AWS AWSCloudFormation documentation change
Summary
Added details for log path specifications including directory/file requirements, size limits (50 MB/file), supported extensions (.txt, .log, .utrace), and path variables (%USERPROFILE%, $HOME, ~) for log collection outside application directories.
Security assessment
The changes provide operational guidance for log collection paths and size constraints without addressing vulnerabilities. While log management has security implications, this update focuses on usability (path variables) and reliability (file size/extensions) with no evidence of patching a security flaw or introducing security-specific features.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-gameliftstreams-application.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-gameliftstreams-application.md index bbcfb373b..72e3f6e54 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-gameliftstreams-application.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-gameliftstreams-application.md @@ -75 +75,7 @@ _Minimum_ : `0` -Locations of log files that your content generates during a stream session. Enter path values that are relative to the `ApplicationSourceUri` location. You can specify up to 10 log paths. Amazon GameLift Streams uploads designated log files to the Amazon S3 bucket that you specify in `ApplicationLogOutputUri` at the end of a stream session. To retrieve stored log files, call [GetStreamSession](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_GetStreamSession.html) and get the `LogFileLocationUri`. +Locations of log files that your content generates during a stream session. Enter path values that are relative to the `ApplicationSourceUri` location, or relative to the user's home directory when using a supported path variable. You can specify up to 10 log paths. Each individual log file cannot exceed 50 MB in size. + +Each path can be a directory or an exact file path. When you specify a directory, Amazon GameLift Streams collects only files with the following extensions: `.txt`, `.log`, and `.utrace`. To collect files with other extensions, specify the exact file path. The copy operation is not performed recursively in subfolders. + +The following path variables are recognized when they appear as the first component of a path: `%USERPROFILE%` (Windows and Proton), `$HOME` or `~` (Linux). Use a path variable when your application writes logs outside of the application directory. + +Amazon GameLift Streams uploads designated log files to the Amazon S3 bucket that you specify in `ApplicationLogOutputUri` at the end of a stream session. To retrieve stored log files, call [GetStreamSession](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_GetStreamSession.html) and get the `LogFileLocationUri`.