AWS Security ChangesHomeSearch

AWS awscloudtrail documentation change

Service: awscloudtrail · 2026-01-25 · Documentation low

File: awscloudtrail/latest/userguide/lake-query-generator.md

Summary

Renamed 'query generation' to 'query summarization' and updated IAM opt-out action from cloudtrail:GenerateQuery to cloudtrail:GenerateQueryResultsSummary

Security assessment

Changes reflect feature renaming and IAM action updates without security implications. The data handling statement remains unchanged (data remains in-region, encrypted transmission). No evidence of security vulnerability being addressed.

Diff

diff --git a/awscloudtrail/latest/userguide/lake-query-generator.md b/awscloudtrail/latest/userguide/lake-query-generator.md
index 12bcbc01a..e9d8bf837 100644
--- a//awscloudtrail/latest/userguide/lake-query-generator.md
+++ b//awscloudtrail/latest/userguide/lake-query-generator.md
@@ -27 +27 @@ This feature uses generative AI large language models (LLMs); we recommend doubl
-CloudTrail will automatically select the optimal region within your geography to process inference requests while generating queries. This maximizes available compute resources, model availability, and delivers the best customer experience. Your data will remain stored only in the region where the request originated, however, input prompts and output results may be processed outside that region. All data will be transmitted encrypted across Amazon's secure network.
+CloudTrail will automatically select the optimal region within your geography to process inference requests while summarizing queries. This maximizes available compute resources, model availability, and delivers the best customer experience. Your data will remain stored only in the region where the request originated, however, input prompts and output results may be processed outside that region. All data will be transmitted encrypted across Amazon's secure network.
@@ -44 +44 @@ CloudTrail will securely route your inference requests to available compute reso
-To opt out of the query generation feature, you can explicitly deny or remove the `cloudtrail:GenerateQuery` action from the iam policy you are using. 
+To opt out of the query summarization feature, you can explicitly deny or remove the `cloudtrail:GenerateQueryResultsSummary` action from the iam policy you are using.