AWS controltower documentation change
Summary
Added documentation for 223 new AWS Config controls and updated API fields (CreateTime, Severity, Implementation). Changed release date from April 2 to April 8.
Security assessment
Adds security-related AWS Config controls but does not address a specific vulnerability. The changes enhance governance capabilities rather than fix a security issue.
Diff
diff --git a/controltower/latest/userguide/2025-all.md b/controltower/latest/userguide/2025-all.md index 889d6d639..00a9f71f7 100644 --- a//controltower/latest/userguide/2025-all.md +++ b//controltower/latest/userguide/2025-all.md @@ -5 +5 @@ -Deregister and delete actions for OUsAWS Control Tower supports IPv6 addresses +Additional AWS Config controls availableDeregister and delete actions for OUsAWS Control Tower supports IPv6 addresses @@ -10,0 +11,2 @@ Since January 2025, AWS Control Tower has released the following updates: + * Additional AWS Config controls available + @@ -12,0 +15,8 @@ Since January 2025, AWS Control Tower has released the following updates: + * AWS Control Tower supports IPv6 addresses + + + + +## Additional AWS Config controls available + +**April 11, 2025** @@ -13,0 +24,5 @@ Since January 2025, AWS Control Tower has released the following updates: +(No update required for AWS Control Tower landing zone.) + +AWS Control Tower now supports an additional 223 managed AWS Config rules for various use cases, such as security, cost, durability, and operations. With this launch, you can now use AWS Control Tower to search and discover the AWS Config rules that you need to govern your multi-account environment; then enable and manage the controls directly from AWS Control Tower. + +To get started from the AWS Control Tower console, go to the Control Catalog and search for controls with the implementation filter AWS Config. You can enable the controls directly from the AWS Control Tower console. @@ -14,0 +30,5 @@ Since January 2025, AWS Control Tower has released the following updates: +For more details, see [Integrated AWS Config controls available in AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/config-controls.html). + +With this launch, we’ve updated the `ListControls` and `GetControl` APIs to support three new fields: **CreateTime** , **Severity** , and **Implementation** , which you can use when searching for a control in Control Catalog. For example, you can now programmatically find high-severity AWS Config rules that were created after your last evaluation. + +You can search for the new AWS Config rules in all AWS Regions where AWS Control Tower is available. To deploy a rule, refer to the list of supported AWS Regions for that rule, to see where it can be enabled. @@ -18 +38 @@ Since January 2025, AWS Control Tower has released the following updates: -**April 2, 2025** +**April 8, 2025**