AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document for terminology consistency
Security assessment
The changes are purely terminological, replacing 'AWS CloudFormation' with 'CloudFormation' in implementation details and rule specifications. There is no modification to security controls, requirements, or vulnerability descriptions. The security implications of the documented controls (execution logging, X-Ray tracing, cache encryption, etc.) remain unchanged.
Diff
diff --git a/controltower/latest/controlreference/api-gateway-rules.md b/controltower/latest/controlreference/api-gateway-rules.md index 8b19915c8..488dffb57 100644 --- a//controltower/latest/controlreference/api-gateway-rules.md +++ b//controltower/latest/controlreference/api-gateway-rules.md @@ -32 +32 @@ This control checks whether all methods in Amazon API Gateway stage have executi - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -38 +38 @@ This control checks whether all methods in Amazon API Gateway stage have executi - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.1 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.1 rule specification @@ -134 +134 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -141 +141 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -145 +145 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -150 +150 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -157 +157 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -165 +165 @@ Amazon API Gateway stage configured with `error` level execution logging for all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -382 +382 @@ This control ensures that AWS X-Ray tracing is enabled on Amazon API Gateway RES - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -388 +388 @@ This control ensures that AWS X-Ray tracing is enabled on Amazon API Gateway RES - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.2 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.2 rule specification @@ -468 +468 @@ Amazon API Gateway stage configured with AWS X-Ray tracing enabled. The example - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -475 +475 @@ Amazon API Gateway stage configured with AWS X-Ray tracing enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -479 +479 @@ Amazon API Gateway stage configured with AWS X-Ray tracing enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -484 +484 @@ Amazon API Gateway stage configured with AWS X-Ray tracing enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -489 +489 @@ Amazon API Gateway stage configured with AWS X-Ray tracing enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -678 +678 @@ This control checks whether an Amazon API Gateway REST API stage that has cachin - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -684 +684 @@ This control checks whether an Amazon API Gateway REST API stage that has cachin - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.3 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.3 rule specification @@ -693 +693 @@ This control checks whether an Amazon API Gateway REST API stage that has cachin - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.3 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.3 example templates @@ -794 +794 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -801 +801 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -805 +805 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -810 +810 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -816 +816 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -824 +824 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -832 +832 @@ This example shows the API Gateway stage configured to encrypt cache data for al - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1062 +1062 @@ This control checks whether Amazon API Gateway V2 stages have access logging ena - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1068 +1068 @@ This control checks whether Amazon API Gateway V2 stages have access logging ena - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.4 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.4 rule specification @@ -1155 +1155 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1162 +1162 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1166 +1166 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1171 +1171 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1179 +1179 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1186 +1186 @@ Amazon API Gateway HTTP API stage configured to send API access logs to Amazon C - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1349 +1349 @@ This control checks whether Amazon API Gateway V2 API routes have an authorizati - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1355 +1355 @@ This control checks whether Amazon API Gateway V2 API routes have an authorizati - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.5 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.5 rule specification @@ -1364 +1364 @@ This control checks whether Amazon API Gateway V2 API routes have an authorizati - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.5 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.5 example templates @@ -1474 +1474 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1481 +1481 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1485 +1485 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1490 +1490 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1495 +1495 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1500 +1500 @@ Amazon API Gateway V2 managed overrides configured with AWS IAM authorization. T - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1660 +1660 @@ This control checks whether an Amazon API Gateway REST API domain name requires - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1666 +1666 @@ This control checks whether an Amazon API Gateway REST API domain name requires - * **AWS CloudFormation guard rule:** CT.APIGATEWAY.PR.6 rule specification + * **CloudFormation guard rule:** CT.APIGATEWAY.PR.6 rule specification @@ -1675 +1675 @@ This control checks whether an Amazon API Gateway REST API domain name requires - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.6 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.APIGATEWAY.PR.6 example templates @@ -1755 +1755 @@ An Amazon API Gateway regional domain name configured with a security policy tha - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1762 +1762 @@ An Amazon API Gateway regional domain name configured with a security policy tha - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1766 +1766 @@ An Amazon API Gateway regional domain name configured with a security policy tha - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1772 +1772 @@ An Amazon API Gateway regional domain name configured with a security policy tha - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1777 +1777 @@ An Amazon API Gateway regional domain name configured with a security policy tha - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document