AWS AmazonCloudWatch documentation change
Summary
Added a new troubleshooting section 'The CloudWatch agent is using the wrong credentials' that explains credential resolution behavior and links to credentials preference documentation.
Security assessment
The change adds documentation about credential handling best practices, which is security-related guidance. However, it doesn't address a specific security vulnerability but rather enhances documentation about secure configuration management.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/troubleshooting-CloudWatch-Agent.md b/AmazonCloudWatch/latest/monitoring/troubleshooting-CloudWatch-Agent.md index 017b76a18..47fdd75c4 100644 --- a//AmazonCloudWatch/latest/monitoring/troubleshooting-CloudWatch-Agent.md +++ b//AmazonCloudWatch/latest/monitoring/troubleshooting-CloudWatch-Agent.md @@ -7 +7 @@ -CloudWatch agent command line parametersInstall the CloudWatch agent using Run Command failsThe CloudWatch agent won't startVerify that the CloudWatch agent is runningThe CloudWatch agent won't start, and the error mentions an Amazon EC2 RegionThe CloudWatch agent won't start on Windows ServerWhere are the metrics?The CloudWatch agent takes a long time to run in a container or logs a hop limit errorI updated my agent configuration but don’t see the new metrics or logs in the CloudWatch consoleCloudWatch agent files and locationsFinding information about CloudWatch agent versionsLogs generated by the CloudWatch agentStopping and restarting the CloudWatch agent +CloudWatch agent command line parametersInstall the CloudWatch agent using Run Command failsThe CloudWatch agent won't startVerify that the CloudWatch agent is runningThe CloudWatch agent won't start, and the error mentions an Amazon EC2 RegionThe CloudWatch agent won't start on Windows ServerWhere are the metrics?The CloudWatch agent takes a long time to run in a container or logs a hop limit errorI updated my agent configuration but don’t see the new metrics or logs in the CloudWatch consoleThe CloudWatch agent is using the wrong credentialsCloudWatch agent files and locationsFinding information about CloudWatch agent versionsLogs generated by the CloudWatch agentStopping and restarting the CloudWatch agent @@ -47,0 +48,2 @@ For detailed information on the AWS troubleshooting tool, see [Support Automatio + * The CloudWatch agent is using the wrong credentials + @@ -189,0 +192,4 @@ If you update your CloudWatch agent configuration file, the next time that you s +## The CloudWatch agent is using the wrong credentials + +If the CloudWatch agent is using unexpected credentials, the agent may be resolving credentials from a different source than you expect. The agent follows a credentials provider chain that differs from the AWS SDK in some cases. For more information, see [CloudWatch agent credentials preference](./CloudWatch-Agent-Credentials-Preference.html). +