AWS AmazonCloudWatch documentation change
Summary
Added documentation for four new CloudWatch Logs features: 1) Consolidated log management with governance, 2) Cross-account/region data ingestion, 3) Facets for log analysis in Insights, and 4) S3 Tables Integration for analytics access
Security assessment
The changes describe new functionality improvements rather than addressing security vulnerabilities. While governance capabilities and cross-account data collection could have security implications, there is no explicit mention of security controls, vulnerabilities, or security-specific features in the documentation updates. The changes focus on operational efficiency and analytics capabilities.
Diff
diff --git a/AmazonCloudWatch/latest/logs/DocumentHistory_cwl.md b/AmazonCloudWatch/latest/logs/DocumentHistory_cwl.md index faf06e4c6..9d6f2b2a9 100644 --- a//AmazonCloudWatch/latest/logs/DocumentHistory_cwl.md +++ b//AmazonCloudWatch/latest/logs/DocumentHistory_cwl.md @@ -12,0 +13,4 @@ Updated CloudWatchLogsFullAccess policy| Permissions for observability administr +New log management feature in CloudWatch Logs| CloudWatch consolidates log management into a single service with built-in governance capabilities without storing and maintaining multiple copies of the same data across different tools and data stores. For more information, see [Log management](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogManagement.html).| December 2, 2025 +New data ingestion and normalization feature in CloudWatch Logs| CloudWatch automatically collects AWS vended logs across accounts and AWS Regions through integrating with AWS Organizations and pre-built connectors for third-party sources. For more information, see [Transform logs during ingestion](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html).| December 2, 2025 +New analytics and querying based on data sources feature in CloudWatch Logs Insights| CloudWatch Insights introduces facets for queries. Facets are useful for analyzing logs as they allow you to interactively filter and group your data without running queries. A facet is a field in your logs (such as ServiceName or StatusCode) that enables filtering, aggregation and analysis across log groups. For more information, see [Use facets to group and explore logs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Facets.html).| December 2, 2025 +New S3 Tables Integration| The S3 Tables Integration with CloudWatch allows you to access log data ingested into CloudWatch using analytics engines such as Amazon Athena, Amazon Redshift, and third-party tools that support connection to Apache Iceberg-compatible stores.For more information, see [Access logs with S3 Tables Integration](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/s3-tables-integration.html).| December 2, 2025