AWS controltower documentation change

Service: controltower · 2025-05-10 · Documentation low

File: controltower/latest/userguide/control-limitations.md

Summary

Updated region availability listings for multiple Control Tower controls and Security Hub detective/guardrail controls. Removed 'ap-southeast-7' and 'mx-central-1' from many entries while adding/updating regional coverage for specific controls.

Security assessment

The changes reflect regional availability updates for existing security controls but do not directly address a specific security vulnerability or weakness. Modifications to region lists are operational updates rather than responses to security incidents.

Diff

diff --git a/controltower/latest/userguide/control-limitations.md b/controltower/latest/userguide/control-limitations.md
index 678d61b5c..185a819f9 100644
--- a//controltower/latest/userguide/control-limitations.md
+++ b//controltower/latest/userguide/control-limitations.md
@@ -45,235 +45,2 @@ For information about AWS Security Hub controls from the **Service-Managed Stand
-`CT.ACM.PR.1` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.1` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.2` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.3` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.4` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.5` | ap-southeast-7, mx-central-1  
-`CT.APIGATEWAY.PR.6` | ap-southeast-7, mx-central-1  
-`CT.APPSYNC.PR.1` | ap-southeast-7, mx-central-1  
-`CT.APPSYNC.PR.2` | ap-southeast-7, mx-central-1  
-`CT.APPSYNC.PR.3` | ap-southeast-7, mx-central-1  
-`CT.APPSYNC.PR.4` | ap-southeast-7, mx-central-1  
-`CT.APPSYNC.PR.5` | ap-southeast-7, mx-central-1  
-`CT.ATHENA.PR.2` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.1` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.10` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.11` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.2` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.4` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.5` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.6` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.8` | ap-southeast-7, mx-central-1  
-`CT.AUTOSCALING.PR.9` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.1` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.10` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.11` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.2` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.3` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.4` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.5` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.6` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.7` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.8` | ap-southeast-7, mx-central-1  
-`CT.CLOUDFRONT.PR.9` | ap-southeast-7, mx-central-1  
-`CT.CLOUDTRAIL.PR.1` | ap-southeast-7, mx-central-1  
-`CT.CLOUDTRAIL.PR.2` | ap-southeast-7, mx-central-1  
-`CT.CLOUDTRAIL.PR.3` | ap-southeast-7, mx-central-1  
-`CT.CLOUDTRAIL.PR.4` | ap-southeast-7, mx-central-1  
-`CT.CLOUDWATCH.PR.1` | ap-southeast-7, mx-central-1  
-`CT.CLOUDWATCH.PR.2` | ap-southeast-7, mx-central-1  
-`CT.CLOUDWATCH.PR.3` | ap-southeast-7, mx-central-1  
-`CT.CLOUDWATCH.PR.4` | ap-southeast-7, mx-central-1  
-`CT.CODEBUILD.PR.1` | ap-southeast-7, mx-central-1  
-`CT.CODEBUILD.PR.2` | ap-southeast-7, mx-central-1  
-`CT.CODEBUILD.PR.3` | ap-southeast-7, mx-central-1  
-`CT.CODEBUILD.PR.5` | ap-southeast-7, mx-central-1  
-`CT.CODEBUILD.PR.6` | ap-southeast-7, mx-central-1  
-`CT.DAX.PR.1` | ap-southeast-7, mx-central-1  
-`CT.DAX.PR.2` | ap-southeast-5, ca-west-1, us-west-1, ap-southeast-7, mx-central-1  
-`CT.DAX.PR.3` | ap-southeast-7, mx-central-1  
-`CT.DMS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.DMS.PR.2` | ap-southeast-7, mx-central-1  
-`CT.DOCUMENTDB.PR.1` | ap-southeast-7, mx-central-1  
-`CT.DOCUMENTDB.PR.2` | ap-southeast-7, mx-central-1  
-`CT.DYNAMODB.PR.1` | ap-southeast-7, mx-central-1  
-`CT.DYNAMODB.PR.2` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.1` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.10` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.11` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.12` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.13` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.14` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.15` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.16` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.17` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.18` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.19` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.2` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.20` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.3` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.4` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.5` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.6` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.7` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.8` | ap-southeast-7, mx-central-1  
-`CT.EC2.PR.9` | ap-southeast-7, mx-central-1  
-`CT.ECR.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ECR.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ECR.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.10` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.11` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.12` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.4` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.5` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.6` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.7` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.8` | ap-southeast-7, mx-central-1  
