AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-03-22 · Documentation medium

File: AmazonCloudWatch/latest/logs/mask-sensitive-log-data.md

Summary

Extended sensitive data masking support to include Infrequent Access log class

Security assessment

Expands documentation about existing security feature (data masking) to new resource type without indicating a prior vulnerability.

Diff

diff --git a/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.md b/AmazonCloudWatch/latest/logs/mask-sensitive-log-data.md
index a47f9d9bf..114af2acd 100644
--- a//AmazonCloudWatch/latest/logs/mask-sensitive-log-data.md
+++ b//AmazonCloudWatch/latest/logs/mask-sensitive-log-data.md
@@ -17 +17 @@ If you create a data protection policy for your entire account and you also crea
-Masking sensitive data is supported only for log groups in the Standard log class. If you create a data protection policy for all log groups in your account, it applies only to log groups in the Standard log class. For more information about log classes, see [Log classes](./CloudWatch_Logs_Log_Classes.html).
+Masking sensitive data is supported for log groups in both the Standard and Infrequent Access log classes. For more information about log classes, see [Log classes](./CloudWatch_Logs_Log_Classes.html).