AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-04-25 · Documentation low

File: AmazonCloudWatch/latest/monitoring/Creating-pipelines.md

Summary

Added documentation for AI-assisted processor configuration feature that uses natural language to generate log transformation configurations

Security assessment

This change documents a new AI-assisted feature for configuring log processors and mentions the required IAM permission (logs:GeneratePipeline). While it includes security documentation about required permissions, there is no evidence of addressing a specific security vulnerability or incident. The change introduces a new feature with associated IAM controls.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/Creating-pipelines.md b/AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
index c661e4a38..c08a01856 100644
--- a//AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
+++ b//AmazonCloudWatch/latest/monitoring/Creating-pipelines.md
@@ -16,0 +17,6 @@ The pipeline configuration wizard guides you through creating your data pipeline
+To configure processors using natural language, enable the **AI-assisted** toggle. Enter a description of the log transformations you need, and CloudWatch pipelines generates the processor configuration automatically. For AWS vended logs, a sample log event is also generated so you can verify the output before deploying. You can review and edit the generated configuration before creating the pipeline.
+
+###### Important
+
+To use AI-assisted processor configuration, you must have the `logs:GeneratePipeline` IAM permission. For more information, see [AI-assisted processor configuration permissions](./pipeline-iam-reference.html#ai-assisted-permissions).
+