-`CT.ECS.PR.9` | ap-southeast-7, mx-central-1  
-`CT.EKS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.EKS.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.4` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.5` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.6` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.7` | ap-southeast-7, mx-central-1  
-`CT.ELASTICACHE.PR.8` | ap-southeast-7, mx-central-1  
-`CT.ELASTICBEANSTALK.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ELASTICBEANSTALK.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ELASTICBEANSTALK.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ELASTICFILESYSYSTEM.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ELASTICFILESYSYSTEM.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ELASTICFILESYSYSTEM.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ELASTICFILESYSYSTEM.PR.4` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.1` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.10` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.11` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.12` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.13` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.14` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.15` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.2` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.3` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.4` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.5` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.6` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.7` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.8` | ap-southeast-7, mx-central-1  
-`CT.ELASTICLOADBALANCING.PR.9` | ap-southeast-7, mx-central-1  
-`CT.EMR.PR.1` | ap-southeast-7, mx-central-1  
-`CT.EMR.PR.2` | ap-southeast-7, mx-central-1  
-`CT.EMR.PR.3` | ap-southeast-7, mx-central-1  
-`CT.EMR.PR.4` | ap-southeast-7, mx-central-1  
-`CT.GLUE.PR.1` | ap-southeast-7, mx-central-1  
-`CT.GUARDDUTY.PR.1` | ap-southeast-7, mx-central-1  
-`CT.IAM.PR.1` | ap-southeast-7, mx-central-1  
-`CT.IAM.PR.2` | ap-southeast-7, mx-central-1  
-`CT.IAM.PR.3` | ap-southeast-7, mx-central-1  
-`CT.IAM.PR.4` | ap-southeast-7, mx-central-1  
-`CT.IAM.PR.5` | ap-southeast-7, mx-central-1  
-`CT.KINESIS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.KMS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.KMS.PR.2` | ap-southeast-7, mx-central-1  
-`CT.KMS.PR.3` | ap-southeast-7, mx-central-1  
-`CT.LAMBDA.PR.2` | ap-southeast-7, mx-central-1  
-`CT.LAMBDA.PR.3` | ap-southeast-7, mx-central-1  
-`CT.LAMBDA.PR.4` | ap-southeast-7, mx-central-1  
-`CT.LAMBDA.PR.5` | ap-southeast-7, mx-central-1  
-`CT.LAMBDA.PR.6` | ap-southeast-7, mx-central-1  
-`CT.MQ.PR.1` | ap-southeast-7, mx-central-1  
-`CT.MQ.PR.2` | ap-southeast-7, mx-central-1  
-`CT.MSK.PR.1` | ap-southeast-7, mx-central-1  
-`CT.MSK.PR.2` | ap-southeast-7, mx-central-1  
-`CT.NEPTUNE.PR.1` | ap-southeast-7, mx-central-1  
-`CT.NEPTUNE.PR.2` | ap-southeast-7, mx-central-1  
-`CT.NEPTUNE.PR.3` | ap-southeast-7, mx-central-1  
-`CT.NEPTUNE.PR.4` | ap-southeast-7, mx-central-1  
-`CT.NEPTUNE.PR.5` | ap-southeast-7, mx-central-1  
-`CT.NETWORK-FIREWALL.PR.1` | ap-southeast-7, mx-central-1  
-`CT.NETWORK-FIREWALL.PR.2` | ap-southeast-7, mx-central-1  
-`CT.NETWORK-FIREWALL.PR.3` | ap-southeast-7, mx-central-1  
-`CT.NETWORK-FIREWALL.PR.4` | ap-southeast-7, mx-central-1  
-`CT.NETWORK-FIREWALL.PR.5` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.1` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.10` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.11` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.12` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.13` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.14` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.15` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.16` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.2` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.3` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.4` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.5` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.6` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.7` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.8` | ap-southeast-7, mx-central-1  
-`CT.OPENSEARCH.PR.9` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.1` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.10` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.11` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.12` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.13` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.14` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.15` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.16` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.17` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.18` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.19` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.2` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.20` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.21` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.22` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.23` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.24` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.25` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.26` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.27` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.28` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.29` | ap-southeast-7, mx-central-1  
-`CT.RDS.PR.3` | ap-southeast-7, mx-central-1