AWS cli documentation change

Service: cli · 2025-12-10 · Documentation medium

File: cli/latest/reference/emr/create-cluster.md

Summary

Added documentation for --monitoring-configuration parameter with CloudWatch logging settings including encryption key ARN and log type specifications

Security assessment

The change adds documentation about encrypting CloudWatch logs using EncryptionKeyArn, which is a security feature. However, there is no evidence this addresses a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/emr/create-cluster.md b/cli/latest/reference/emr/create-cluster.md
index 00d612ee1..c75a59d19 100644
--- a//cli/latest/reference/emr/create-cluster.md
+++ b//cli/latest/reference/emr/create-cluster.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -1563,0 +1564,59 @@ JSON Syntax:
+`--monitoring-configuration` (structure)
+
+> Monitoring configuration for an Amazon EMR cluster. The configuration specifies CloudWatch logging settings for the cluster. You can configure the CloudWatchLogConfiguration which includes the Enabled flag (required), LogGroupName, LogStreamNamePrefix, EncryptionKeyArn, and LogTypes. The LogTypes parameter is a map of log type categories (e.g., “STEP_LOGS”, “SPARK_DRIVER”, “SPARK_EXECUTOR”) to a list of file names (e.g., “STDOUT”, “STDERR”).
+> 
+> CloudWatchLogConfiguration -> (structure)
+>
+>> CloudWatch log configuration settings and metadata that specify settings like log files to monitor and where to send them.
+>> 
+>> Enabled -> (boolean) [required]
+>>
+>>> Specifies if CloudWatch logging is enabled.
+>> 
+>> LogGroupName -> (string)
+>>
+>>> The name of the CloudWatch log group where logs are published.
+>> 
+>> LogStreamNamePrefix -> (string)
+>>
+>>> The prefix of the log stream name.
+>> 
+>> EncryptionKeyArn -> (string)
+>>
+>>> The ARN of the encryption key used to encrypt the logs.
+>> 
+>> LogTypes -> (map)
+>>
+>>> A map of log types to file names for publishing logs to the standard output or standard error streams for CloudWatch. Valid log types include STEP_LOGS, SPARK_DRIVER, and SPARK_EXECUTOR. Valid file names for each type include STDOUT and STDERR.
+>>> 
+>>> key -> (string)
+>>>
+>>>> Log type category
+>>> 
+>>> value -> (list)
+>>>
+>>>> File names (STDOUT or STDERR) for the log type
+>>>> 
+>>>> (string)
+
+Shorthand Syntax:
+    
+    
+    CloudWatchLogConfiguration={Enabled=boolean,LogGroupName=string,LogStreamNamePrefix=string,EncryptionKeyArn=string,LogTypes={KeyName1=[string,string],KeyName2=[string,string]}}
+    
+
+JSON Syntax:
+    
+    
+    {
+      "CloudWatchLogConfiguration": {
+        "Enabled": true|false,
+        "LogGroupName": "string",
+        "LogStreamNamePrefix": "string",
+        "EncryptionKeyArn": "string",
+        "LogTypes": {"string": ["string", ...]
+          ...}
+      }
+    }
+    
+
@@ -2321 +2380 @@ The following `create-cluster` example creates an Amazon EMR cluster that uses r
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »