AWS controltower documentation change
Summary
Updated documentation to replace 'AWS CloudFormation' with 'CloudFormation' in multiple sections, removing redundant AWS branding from CloudFormation references
Security assessment
The changes are purely branding/naming updates without altering security controls or addressing vulnerabilities. All security-related rules (CT.CLOUDFRONT.PR.*) and their validation logic remain unchanged.
Diff
diff --git a/controltower/latest/controlreference/cloudfront-rules.md b/controltower/latest/controlreference/cloudfront-rules.md index 30940c69c..c3335b692 100644 --- a//controltower/latest/controlreference/cloudfront-rules.md +++ b//controltower/latest/controlreference/cloudfront-rules.md @@ -42 +42 @@ This control checks whether an Amazon CloudFront distribution is configured to r - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -48 +48 @@ This control checks whether an Amazon CloudFront distribution is configured to r - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.1 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.1 rule specification @@ -146 +146 @@ Amazon CloudFront distribution configured with a default root object. The exampl - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -153 +153 @@ Amazon CloudFront distribution configured with a default root object. The exampl - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -157 +157 @@ Amazon CloudFront distribution configured with a default root object. The exampl - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -163 +163 @@ Amazon CloudFront distribution configured with a default root object. The exampl - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -328 +328 @@ This control checks whether Amazon CloudFront distributions backed by Amazon S3 - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -334 +334 @@ This control checks whether Amazon CloudFront distributions backed by Amazon S3 - * **AWS CloudFormation guard rule:**CT.CLOUDFRONT.PR.2 rule specification + * **CloudFormation guard rule:**CT.CLOUDFRONT.PR.2 rule specification @@ -455 +455 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -462 +462 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -466 +466 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -472 +472 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -477 +477 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -484 +484 @@ Amazon CloudFront distribution with an Amazon S3 bucket origin and origin access - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -787 +787 @@ This control checks whether your Amazon CloudFront distributions use HTTPS, eith - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -793 +793 @@ This control checks whether your Amazon CloudFront distributions use HTTPS, eith - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.3 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.3 rule specification @@ -957 +957 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -964 +964 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -968 +968 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -973 +973 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -980 +980 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -987 +987 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -993 +993 @@ Amazon CloudFront distribution configured with a cache behavior that redirects v - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1172 +1172 @@ This control checks whether your Amazon CloudFront distribution is configured wi - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1178 +1178 @@ This control checks whether your Amazon CloudFront distribution is configured wi - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.4 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.4 rule specification @@ -1326 +1326 @@ Amazon CloudFront distribution configured with an origin group that contains two - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1333 +1333 @@ Amazon CloudFront distribution configured with an origin group that contains two - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1337 +1337 @@ Amazon CloudFront distribution configured with an origin group that contains two - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1342 +1342 @@ Amazon CloudFront distribution configured with an origin group that contains two - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1348 +1348 @@ Amazon CloudFront distribution configured with an origin group that contains two - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1355 +1355 @@ Amazon CloudFront distribution configured with an origin group that contains two - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1550 +1550 @@ This control checks whether Amazon CloudFront distributions are configured with - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1556 +1556 @@ This control checks whether Amazon CloudFront distributions are configured with - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.5 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.5 rule specification @@ -1664 +1664 @@ Amazon CloudFront distribution configured with access logging enabled. The examp - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1671 +1671 @@ Amazon CloudFront distribution configured with access logging enabled. The examp - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1675 +1675 @@ Amazon CloudFront distribution configured with access logging enabled. The examp - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1680 +1680 @@ Amazon CloudFront distribution configured with access logging enabled. The examp - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1687 +1687 @@ Amazon CloudFront distribution configured with access logging enabled. The examp - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1908 +1908 @@ This control checks whether the certificate associated with an Amazon CloudFront - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1914 +1914 @@ This control checks whether the certificate associated with an Amazon CloudFront - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.6 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.6 rule specification @@ -2028 +2028 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2035 +2035 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2039 +2039 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2044 +2044 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2050 +2050 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2058 +2058 @@ Amazon CloudFront distribution configured with an AWS Certificate Manager SSL ce - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2287 +2287 @@ This control checks whether your Amazon CloudFront distributions are configured - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -2293 +2293 @@ This control checks whether your Amazon CloudFront distributions are configured - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.7 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.7 rule specification @@ -2407 +2407 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2414 +2414 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2418 +2418 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2423 +2423 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2429 +2429 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2437 +2437 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2446 +2446 @@ Amazon CloudFront distribution configured to use SNI to serve HTTPS requests. Th - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2688 +2688 @@ This control checks whether your Amazon CloudFront distributions are encrypting - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -2694 +2694 @@ This control checks whether your Amazon CloudFront distributions are encrypting - * **AWS CloudFormation guard rule:** CT.CLOUDFRONT.PR.8 rule specification + * **CloudFormation guard rule:** CT.CLOUDFRONT.PR.8 rule specification @@ -2884 +2884 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2891 +2891 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2895 +2895 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2900 +2900 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2906 +2906 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2911 +2911 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2918 +2918 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2927 +2927 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2934 +2934 @@ Amazon CloudFront distribution configured to require HTTPS connections to custom