AWS cli documentation change

Service: cli · 2026-04-22 · Documentation low

File: cli/latest/reference/observabilityadmin/update-telemetry-rule-for-organization.md

Summary

Added AWS::SecurityHub::HubV2 resource type and AllowFieldUpdates parameter for configuration drift remediation

Security assessment

The change documents a feature that automatically corrects configuration drift in telemetry resources, supporting security monitoring consistency. No evidence of addressing a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/observabilityadmin/update-telemetry-rule-for-organization.md b/cli/latest/reference/observabilityadmin/update-telemetry-rule-for-organization.md
index 87db50cb1..0762bcf78 100644
--- a//cli/latest/reference/observabilityadmin/update-telemetry-rule-for-organization.md
+++ b//cli/latest/reference/observabilityadmin/update-telemetry-rule-for-organization.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
@@ -129,0 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/observ
+>>   * `AWS::SecurityHub::HubV2`
@@ -476,0 +478,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/observ
+> AllowFieldUpdates -> (boolean)
+>
+>> If set to `true` , Amazon CloudWatch Observability Admin detects and remediates configuration drift in telemetry resources that it manages. For example, if a VPC flow log’s format, traffic type, or aggregation interval no longer matches the rule’s destination configuration, the flow log is replaced with one that matches. Only Observability Admin-managed resources are updated; customer-created resources are never modified. Currently supported for `AWS::EC2::VPC` resources (VPC flow logs).
+> 
@@ -503 +508 @@ JSON Syntax:
-      "ResourceType": "AWS::EC2::Instance"|"AWS::EC2::VPC"|"AWS::Lambda::Function"|"AWS::CloudTrail"|"AWS::EKS::Cluster"|"AWS::WAFv2::WebACL"|"AWS::ElasticLoadBalancingV2::LoadBalancer"|"AWS::Route53Resolver::ResolverEndpoint"|"AWS::BedrockAgentCore::Runtime"|"AWS::BedrockAgentCore::Browser"|"AWS::BedrockAgentCore::CodeInterpreter"|"AWS::BedrockAgentCore::Gateway"|"AWS::BedrockAgentCore::Memory"|"AWS::SecurityHub::Hub"|"AWS::CloudFront::Distribution",
+      "ResourceType": "AWS::EC2::Instance"|"AWS::EC2::VPC"|"AWS::Lambda::Function"|"AWS::CloudTrail"|"AWS::EKS::Cluster"|"AWS::WAFv2::WebACL"|"AWS::ElasticLoadBalancingV2::LoadBalancer"|"AWS::Route53Resolver::ResolverEndpoint"|"AWS::BedrockAgentCore::Runtime"|"AWS::BedrockAgentCore::Browser"|"AWS::BedrockAgentCore::CodeInterpreter"|"AWS::BedrockAgentCore::Gateway"|"AWS::BedrockAgentCore::Memory"|"AWS::SecurityHub::Hub"|"AWS::CloudFront::Distribution"|"AWS::SecurityHub::HubV2",
@@ -579,0 +585 @@ JSON Syntax:
+      "AllowFieldUpdates": true|false,
@@ -720 +726 @@ RuleArn -> (string)
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »