AWS controltower documentation change
Summary
Added documentation for the 'Enabled controls console view' providing centralized visibility of controls and updated IPv6 support details.
Security assessment
The 'Enabled controls console view' addition improves governance by centralizing control visibility, aiding compliance monitoring. While this enhances security posture, there is no evidence of addressing a specific vulnerability. The IPv6 support update modernizes infrastructure but does not explicitly resolve a security issue.
Diff
diff --git a/controltower/latest/userguide/2025-all.md b/controltower/latest/userguide/2025-all.md index 405ebf309..a3f53ce90 100644 --- a//controltower/latest/userguide/2025-all.md +++ b//controltower/latest/userguide/2025-all.md @@ -5 +5 @@ -Account Factory for Terraform (AFT) supports new configurations at deploymentAWS Control Tower introduces account-level reporting for baseline APIsAWS Control Tower available in AWS Asia Pacific (Thailand) and Mexico (Central) RegionsAdditional AWS Config controls availableDeregister and delete actions for OUsControl Catalog supports IPv6 addresses +Enabled controls console view gives centralized visibility Account Factory for Terraform (AFT) supports new configurations at deploymentAWS Control Tower introduces account-level reporting for baseline APIsAWS Control Tower available in AWS Asia Pacific (Thailand) and Mexico (Central) RegionsAdditional AWS Config controls availableDeregister and delete actions for OUsAWS Control Tower supports IPv6 addresses @@ -10,0 +11,2 @@ Since January 2025, AWS Control Tower has released the following updates: + * Enabled controls console view gives centralized visibility + @@ -21 +23,10 @@ Since January 2025, AWS Control Tower has released the following updates: - * Control Catalog supports IPv6 addresses + * AWS Control Tower supports IPv6 addresses + + + + +## Enabled controls console view gives centralized visibility + +**May 21, 2025** + +(No update required for AWS Control Tower landing zone.) @@ -22,0 +34 @@ Since January 2025, AWS Control Tower has released the following updates: +AWS Control Tower added a new page in the console that displays all of your enabled controls in a single, centralized view. Previously, controls were viewable only with the account or OU on which they were enabled. The consolidated view makes it easier for you to identify gaps in your control governance, at scale. @@ -23,0 +36 @@ Since January 2025, AWS Control Tower has released the following updates: +On the **Enabled controls** page, you can filter the controls according to behavior: Preventive, Detective, or Proactive. You also can filter according to control implementation, such as SCP. For each control, you can see how many OUs have this control enabled. @@ -24,0 +38 @@ Since January 2025, AWS Control Tower has released the following updates: +To see the **Enabled controls** page, navigate to the **Controls** section in the AWS Control Tower console. @@ -91 +105 @@ For more information, see [Remove an OU](./remove-ou.html). -## Control Catalog supports IPv6 addresses +## AWS Control Tower supports IPv6 addresses @@ -97 +111 @@ For more information, see [Remove an OU](./remove-ou.html). -The AWS Control Tower Control Catalog API now supports Internet Protocol version 6 (IPv6) addresses through our new dual-stack endpoints. The existing Control Catalog endpoints supporting IPv4 remains available for backwards compatibility. The new dual-stack domains are available either [from the internet](https://docs.aws.amazon.com/general/latest/gr/controlcatalog.html) or [from within an Amazon Virtual Private Cloud (VPC)](https://docs.aws.amazon.com/controlcatalog/latest/userguide/vpc-interface-endpoints.html) using [AWS PrivateLink](https://aws.amazon.com/privatelink/) _._ +The AWS Control Tower API now supports Internet Protocol version 6 (IPv6) addresses through our new dual-stack endpoints. The existing Control Catalog endpoints supporting IPv4 remains available for backwards compatibility. The new dual-stack domains are available either [from the internet](https://docs.aws.amazon.com/general/latest/gr/controlcatalog.html) or [from within an Amazon Virtual Private Cloud (VPC)](https://docs.aws.amazon.com/controlcatalog/latest/userguide/vpc-interface-endpoints.html) using [AWS PrivateLink](https://aws.amazon.com/privatelink/) _._