AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-06-10 · Documentation low

File: AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.md

Summary

Added note clarifying that PromQL queries cannot be logged as CloudTrail data events.

Security assessment

Clarifies logging limitations but doesn't address security vulnerabilities. No security features or vulnerabilities mentioned.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.md b/AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.md
index fbc154240..94950382d 100644
--- a//AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.md
+++ b//AmazonCloudWatch/latest/monitoring/logging_cw_api_calls.md
@@ -275,0 +276,4 @@ CloudTrail can capture API activities related to the CloudWatch data plane opera
+###### Note
+
+PromQL queries are not supported for CloudTrail data events. Only the CloudWatch APIs listed above can be logged as data events in CloudTrail.
+