AWS solutions documentation change
Summary
Updated CloudWatch log retention documentation: Standardized most logs to 10-year retention, clarified exceptions for Web Console/WAF logs (1 year) and ECS Container Insights (default never expire). Removed specific service mappings and simplified modification instructions.
Security assessment
The changes only adjust log retention periods without mentioning security vulnerabilities, threats, or incident response. While log retention supports security investigations, the changes lack evidence of addressing a specific security issue or introducing new security features.
Diff
diff --git a/solutions/latest/distributed-load-testing-on-aws/aws-well-architected-design-considerations.md b/solutions/latest/distributed-load-testing-on-aws/aws-well-architected-design-considerations.md index 87a668104..ce5794d16 100644 --- a//solutions/latest/distributed-load-testing-on-aws/aws-well-architected-design-considerations.md +++ b//solutions/latest/distributed-load-testing-on-aws/aws-well-architected-design-considerations.md @@ -45 +45 @@ This section describes how we architected this solution using the principles and -The solution creates multiple CloudWatch log groups with varying retention periods based on log volume and cost considerations: +All log groups the solution creates retain logs for 10 years, except for the Web Console and WAF log groups in the ALB + ECS Fargate template, which retain for 1 year: @@ -47 +47 @@ The solution creates multiple CloudWatch log groups with varying retention perio -Log Type | Retention Period +Log group | Retention @@ -49,4 +49,3 @@ Log Type | Retention Period -ECS container insights | 1 day -Step Functions, ECS custom logs, API Gateway access logs | 1 year -Lambda runtime logs | 2 years -API Gateway execution logs | Never expire +AWS Step Functions, Lambda runtime, ECS test task, Cognito user pool, and API Gateway access logs | 10 years +Web Console and WAF (ALB + ECS Fargate template only) | 1 year +ECS Container Insights (auto-created by ECS) | Never expire (default) @@ -54 +53 @@ API Gateway execution logs | Never expire -You can modify these retention periods in the CloudWatch console based on your requirements. +You can modify these retention periods in the Amazon CloudWatch console. @@ -94 +93 @@ This section describes how we architected this solution using the principles and - * AWS AgentCore Gateway serves as a cost-effective Lambda-based proxy to the distributed load testing API, eliminating the need for dedicated infrastructure and reducing costs through serverless pay-per-request pricing. + * AgentCore Gateway serves as a cost-effective Lambda-based proxy to the distributed load testing API, eliminating the need for dedicated infrastructure and reducing costs through serverless pay-per-request pricing.