Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion blog-service/2025-06-16-apps.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

AWS is streamlining [CloudTrail](https://aws.amazon.com/cloudtrail/) events for [IAM Identity Center](https://aws.amazon.com/iam/identity-center/) to retain only the essential fields needed for audit and incident response workflows. These changes improve user identification and integration with directories like Okta and Microsoft Active Directory, and do not impact CloudTrail events from other AWS services.

To support this update, Sumo Logic has revised several AWS apps and Cloud SIEM parsers. If you use CloudTrail data in saved searches, dashboards, or detection rules, you may need to reinstall affected apps or update custom content before AWS enforces the changes on July 14, 2025.
- To support this update, Sumo Logic has revised several AWS apps and Cloud SIEM parsers. You must reinstall the affected apps.
- If you use CloudTrail data in saved searches, dashboards, or detection rules, you must update your custom content before AWS enforces the changes on July 14, 2025.

To learn more, see [Important changes to CloudTrail events for AWS IAM Identity Center](https://aws.amazon.com/blogs/security/modifications-to-aws-cloudtrail-event-data-of-iam-identity-center/).

Expand Down