AWS AmazonS3 documentation change
Summary
Added four annotation APIs to CloudTrail logging and included objectAnnotationCount in replication events.
Security assessment
Extends audit logging capabilities to new annotation operations, enhancing security monitoring. No evidence indicates this addresses a specific security vulnerability.
Diff
diff --git a/AmazonS3/latest/userguide/cloudtrail-logging-s3-info.md b/AmazonS3/latest/userguide/cloudtrail-logging-s3-info.md index 3a5bf6d7c..fbb7616e0 100644 --- a//AmazonS3/latest/userguide/cloudtrail-logging-s3-info.md +++ b//AmazonS3/latest/userguide/cloudtrail-logging-s3-info.md @@ -54,0 +55,4 @@ Data event type (console) | resources.type value | Data APIs logged to CloudTrai + * [PutObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html) + * [GetObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html) + * [ListObjectAnnotations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html) + * [DeleteObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html) @@ -172,0 +177,2 @@ If you are logging data activity with AWS CloudTrail, the event record for an Am +The `InitiateReplication` event includes `objectAnnotationCount` in the `additionalEventData` field. This value indicates the number of annotations on the source object at the time replication was initiated. + @@ -329,0 +336,2 @@ Amazon S3 bucket-level API actions tracked by CloudTrail logging appear as the f + * [UpdateBucketMetadataAnnotationTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataAnnotationTableConfiguration.html) +