AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-06-19 · Documentation low

File: AmazonCloudWatch/latest/monitoring/UsingResourceTagsForTelemetry.md

Summary

Replaced the bulleted list of supported resources with a table indicating metrics/logs support, added information about tag-based Log Insights queries, and referenced a new metrics documentation page.

Security assessment

The changes focus on improving documentation structure and clarifying telemetry features. No security vulnerabilities or incidents are mentioned. The tag-based querying capability could indirectly support security monitoring but isn't a dedicated security feature.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/UsingResourceTagsForTelemetry.md b/AmazonCloudWatch/latest/monitoring/UsingResourceTagsForTelemetry.md
index 19d151129..cb124b8b5 100644
--- a//AmazonCloudWatch/latest/monitoring/UsingResourceTagsForTelemetry.md
+++ b//AmazonCloudWatch/latest/monitoring/UsingResourceTagsForTelemetry.md
@@ -7 +7 @@
-Supported AWS infrastructure metrics
+Supported AWS resources
@@ -19,193 +19,106 @@ Once you have enabled resource tags for telemetry, you can leverage this enriche
-
-
-
-## Supported AWS infrastructure metrics
-
-The list below displays the CloudFormation resource that support resource tags for telemetry enrichment in CloudWatch. When you enable resource tags for telemetry, CloudWatch can enrich metrics from these services with their associated resource tags. 
-
-  * AWS::APS::RuleGroupsNamespace
-
-  * AWS::APS::Workspace
-
-  * AWS::ApiGatewayV2::Api
-
-  * AWS::AppFlow::Flow
-
-  * AWS::AppSync::GraphQLApi
-
-  * AWS::Athena::CapacityReservation
-
-  * AWS::Athena::WorkGroup
-
-  * AWS::AutoScaling::AutoScalingGroup
-
-  * AWS::Backup::BackupVault
-
-  * AWS::CloudFront::Distribution
-
-  * AWS::CloudWatch::MetricStream
-
-  * AWS::CodeGuruProfiler::ProfilingGroup
-
-  * AWS::Cognito::UserPool
-
-  * AWS::Connect::Instance
-
-  * AWS::DAX::Cluster
-
-  * AWS::DataSync::Agent
-
-  * AWS::DataSync::Task
-
-  * AWS::DocDB::DBCluster
-
-  * AWS::DocDB::DBInstance
-
-  * AWS::DocDBElastic::Cluster
-
-  * AWS::DynamoDB::GlobalTable
-
-  * AWS::DynamoDB::Table
-
-  * AWS::EC2::CapacityReservation
-
-  * AWS::EC2::ClientVpnEndpoint
-
-  * AWS::EC2::Host
-
-  * AWS::EC2::Instance
-
-  * AWS::EC2::NatGateway
-
-  * AWS::EC2::TransitGateway
-
-  * AWS::EC2::VPC
-
-  * AWS::EC2::VPNConnection
-
-  * AWS::EC2::Volume
-
-  * AWS::ECS::Cluster
-
-  * AWS::ECS::Service
-
-  * AWS::EFS::FileSystem
-
-  * AWS::EKS::Cluster
-
-  * AWS::EMR::Cluster
-
-  * AWS::EMRServerless::Application
-
-  * AWS::ElastiCache::CacheCluster
-
-  * AWS::ElastiCache::ReplicationGroup
-
-  * AWS::ElasticBeanstalk::Environment
-
-  * AWS::ElasticLoadBalancing::LoadBalancer
-
-  * AWS::ElasticLoadBalancingV2::LoadBalancer
-
-  * AWS::ElasticLoadBalancingV2::TargetGroup
-
-  * AWS::Events::Rule
-
-  * AWS::FSx::FileSystem
-
-  * AWS::FraudDetector::Detector
-
-  * AWS::GameLift::GameSessionQueue
-
-  * AWS::GameLift::MatchmakingConfiguration
-
-  * AWS::Glue::Job
-
-  * AWS::IVSChat::LoggingConfiguration
-
-  * AWS::IoT::CACertificate
-
-  * AWS::IoT::ScheduledAudit
-
-  * AWS::IoT::SecurityProfile
-
-  * AWS::IoT::TopicRule
-
-  * AWS::KMS::Key
-
-  * AWS::Kendra::DataSource
-
-  * AWS::Kendra::Index
-
-  * AWS::Kinesis::Stream
-
-  * AWS::KinesisAnalyticsV2::Application
-
-  * AWS::KinesisFirehose::DeliveryStream
-
-  * AWS::Lambda::Function
-
-  * AWS::M2::Application
-
-  * AWS::MediaTailor::Channel
-
-  * AWS::MemoryDB::Cluster
-
-  * AWS::Neptune::DBCluster
-
-  * AWS::Neptune::DBInstance
-
-  * AWS::NetworkFirewall::Firewall
-
-  * AWS::OpenSearchServerless::Collection
-
-  * AWS::OpenSearchService::Domain
-
-  * AWS::Pinpoint::App
-
-  * AWS::Pipes::Pipe
-
-  * AWS::RDS::DBCluster
-
-  * AWS::RDS::DBInstance
-
-  * AWS::RUM::AppMonitor
-
-  * AWS::Redshift::Cluster
-
-  * AWS::RedshiftServerless::Namespace
-
-  * AWS::RedshiftServerless::Workgroup
-
-  * AWS::Route53::HealthCheck
-
-  * AWS::Route53Resolver::FirewallRuleGroup
-
-  * AWS::Route53Resolver::ResolverEndpoint
-
-  * AWS::S3::Bucket
-
-  * AWS::SNS::Topic
-
-  * AWS::SQS::Queue
-
-  * AWS::SageMaker::Endpoint
-
-  * AWS::SageMaker::InferenceComponent
-
-  * AWS::Scheduler::ScheduleGroup
-
-  * AWS::Synthetics::Canary
-
-  * AWS::Transfer::Connector
-
-  * AWS::Transfer::Server
-
-  * AWS::VpcLattice::Service
-
-  * AWS::WorkSpaces::Workspace
-
-  * AWS::WorkSpaces::WorkspacesPool
-
-