AWS Security ChangesHomeSearch

AWS awssupport documentation change

Service: awssupport · 2025-11-19 · Documentation low

File: awssupport/latest/user/operational-excellence-checks.md

Summary

Updated documentation to remove redundant 'AWS' prefix from CloudFormation references and adjust related links/text

Security assessment

Changes involve branding/naming consistency updates (changing 'AWS CloudFormation' to 'CloudFormation') rather than addressing security vulnerabilities or adding security guidance. No security controls or vulnerabilities are mentioned in the changes.

Diff

diff --git a/awssupport/latest/user/operational-excellence-checks.md b/awssupport/latest/user/operational-excellence-checks.md
index 20048e095..b8a6448ff 100644
--- a//awssupport/latest/user/operational-excellence-checks.md
+++ b//awssupport/latest/user/operational-excellence-checks.md
@@ -5 +5 @@
-Amazon API Gateway Not Logging Execution LogsAmazon API Gateway REST APIs Without X-Ray Tracing EnabledAmazon CloudFront Access Log ConfiguredAmazon CloudWatch Alarm Action is DisabledAmazon EC2 Instance Not Managed by AWS Systems ManagerAmazon ECR Repository With Tag Immutability DisabledAmazon ECS clusters with Container Insights disabledAmazon ECS task logging not enabledAmazon OpenSearch Service logging CloudWatch not configuredAmazon RDS DB instances in the clusters with heterogeneous parameter groupsAmazon RDS Enhanced Monitoring is turned offAmazon RDS Performance Insights is turned offAmazon RDS track_counts parameter is turned offAmazon Redshift cluster audit logging Amazon S3 Access Logs EnabledAmazon S3 does not have Event Notifications enabledAmazon SNS Topics Not Logging Message Delivery StatusAmazon VPC Without Flow LogsApplication Load Balancers and Classic Load Balancers Without Access Logs EnabledAWS CloudFormation Stack NotificationAWS CloudTrail data events logging for objects in an S3 bucketAWS CodeBuild Project LoggingAWS CodeDeploy Auto Rollback and Monitor EnabledAWS CodeDeploy Lambda is using all-at-once deployment configurationAWS Elastic Beanstalk Enhanced Health Reporting is not ConfiguredAWS Elastic Beanstalk with Managed Platform Updates DisabledAWS Fargate platform version is not latestAWS Systems Manager State Manager Association in Non-compliant StatusCloudTrail trails are not configured with Amazon CloudWatch LogsElastic Load Balancing Deletion Protection Not Enabled for Load BalancersRDS DB Cluster Deletion Protection Check RDS DB Instance Automatic Minor Version Upgrade Check
+Amazon API Gateway Not Logging Execution LogsAmazon API Gateway REST APIs Without X-Ray Tracing EnabledAmazon CloudFront Access Log ConfiguredAmazon CloudWatch Alarm Action is DisabledAmazon EC2 Instance Not Managed by AWS Systems ManagerAmazon ECR Repository With Tag Immutability DisabledAmazon ECS clusters with Container Insights disabledAmazon ECS task logging not enabledAmazon OpenSearch Service logging CloudWatch not configuredAmazon RDS DB instances in the clusters with heterogeneous parameter groupsAmazon RDS Enhanced Monitoring is turned offAmazon RDS Performance Insights is turned offAmazon RDS track_counts parameter is turned offAmazon Redshift cluster audit logging Amazon S3 Access Logs EnabledAmazon S3 does not have Event Notifications enabledAmazon SNS Topics Not Logging Message Delivery StatusAmazon VPC Without Flow LogsApplication Load Balancers and Classic Load Balancers Without Access Logs EnabledCloudFormation Stack NotificationAWS CloudTrail data events logging for objects in an S3 bucketAWS CodeBuild Project LoggingAWS CodeDeploy Auto Rollback and Monitor EnabledAWS CodeDeploy Lambda is using all-at-once deployment configurationAWS Elastic Beanstalk Enhanced Health Reporting is not ConfiguredAWS Elastic Beanstalk with Managed Platform Updates DisabledAWS Fargate platform version is not latestAWS Systems Manager State Manager Association in Non-compliant StatusCloudTrail trails are not configured with Amazon CloudWatch LogsElastic Load Balancing Deletion Protection Not Enabled for Load BalancersRDS DB Cluster Deletion Protection Check RDS DB Instance Automatic Minor Version Upgrade Check
@@ -51 +51 @@ You can use the following checks for the operational excellence category.
-  * [AWS CloudFormation Stack Notification](./operational-excellence-checks.html#cloudformation-stack-notification)
+  * [CloudFormation Stack Notification](./operational-excellence-checks.html#cloudformation-stack-notification)
@@ -1274 +1274 @@ For more information, see [Enable access logs for your Application Load Balancer
-## AWS CloudFormation Stack Notification
+## CloudFormation Stack Notification
@@ -1279 +1279 @@ For more information, see [Enable access logs for your Application Load Balancer
-Checks if all of your AWS CloudFormation stacks use Amazon SNS to receive notifications when an event occurs.
+Checks if all of your CloudFormation stacks use Amazon SNS to receive notifications when an event occurs.
@@ -1283 +1283 @@ You can configure this check to look for specific Amazon SNS topic ARNs using pa
-For more information, see [Setting AWS CloudFormationstack options](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-console-add-tags.html).
+For more information, see [Setting CloudFormationstack options](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-console-add-tags.html).
@@ -1304 +1304 @@ For Business, Enterprise On-Ramp, or Enterprise Support customers, you can use t
-Yellow: Amazon SNS event notifications for your AWS CloudFormation stacks are not turned on.
+Yellow: Amazon SNS event notifications for your CloudFormation stacks are not turned on.
@@ -1309 +1309 @@ Yellow: Amazon SNS event notifications for your AWS CloudFormation stacks are no
-Make sure that your AWS CloudFormation stacks use Amazon SNS to receive notifications when an event occurs.
+Make sure that your CloudFormation stacks use Amazon SNS to receive notifications when an event occurs.