AWS AWSCloudFormation medium security documentation change
Summary
Added 'RemediationTypes' property with allowed value 'INHERITANCE_DRIFT' to configure automatic drift correction for landing zones
Security assessment
The addition of remediation types for configuration drift correction directly addresses security posture management by ensuring landing zones maintain compliant configurations. Drift correction helps prevent insecure configurations from persisting.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-controltower-landingzone.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-controltower-landingzone.md index eed0c410e..f80feadce 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-controltower-landingzone.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-controltower-landingzone.md @@ -21,0 +22 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "RemediationTypes" : [ String, ... ], @@ -34,0 +36,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + RemediationTypes: + - String @@ -52,0 +56,13 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat +`RemediationTypes` + + +The types of remediation actions configured for the landing zone, such as automatic drift correction or compliance enforcement. + +_Required_ : No + + _Type_ : Array of String + + _Allowed values_ : `INHERITANCE_DRIFT` + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) +