AWS awscloudtrail documentation change
Summary
Added documentation for 17 new AWS services supporting CloudTrail data event logging, including Amazon AIDevOps, Bedrock, GuardDuty, NovaAct, Redshift, Support, and Transform services. Fixed a typo in the SageMaker MLflow entry.
Security assessment
The change documents new services that can be monitored via CloudTrail data events, including security-relevant services like GuardDuty malware scans. While this enhances security visibility capabilities, there's no evidence of addressing a specific vulnerability. The GuardDuty malware scan logging addition specifically enables security monitoring.
Diff
diff --git a/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.md b/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.md index 7ed131f71..3bb3a6f98 100644 --- a//awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.md +++ b//awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.md @@ -256 +256 @@ Amazon SageMaker AI | Amazon SageMaker AI API activity on [experiment trial comp -Amazon SageMaker AI; | Amazon SageMaker AI MLflow API activity. | **SageMaker MLflow** | `AWS::SageMaker::MlflowTrackingServer` +Amazon SageMaker AI | Amazon SageMaker AI MLflow API activity. | **SageMaker MLflow** | `AWS::SageMaker::MlflowTrackingServer` @@ -274,0 +275,21 @@ AWS X-Ray | [X-Ray API activity](https://docs.aws.amazon.com/xray/latest/devguid +Amazon AIDevOps | AIDevOps API activity on agent spaces. | **Agent Space** | `AWS::AIDevOps::AgentSpace` +Amazon AIDevOps | AIDevOps API activity on associations. | **AIDevOps association** | `AWS::AIDevOps::Association` +Amazon AIDevOps | AIDevOps API activity on operator app teams. | **AIDevOps operator app team** | `AWS::AIDevOps::OperatorAppTeam` +Amazon AIDevOps | AIDevOps API activity on pipeline metadata. | **AIDevOps Pipelines Metadata** | `AWS::AIDevOps::PipelineMetadata` +Amazon AIDevOps | AIDevOps API activity on services. | **AIDevOps service** | `AWS::AIDevOps::Service` +Amazon Bedrock | Bedrock API activity on advanced optimize prompt jobs. | **AdvancedOptimizePromptJob** | `AWS::Bedrock::AdvancedOptimizePromptJob` +Amazon Bedrock AgentCore | Bedrock AgentCore API activity on evaluators. | **Bedrock-AgentCore Evaluator** | `AWS::BedrockAgentCore::Evaluator` +Amazon Cost Optimization | CloudOptimization API activity on profiles. | **CloudOptimization Profile** | `AWS::CloudOptimization::Profile` +Amazon Cost Optimization | CloudOptimization API activity on recommendations. | **CloudOptimization Recommendation** | `AWS::CloudOptimization::Recommendation` +Amazon GuardDuty | GuardDuty API activity on malware scans. | **GuardDuty malware scan** | `AWS::GuardDuty::MalwareScan` +Amazon NovaAct | Amazon NovaAct API activity on workflow definitions. | **Workflow definition** | `AWS::NovaAct::WorkflowDefinition` +Amazon NovaAct | Amanzon NovaAct API activity on workflow runs. | **Workflow run** | `AWS::NovaAct::WorkflowRun` +Amazon Redshift | Redshift API activity on clusters. | **Amazon Redshift Cluster** | `AWS::Redshift::Cluster` +Amazon Support | SupportAccess API activity on tenants. | **SupportAccess tenant** | `AWS::SupportAccess::Tenant` +Amazon Support | SupportAccess API activity on trusting accounts. | **SupportAccess trusting account** | `AWS::SupportAccess::TrustingAccount` +Amazon Support | SupportAccess API activity on trusting roles. | **SupportAccess trusting role** | `AWS::SupportAccess::TrustingRole` +Amazon Transform | Transform API activity on agent instances. | **Transform agent instance** | `AWS::Transform::AgentInstance` +Amazon Transform Custom | Transform Custom API activity on campaigns. | **Transform-Custom campaign** | `AWS::TransformCustom::Campaign` +Amazon Transform Custom | Transform Custom API activity on conversations. | **Transform-Custom conversation** | `AWS::TransformCustom::Conversation` +Amazon Transform Custom | Transform Custom API activity on knowledge items. | **Transform-Custom knowledge item** | `AWS::TransformCustom::KnowledgeItem` +Amazon Transform Custom | Transform Custom API activity on packages. | **Transform-Custom package** | `AWS::TransformCustom::Package`