AWS AmazonCloudWatch: Note on IAM role manager behavior when creating scheduled queries
Summary
Added two identical notes explaining that when role manager is enabled, CloudWatch attaches the IAM role automatically and the role options are replaced by a Customize option, with a link to IAM role creation docs.
Security assessment
The note is a UX clarification about how IAM roles are attached for scheduled queries when role manager is enabled; it touches IAM roles but documents no security control, permission boundary, or vulnerability. Security relevance is tangential.
Evidence
+If role manager is enabled in your account, CloudWatch attaches the role for you, and the role options described here (for example the **Create new role** button) are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information about IAM role creation, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_.
Diff
diff --git a/AmazonCloudWatch/latest/logs/create-scheduled-query.md b/AmazonCloudWatch/latest/logs/create-scheduled-query.md index e7586b022..14855bea5 100644 --- a//AmazonCloudWatch/latest/logs/create-scheduled-query.md +++ b//AmazonCloudWatch/latest/logs/create-scheduled-query.md @@ -82,0 +83,4 @@ Console +###### Note + +If role manager is enabled in your account, CloudWatch attaches the role for you, and the role options described here (for example the **Create new role** button) are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information about IAM role creation, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_. + @@ -88,0 +93,4 @@ Console +###### Note + +If role manager is enabled in your account, CloudWatch attaches the role for you, and the role options described here (for example the **Create new role** button) are replaced by a **Customize** option. To use a different role, choose **Customize**. For more information about IAM role creation, see [IAM role creation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create.html) in the _IAM User Guide_. +