AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/cloudtrail-rules.md

Summary

Updated references from 'AWS CloudFormation' to 'CloudFormation' in multiple sections, removing redundant AWS branding from CloudFormation Guard Rule implementations and documentation contexts.

Security assessment

The changes are purely branding/naming consistency updates (removing 'AWS' prefix from CloudFormation references). No security vulnerabilities, mitigations, or new security features are mentioned or implied. The updates relate to documentation formatting rather than security controls.

Diff

diff --git a/controltower/latest/controlreference/cloudtrail-rules.md b/controltower/latest/controlreference/cloudtrail-rules.md
index 9e7f04cef..d1c923792 100644
--- a//controltower/latest/controlreference/cloudtrail-rules.md
+++ b//controltower/latest/controlreference/cloudtrail-rules.md
@@ -28 +28 @@ This control checks whether your AWS CloudTrail is configured to use the server-
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -34 +34 @@ This control checks whether your AWS CloudTrail is configured to use the server-
-  * **AWS CloudFormation guard rule:** CT.CLOUDTRAIL.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.CLOUDTRAIL.PR.1 rule specification
@@ -405 +405 @@ This control checks whether log file integrity validation is enabled on an AWS C
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -411 +411 @@ This control checks whether log file integrity validation is enabled on an AWS C
-  * **AWS CloudFormation guard rule:** CT.CLOUDTRAIL.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.CLOUDTRAIL.PR.2 rule specification
@@ -702 +702 @@ This control checks whether your AWS CloudTrail trail is configured to send logs
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -708 +708 @@ This control checks whether your AWS CloudTrail trail is configured to send logs
-  * **AWS CloudFormation guard rule:** CT.CLOUDTRAIL.PR.3 rule specification
+  * **CloudFormation guard rule:** CT.CLOUDTRAIL.PR.3 rule specification
@@ -1096 +1096 @@ This control checks whether a CloudTrail Lake event data store is encrypted at r
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -1102 +1102 @@ This control checks whether a CloudTrail Lake event data store is encrypted at r
-  * **AWS CloudFormation guard rule:** CT.CLOUDTRAIL.PR.4 rule specification
+  * **CloudFormation guard rule:** CT.CLOUDTRAIL.PR.4 rule specification
@@ -1188 +1188 @@ CloudTrail Lake event data store configured to encrypt data at rest with an AWS
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -1195 +1195 @@ CloudTrail Lake event data store configured to encrypt data at rest with an AWS
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1199 +1199 @@ CloudTrail Lake event data store configured to encrypt data at rest with an AWS
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1204 +1204 @@ CloudTrail Lake event data store configured to encrypt data at rest with an AWS
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1210 +1210 @@ CloudTrail Lake event data store configured to encrypt data at rest with an AWS
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation Hook Document
+    #     Given: The input document is an CloudFormation or CloudFormation Hook Document