AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant 'AWS' branding in guard rule implementations and specifications.
Security assessment
The changes are purely cosmetic branding updates (removing 'AWS' from CloudFormation references) and do not alter security controls, remediation steps, or policy logic. The security implications of the documented CloudWatch alarm and log group controls remain unchanged.
Diff
diff --git a/controltower/latest/controlreference/cloudwatch-rules.md b/controltower/latest/controlreference/cloudwatch-rules.md index 3d396bb79..b40725b2b 100644 --- a//controltower/latest/controlreference/cloudwatch-rules.md +++ b//controltower/latest/controlreference/cloudwatch-rules.md @@ -28 +28 @@ This control checks whether an Amazon CloudWatch alarm has at least one action c - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -34 +34 @@ This control checks whether an Amazon CloudWatch alarm has at least one action c - * **AWS CloudFormation guard rule:** CT.CLOUDWATCH.PR.1 rule specification + * **CloudFormation guard rule:** CT.CLOUDWATCH.PR.1 rule specification @@ -127 +127 @@ An Amazon CloudWatch alarm configured to notify an SNS topic when the CloudWatch - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -134 +134 @@ An Amazon CloudWatch alarm configured to notify an SNS topic when the CloudWatch - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -138 +138 @@ An Amazon CloudWatch alarm configured to notify an SNS topic when the CloudWatch - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -143 +143 @@ An Amazon CloudWatch alarm configured to notify an SNS topic when the CloudWatch - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -148 +148 @@ An Amazon CloudWatch alarm configured to notify an SNS topic when the CloudWatch - # Given: The input document is an AWS CloudFormation or AWS CloudFormation Hook Document + # Given: The input document is an CloudFormation or CloudFormation Hook Document @@ -268 +268 @@ This control checks whether an Amazon CloudWatch Log Group retention period is s - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -274 +274 @@ This control checks whether an Amazon CloudWatch Log Group retention period is s - * **AWS CloudFormation guard rule:** CT.CLOUDWATCH.PR.2 rule specification + * **CloudFormation guard rule:** CT.CLOUDWATCH.PR.2 rule specification @@ -342 +342 @@ An Amazon CloudWatch log group configured to retain logs for one year (365 days) - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -349 +349 @@ An Amazon CloudWatch log group configured to retain logs for one year (365 days) - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -353 +353 @@ An Amazon CloudWatch log group configured to retain logs for one year (365 days) - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -359 +359 @@ An Amazon CloudWatch log group configured to retain logs for one year (365 days) - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -364 +364 @@ An Amazon CloudWatch log group configured to retain logs for one year (365 days) - # Given: The input document is an AWS CloudFormation or AWS CloudFormation Hook Document + # Given: The input document is an CloudFormation or CloudFormation Hook Document @@ -462 +462 @@ This control checks whether an Amazon CloudWatch Logs log group is encrypted at - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -468 +468 @@ This control checks whether an Amazon CloudWatch Logs log group is encrypted at - * **AWS CloudFormation guard rule:** CT.CLOUDWATCH.PR.3 rule specification + * **CloudFormation guard rule:** CT.CLOUDWATCH.PR.3 rule specification @@ -541 +541 @@ An Amazon CloudWatch log group configured to encrypt logs with an AWS KMS custom - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -548 +548 @@ An Amazon CloudWatch log group configured to encrypt logs with an AWS KMS custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -552 +552 @@ An Amazon CloudWatch log group configured to encrypt logs with an AWS KMS custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -557 +557 @@ An Amazon CloudWatch log group configured to encrypt logs with an AWS KMS custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -562 +562 @@ An Amazon CloudWatch log group configured to encrypt logs with an AWS KMS custom - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -718 +718 @@ This control checks whether an Amazon CloudWatch alarm has actions enabled. - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -724 +724 @@ This control checks whether an Amazon CloudWatch alarm has actions enabled. - * **AWS CloudFormation guard rule:** CT.CLOUDWATCH.PR.4 rule specification + * **CloudFormation guard rule:** CT.CLOUDWATCH.PR.4 rule specification @@ -817 +817 @@ An Amazon CloudWatch alarm configured with alarm actions enabled. The example is - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -824 +824 @@ An Amazon CloudWatch alarm configured with alarm actions enabled. The example is - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -828 +828 @@ An Amazon CloudWatch alarm configured with alarm actions enabled. The example is - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -833 +833 @@ An Amazon CloudWatch alarm configured with alarm actions enabled. The example is - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -838 +838 @@ An Amazon CloudWatch alarm configured with alarm actions enabled. The example is - # Given: The input document is an AWS CloudFormation or AWS CloudFormation Hook Document + # Given: The input document is an CloudFormation or CloudFormation Hook Document