AWS privateca documentation change
Summary
Added 'Namespace' column to CloudWatch metrics table and specified namespaces for all metrics
Security assessment
The change only adds metric namespace information without modifying security-related content. The 'MisconfiguredCRLBucket' metric (already present) remains the only security-relevant item, but its description was unchanged. No vulnerabilities or security improvements are addressed.
Diff
diff --git a/privateca/latest/userguide/PcaCloudWatch.md b/privateca/latest/userguide/PcaCloudWatch.md index bf21e319f..c15b84127 100644 --- a//privateca/latest/userguide/PcaCloudWatch.md +++ b//privateca/latest/userguide/PcaCloudWatch.md @@ -13,9 +13,9 @@ AWS Private CA supports the following CloudWatch metrics. -Metric | Description ----|--- -`CRLGenerated` | A certificate revocation list (CRL) was generated. This metric applies only to a private CA. -`MisconfiguredCRLBucket` | The S3 bucket specified for the CRL is not correctly configured. Check the bucket policy. This metric applies only to a private CA. -`Time` | The time in milliseconds between an issuance request and the completion (or failure) of issuance. This metric applies only to the **IssueCertificate** operation. -`Success` | A certificate was successfully issued. This metric applies only to the **IssueCertificate** operation. -`Failure` | An operation failed. This metric applies only to the **IssueCertificate** operation. -`CertificateAuthority` | The total number of private certificate authorities in your account in the current Region. This metric includes CAs in all states (ACTIVE, DISABLED, CREATING, etc.) and can be used to monitor CA inventory and track usage against account quotas. -`CertificatesPerCA` | The total number of certificates issued by a specific private certificate authority since its creation. This metric increments with each successful certificate issuance and is not decremented when certificates expire or are revoked. This metric applies to individual private CAs and can be used to track certificate issuance volume and capacity planning. This metric is only published in the owner account and is not available in accounts that the CA is shared to. +Metric | Namespace | Description +---|---|--- +`CRLGenerated` | `AWS/ACMPrivateCA` | A certificate revocation list (CRL) was generated. This metric applies only to a private CA. +`MisconfiguredCRLBucket` | `AWS/ACMPrivateCA` | The S3 bucket specified for the CRL is not correctly configured. Check the bucket policy. This metric applies only to a private CA. +`Time` | `AWS/ACMPrivateCA` | The time in milliseconds between an issuance request and the completion (or failure) of issuance. This metric applies only to the **IssueCertificate** operation. +`Success` | `AWS/ACMPrivateCA` | A certificate was successfully issued. This metric applies only to the **IssueCertificate** operation. +`Failure` | `AWS/ACMPrivateCA` | An operation failed. This metric applies only to the **IssueCertificate** operation. +`CertificateAuthority` | `AWS/Usage` | The total number of private certificate authorities in your account in the current Region. This metric includes CAs in all states (ACTIVE, DISABLED, CREATING, etc.) and can be used to monitor CA inventory and track usage against account quotas. +`CertificatesPerCA` | `AWS/Usage` | The total number of certificates issued by a specific private certificate authority since its creation. This metric increments with each successful certificate issuance and is not decremented when certificates expire or are revoked. This metric applies to individual private CAs and can be used to track certificate issuance volume and capacity planning. This metric is only published in the owner account and is not available in accounts that the CA is shared to.