AWS AmazonCloudWatch: Update supported log destinations table and permissions
Summary
Retitles the page to 'Supported log destinations and permissions', adds new vended log sources (CloudWatch Logs Insights query execution logs, Amazon Q in Connect, Route 53 Global Resolver, Shield Advanced attack flow logs), updates EventBridge and Quick links, and removes the Amazon SES logs row.
Security assessment
The change documents which log sources can be delivered to CloudWatch Logs and their required permission models (V1/V2), including security-relevant sources like Shield Advanced attack flow logs and Route 53 query logs. It is documentation of logging/audit capabilities rather than a fix for a specific vulnerability.
Evidence
+[AWS Shield Advanced attack flow logs](https://docs.aws.amazon.com/waf/latest/developerguide/ddos-flow-logs.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) |
Diff
diff --git a/AmazonCloudWatch/latest/logs/AWS-logs-destinations-table.md b/AmazonCloudWatch/latest/logs/AWS-logs-destinations-table.md index 1e290f92d..1c200d954 100644 --- a//AmazonCloudWatch/latest/logs/AWS-logs-destinations-table.md +++ b//AmazonCloudWatch/latest/logs/AWS-logs-destinations-table.md @@ -7 +7 @@ -# Supported log destinations +# Supported log destinations and permissions @@ -29,0 +30 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure +[Create a delivery source for CloudWatch Logs Insights query execution logs](./AWS-vended-logs-permissions-V2.html#vended-logs-insights-query-execution-source) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | @@ -47 +48 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon EventBridge event buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | +[Amazon EventBridge event buses](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus-logs.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | @@ -59 +59,0 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon SES logs](https://docs.aws.amazon.com/ses/latest/dg/eb-logging.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | @@ -73 +73,2 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon Quick logs](https://docs.aws.amazon.com/quicksuite/latest/userguide/monitoring-quicksuite-chat-feedback-cloudwatch.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | +[Amazon Q in Connect AI agent event logs](https://docs.aws.amazon.com/connect/latest/adminguide/monitor-q-assistants-cloudwatch.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | +[Amazon Quick logs](https://docs.aws.amazon.com/quick/latest/userguide/monitoring-cloudwatch-logs.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | @@ -74,0 +76,3 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure +[Amazon Route 53 Global Resolver query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/gr-monitoring.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | +[Amazon Route 53 public DNS query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/logging-monitoring.html) | Vended logs | Supported | | | +[Amazon Route 53 resolver query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-query-logs-choosing-target-resource.html) | Vended logs | [Supported (V1 permissions)](./AWS-vended-logs-permissions.html) | [Supported (V1 permissions)](./AWS-vended-logs-permissions.html) | | @@ -78,2 +82 @@ Log source | Log type | [Logs sent to CloudWatch Logs](./AWS-logs-infrastructure -[Amazon Route 53 public DNS query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/logging-monitoring.html) | Vended logs | Supported | | | -[Amazon Route 53 resolver query logs](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-query-logs-choosing-target-resource.html) | Vended logs | [Supported (V1 permissions)](./AWS-vended-logs-permissions.html) | [Supported (V1 permissions)](./AWS-vended-logs-permissions.html) | | +[AWS Shield Advanced attack flow logs](https://docs.aws.amazon.com/waf/latest/developerguide/ddos-flow-logs.html) | Vended logs | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) | [Supported (V2 permissions)](./AWS-vended-logs-permissions-V2.html) |