AWS clean-rooms: Added export query logs ability and API warning
Summary
Introduced 'Export query analysis log' member ability with API update caution and auto-grant note.
Security assessment
Documents a new logging-related permission and critical API behavior (full ability replacement) affecting access control.
Evidence
+ * Export query analysis log
Diff
diff --git a/clean-rooms/latest/userguide/change-requests.md b/clean-rooms/latest/userguide/change-requests.md index bbd57c7a0..6d608fd49 100644 --- a//clean-rooms/latest/userguide/change-requests.md +++ b//clean-rooms/latest/userguide/change-requests.md @@ -80,0 +81 @@ The member abilities that can be updated are: + * Export query analysis log @@ -83,0 +85,7 @@ The member abilities that can be updated are: + +For more information about exporting query analysis logs, see [Exporting query analysis logs](./export-analysis-logs.html). + +###### Note + +When you update member abilities through the API, the abilities that you specify replace all existing abilities. To keep an existing ability, include it along with the ability that you're adding. + @@ -222,0 +231,2 @@ By default, all collaboration members can "Contribute data". +You can grant the export query analysis logs ability automatically, without a separate approval cycle. +