compliance data from unintended removal, such as log groups that contain audit data, and production application logs for troubleshooting and analysis. +