AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/dax-rules.md

Summary

Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant AWS branding in implementation details and rule specifications

Security assessment

The changes are purely branding/terminology updates (removing 'AWS' from CloudFormation references) without modifying security controls or requirements. The actual security controls (encryption at rest, multi-AZ deployment, TLS enforcement) remain unchanged. No new security guidance or vulnerability fixes were introduced.

Diff

diff --git a/controltower/latest/controlreference/dax-rules.md b/controltower/latest/controlreference/dax-rules.md
index 21c816584..3b5682a66 100644
--- a//controltower/latest/controlreference/dax-rules.md
+++ b//controltower/latest/controlreference/dax-rules.md
@@ -30 +30 @@ The control CT.DAX.PR.1 cannot be activated from home Regions Canada (Central) R
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -36 +36 @@ The control CT.DAX.PR.1 cannot be activated from home Regions Canada (Central) R
-  * **AWS CloudFormation guard rule:** CT.DAX.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.DAX.PR.1 rule specification
@@ -118 +118 @@ Amazon DAX cluster configured with server-side encryption enabled. The example i
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -125 +125 @@ Amazon DAX cluster configured with server-side encryption enabled. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -129 +129 @@ Amazon DAX cluster configured with server-side encryption enabled. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -134 +134 @@ Amazon DAX cluster configured with server-side encryption enabled. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -140 +140 @@ Amazon DAX cluster configured with server-side encryption enabled. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -312 +312 @@ This control checks whether an Amazon DAX cluster is configured to deploy cluste
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -318 +318 @@ This control checks whether an Amazon DAX cluster is configured to deploy cluste
-  * **AWS CloudFormation guard rule:** CT.DAX.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.DAX.PR.2 rule specification
@@ -431 +431 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -438 +438 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -442 +442 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -450 +450 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -458 +458 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -465 +465 @@ Amazon DAX cluster configured with three nodes and three distinct Availability Z
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -665 +665 @@ This control checks whether an Amazon DynamoDB Accelerator (DAX) cluster endpoin
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -671 +671 @@ This control checks whether an Amazon DynamoDB Accelerator (DAX) cluster endpoin
-  * **AWS CloudFormation guard rule:** CT.DAX.PR.3 rule specification
+  * **CloudFormation guard rule:** CT.DAX.PR.3 rule specification
@@ -680 +680 @@ This control checks whether an Amazon DynamoDB Accelerator (DAX) cluster endpoin
-  * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.DAX.PR.3 example templates
+  * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.DAX.PR.3 example templates
@@ -759 +759 @@ An Amazon DAX cluster configured to encrypt data in transit. The example is show
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -766 +766 @@ An Amazon DAX cluster configured to encrypt data in transit. The example is show
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -770 +770 @@ An Amazon DAX cluster configured to encrypt data in transit. The example is show
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -775 +775 @@ An Amazon DAX cluster configured to encrypt data in transit. The example is show
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -780 +780 @@ An Amazon DAX cluster configured to encrypt data in transit. The example is show
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document