AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-04-13 · Documentation low

File: AmazonCloudWatch/latest/monitoring/Creating-pipelines.md

Summary

Removed section about AI-assisted processor configuration feature including its description, sample log generation, and IAM permission requirement

Security assessment

This change removes documentation about an AI-assisted feature and its required IAM permission (logs:GeneratePipeline). There is no evidence of a security vulnerability being addressed - this appears to be feature deprecation or removal. The removal of IAM permission documentation could impact security posture if users don't update their policies, but the change itself doesn't indicate a security issue.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/Creating-pipelines.md b/AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
index 0f270c366..35129a851 100644
--- a//AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
+++ b//AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
@@ -15,6 +14,0 @@ The pipeline configuration wizard guides you through creating your data pipeline
-To configure processors using natural language, enable the **AI-assisted** toggle. Enter a description of the log transformations you need, and CloudWatch pipelines generates the processor configuration automatically. For AWS vended logs, a sample log event is also generated so you can verify the output before deploying. You can review and edit the generated configuration before creating the pipeline.
-
-###### Important
-
-To use AI-assisted processor configuration, you must have the `logs:GeneratePipeline` IAM permission. For more information, see [AI-assisted processor configuration permissions](./pipeline-iam-reference.html#ai-assisted-permissions).
-