AWS clean-rooms documentation change
Summary
Added documentation for 'Detailed monitoring' feature with CloudWatch integration, updated step numbering
Security assessment
The change introduces operational monitoring capabilities (query performance/resource utilization) which aids security posture through improved observability, but doesn't address a specific vulnerability.
Diff
diff --git a/clean-rooms/latest/userguide/create-collab-queries.md b/clean-rooms/latest/userguide/create-collab-queries.md index aacbac965..7a0fe5db3 100644 --- a//clean-rooms/latest/userguide/create-collab-queries.md +++ b//clean-rooms/latest/userguide/create-collab-queries.md @@ -75 +75,7 @@ You will receive logs generated from SQL queries in your Amazon CloudWatch Logs - 4. Under **Allowed query results regions** , select one or more AWS Regions where you want to send query results. + 4. If you want to enable **Detailed monitoring** , select the **Enable detailed monitoring** checkbox. + +The analysis runner and configured payor can choose to enable detailed metrics when they create their membership. When enabled, detailed monitoring metrics will be published to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. These metrics will be available to the analysis runner and configured payor in their respective AWS accounts. + +For more information about CloudWatch pricing, see [CloudWatch Pricing](https://aws.amazon.com/cloudwatch/pricing/). + + 5. Under **Allowed query results regions** , select one or more AWS Regions where you want to send query results. @@ -85 +91 @@ For more information about Regions, see [Regions and Endpoints](https://docs.aws - 5. (Optional) Manage access to your data with **Automatic change request approval** by configuring which settings can be changed automatically without manual approvals for a change request. By default, some settings can only be changed by submitting a change request which must be approved by all members before it can take effect. + 6. (Optional) Manage access to your data with **Automatic change request approval** by configuring which settings can be changed automatically without manual approvals for a change request. By default, some settings can only be changed by submitting a change request which must be approved by all members before it can take effect. @@ -107 +113 @@ If you choose this option, you can track all collaboration configuration modific - 6. (Optional) If you want to enable the **Cryptographic computing** capability, select the **Enable cryptographic computing** checkbox. + 7. (Optional) If you want to enable the **Cryptographic computing** capability, select the **Enable cryptographic computing** checkbox. @@ -147 +153 @@ Verify these configurations carefully before completing the next step. After you - 7. If you want to enable **Tags** for the collaboration resource, choose **Add new tag** and then enter the **Key** and **Value** pair. + 8. If you want to enable **Tags** for the collaboration resource, choose **Add new tag** and then enter the **Key** and **Value** pair. @@ -149 +155 @@ Verify these configurations carefully before completing the next step. After you - 8. Choose **Next**. + 9. Choose **Next**.