AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-04-01 · Documentation low

File: AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md

Summary

Expanded the list of AWS log sources that CloudWatch Ingestion can audit and configure telemetry for, adding AWS Security Hub, Amazon Bedrock Agentcore Gateway, Amazon Bedrock Agentcore Memory, and Amazon CloudFront Distribution.

Security assessment

The change adds AWS Security Hub (a security service) to the list of supported log sources, which enhances security monitoring documentation. However, there is no evidence of a security issue being fixed; it's a feature expansion.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md b/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md
index 7de587fe7..bdf6256e1 100644
--- a//AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md
+++ b//AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md
@@ -9 +9 @@ You can use Amazon CloudWatch to discover and audit the state of telemetry confi
-CloudWatch Ingestion can be used to audit and configure telemetry for popular AWS Log Sources such as Amazon VPC Flow Logs (Auditing and Configuration Available), AWS WAF Logs (Auditing and Configuration Available), Amazon Route 53 Resolver Query Logs (Auditing and Configuration Available), Amazon NLB (Configuration Available), Amazon EKS Control Plane Logs (Auditing and Configuration Available), AWS CloudTrail Data Events and Management Events (Configuration Available), Amazon Bedrock AgentCore Logs (Configuration Available), and Amazon EC2 Instance Detailed Metrics (Auditing and Configuration Available). 
+CloudWatch Ingestion can be used to audit and configure telemetry for popular AWS Log Sources such as Amazon VPC Flow Logs (Auditing and Configuration Available), AWS WAF Logs (Auditing and Configuration Available), Amazon Route 53 Resolver Query Logs (Auditing and Configuration Available), Amazon NLB (Configuration Available), Amazon EKS Control Plane Logs (Auditing and Configuration Available), AWS CloudTrail Data Events and Management Events (Configuration Available), Amazon Bedrock AgentCore Logs (Configuration Available), Amazon EC2 Instance Detailed Metrics (Auditing and Configuration Available), AWS Security Hub (Configuration Available), Amazon Bedrock Agentcore Gateway (Configuration Available), Amazon Bedrock Agentcore Memory (Configuration Available), and Amazon CloudFront Distribution (Configuration Available).