AWS AmazonCloudWatch documentation change
Summary
Completely restructured the telemetry configuration documentation, changing from a detailed technical guide to a topic-based overview with links to separate pages. Removed specific details about AWS Config service-linked recorders and replaced with a table of contents.
Security assessment
This is a documentation reorganization that changes the structure and presentation of telemetry configuration information. There is no evidence of security vulnerability fixes or security feature additions. The changes are editorial and organizational in nature, improving navigation but not addressing security concerns.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md b/AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md index 9f9542c0d..3d40a1649 100644 --- a//AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md +++ b//AmazonCloudWatch/latest/monitoring/telemetry-config-cloudwatch.md @@ -7 +7 @@ -# Audit and turn on AWS telemetry related configurations +# Telemetry discovery and enablement @@ -9 +9 @@ -You can use Amazon CloudWatch to discover and audit the state of telemetry configuration and be able to create a rule to enable telemetry for popular AWS resource types from a central view in the CloudWatch console. The experience provides a view to audit your telemetry configurations within an account or across multiple accounts in AWS Organizations using the AWS Organizations Management or CloudWatch Delegated Admin Account, helping you to ensure proper monitoring and data collection across your AWS environment. +Amazon CloudWatch telemetry configuration provides a centralized experience to discover and audit the state of telemetry across your AWS resources, and to create rules that automatically enable telemetry for popular AWS resource types. You can use telemetry configuration within a single account or across multiple accounts in AWS Organizations using the management account or a CloudWatch delegated administrator account. @@ -11,11 +11 @@ You can use Amazon CloudWatch to discover and audit the state of telemetry confi -CloudWatch Ingestion can be used to audit and configure telemetry for popular AWS Log Sources such as Amazon VPC Flow Logs (Auditing and Configuration Available), AWS WAF Logs (Auditing and Configuration Available), Amazon Route 53 Resolver Query Logs (Auditing and Configuration Available), Amazon NLB (Configuration Available), Amazon EKS Control Plane Logs (Auditing and Configuration Available), AWS CloudTrail Data Events and Management Events (Configuration Available), Amazon Bedrock AgentCore Logs (Configuration Available), Amazon EC2 Instance Detailed Metrics (Auditing and Configuration Available), AWS Security Hub (Configuration Available), Amazon Bedrock Agentcore Gateway (Configuration Available), Amazon Bedrock Agentcore Memory (Configuration Available), and Amazon CloudFront Distribution (Configuration Available). - -To begin auditing and configuring your telemetry, you must enable trusted access for CloudWatch for your AWS organization and then enable the telemetry configuration experience feature for your AWS account or organization. Enabling this feature creates AWS Config service-linked configuration recorders that discover resources and their associated telemetry configuration metadata. For more information, see [Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/config-concepts.html#config-recorder) in the AWS Config Developer Guide. - -###### Note - -AWS Config periodically takes inventory of, or discovers, all the resources in your account as an anti-entropy behavior, regardless of the resource types in scope for your configuration recorders. The inventory includes deleted resources and resources that AWS Config is not currently recording. This behavior helps maintain data consistency. - -This means that although the service-linked configuration recorder for the CloudWatch telemetry configuration feature is configured to record specific resource types, you might see describe calls from `ConfigResourceCompositionSession` and `AWSConfig-Describe` in AWS CloudTrail. For more information, see [Non-recorded Resources](https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-non-recorded) in the AWS Config Developer Guide. - -Telemetry config uses this information and offers visibility into the configuration status, at the resource type level and at more granular telemetry detail levels. You can customize your view of the resources or telemetry details using filters, and modify the telemetry configuration directly from the resource's console page. +###### Topics @@ -23 +13 @@ Telemetry config uses this information and offers visibility into the configurat -Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not charged for CIs that CloudWatch uses as part of the Internal Service Linked Recorders. + * [What is telemetry discovery and enablement?](./telemetry-config-what-is.html) @@ -25 +15 @@ Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not -###### Topics + * [Setting up telemetry configuration](./telemetry-config-turn-on.html) @@ -27 +17 @@ Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not - * [Turning on telemetry auditing and configuration](./telemetry-config-turn-on.html) + * [Discovering resource telemetry](./telemetry-config-view-resources.html) @@ -29 +19 @@ Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not - * [Viewing AWS resource telemetry in CloudWatch](./telemetry-config-view-resources.html) + * [Telemetry enablement rules](./telemetry-config-rules.html) @@ -31 +21 @@ Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not - * [Working with telemetry enablement rules](./telemetry-config-rules.html) + * [Troubleshooting telemetry configuration](./telemetry-config-troubleshoot.html) @@ -33 +23 @@ Amazon CloudWatch uses AWS Config Internal service linked recorder. You are not - * [Turning off CloudWatch telemetry configuration](./telemetry-config-turn-off.html) + * [Disabling telemetry configuration](./telemetry-config-turn-off.html) @@ -46 +36 @@ Troubleshooting -Turning on telemetry auditing and configuration +What is telemetry discovery and enablement?