AWS AWSCloudFormation documentation change
Summary
Updated property descriptions and added detailed documentation including constraints (pattern, min, max) for CloudWatch logging configuration properties in EMR clusters.
Security assessment
The change adds documentation for security-relevant features like log encryption key ARN and specifies input validation patterns. This improves clarity on security configurations but does not indicate a fix for a specific security issue. The addition of the 'EncryptionKeyArn' property description directly documents a security feature for encrypting logs.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-cloudwatchlogconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-cloudwatchlogconfiguration.md index a0fb30b2c..e09b4d0d6 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-cloudwatchlogconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-emr-cluster-cloudwatchlogconfiguration.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `CloudWatchLogConfiguration` property type specifies Property description not available. for an [AWS::EMR::Cluster](./aws-resource-emr-cluster.html). +Holds CloudWatch log configuration settings and metadata that specify settings like log files to monitor and where to send them. @@ -42 +42 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +Specifies if CloudWatch logging is enabled. @@ -53 +53 @@ _Required_ : Yes -Property description not available. +The ARN of the encryption key used to encrypt the logs. @@ -58,0 +59,6 @@ _Required_ : No + _Pattern_ : `[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\r\n\t]*` + +_Minimum_ : `0` + + _Maximum_ : `10280` + @@ -64 +70 @@ _Required_ : No -Property description not available. +The name of the CloudWatch log group where logs are published. @@ -69,0 +76,6 @@ _Required_ : No + _Pattern_ : `[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\r\n\t]*` + +_Minimum_ : `0` + + _Maximum_ : `10280` + @@ -75 +87 @@ _Required_ : No -Property description not available. +The prefix of the log stream name. @@ -80,0 +93,6 @@ _Required_ : No + _Pattern_ : `[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\r\n\t]*` + +_Minimum_ : `0` + + _Maximum_ : `10280` + @@ -86 +104 @@ _Required_ : No -Property description not available. +A map of log types to file names for publishing logs to the standard output or standard error streams for CloudWatch. Valid log types include STEP_LOGS, SPARK_DRIVER, and SPARK_EXECUTOR. Valid file names for each type include STDOUT and STDERR.