AWS AWSCloudFormation documentation change
Summary
Added detailed property descriptions for scheduled query configuration including query syntax, log groups, and IAM role requirements
Security assessment
Changes provide implementation details for CloudWatch scheduled queries without addressing security vulnerabilities. The IAM role mention is standard for AWS resource permissions, not a security-specific feature.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudwatch-logalarm-scheduledqueryconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-cloudwatch-logalarm-scheduledqueryconfiguration.md index 8a779a3cc..77002a371 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-cloudwatch-logalarm-scheduledqueryconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-cloudwatch-logalarm-scheduledqueryconfiguration.md @@ -11 +11 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `ScheduledQueryConfiguration` property type specifies Property description not available. for an [AWS::CloudWatch::LogAlarm](./aws-resource-cloudwatch-logalarm.html). +The configuration of the CloudWatch Logs scheduled query that backs a log alarm. @@ -47 +47 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The expression that defines how to aggregate query results into one or more scalar values for alarm evaluation. For example, `count(*)` or `avg(latency) by host | sort desc`. Length constraints: minimum 1 character, maximum 2048 characters. @@ -58 +58 @@ _Required_ : Yes -Property description not available. +The log groups to query. Each entry can be a log group name or ARN. Use the ARN form when querying log groups in a different account (for example, when running cross-account queries from a monitoring account). The list must contain between 1 and 50 entries. @@ -69 +69 @@ _Required_ : Yes -Property description not available. +The CloudWatch Logs query to execute on each scheduled run. Length constraints: maximum of 10,000 characters. @@ -80 +80 @@ _Required_ : Yes -Property description not available. +The schedule and time-range offset configuration for the underlying scheduled query. @@ -91 +91 @@ _Required_ : Yes -Property description not available. +The Amazon Resource Name (ARN) of the IAM role that CloudWatch assumes when executing the scheduled query against the configured log groups.