AWS solutions documentation change
Summary
Updated log retention strategy to include multi-tier storage (CloudWatch 90 days, S3 1 year, Glacier 6 years) with automatic archiving for audit compliance
Security assessment
The change documents improved log retention practices aimed at audit compliance and cost optimization, but there is no evidence of addressing a specific security vulnerability. Enhanced retention supports regulatory requirements (a security-adjacent feature) rather than patching a security flaw.
Diff
diff --git a/solutions/latest/innovation-sandbox-on-aws/monitoring-the-solution.md b/solutions/latest/innovation-sandbox-on-aws/monitoring-the-solution.md index 9e90bc097..0fb0efc1d 100644 --- a//solutions/latest/innovation-sandbox-on-aws/monitoring-the-solution.md +++ b//solutions/latest/innovation-sandbox-on-aws/monitoring-the-solution.md @@ -42 +42,34 @@ The dashboard displays various metrics and logs for your solution. -By default, Innovation Sandbox will retain all compute logs for one year. You can change this retention period as part of the solution’s `Compute` stack CloudFormation parameters. +Innovation Sandbox implements a multi-tier log retention strategy optimized for both cost efficiency and audit compliance: + +**Retention Tiers** + + +CloudWatch Logs + + +90 days (default) + +S3 Standard Storage + + +1 year (default) + +S3 Glacier Storage + + +6 additional years (default) + +Total Retention + + +7 years + +**Automatic Archiving** + + +Logs are automatically exported from CloudWatch to S3 every 7 days, ensuring long-term audit trail availability while minimizing CloudWatch storage costs. + +**Operational Benefits** + + +The 90-day CloudWatch retention provides sufficient time for operational troubleshooting, while the S3/Glacier archiving ensures compliance with typical audit and regulatory requirements.