AWS controltower documentation change
Summary
Updated documentation to remove 'AWS' prefix from CloudFormation references in multiple sections
Security assessment
The changes are purely branding/terminology updates (AWS CloudFormation → CloudFormation) with no modifications to security controls or vulnerability disclosures. The ECR security controls themselves (lifecycle policies, image scanning, immutable tags) remain unchanged in their security implications.
Diff
diff --git a/controltower/latest/controlreference/ecr-rules.md b/controltower/latest/controlreference/ecr-rules.md index 3c17c81a5..0bf645225 100644 --- a//controltower/latest/controlreference/ecr-rules.md +++ b//controltower/latest/controlreference/ecr-rules.md @@ -26 +26 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -32 +32 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **AWS CloudFormation guard rule:** CT.ECR.PR.1 rule specification + * **CloudFormation guard rule:** CT.ECR.PR.1 rule specification @@ -120 +120 @@ Amazon ECR repository configured with a lifecycle policy. The example is shown i - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -127 +127 @@ Amazon ECR repository configured with a lifecycle policy. The example is shown i - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -131 +131 @@ Amazon ECR repository configured with a lifecycle policy. The example is shown i - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -136 +136 @@ Amazon ECR repository configured with a lifecycle policy. The example is shown i - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -143 +143 @@ Amazon ECR repository configured with a lifecycle policy. The example is shown i - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -268 +268 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -274 +274 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **AWS CloudFormation guard rule:** CT.ECR.PR.2 rule specification + * **CloudFormation guard rule:** CT.ECR.PR.2 rule specification @@ -345 +345 @@ Amazon ECR repository with image scanning enabled. The example is shown in JSON - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -352 +352 @@ Amazon ECR repository with image scanning enabled. The example is shown in JSON - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -356 +356 @@ Amazon ECR repository with image scanning enabled. The example is shown in JSON - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -361 +361 @@ Amazon ECR repository with image scanning enabled. The example is shown in JSON - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -366 +366 @@ Amazon ECR repository with image scanning enabled. The example is shown in JSON - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -469 +469 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -475 +475 @@ This control checks whether a private Amazon Elastic Container Registry (Amazon - * **AWS CloudFormation guard rule:** CT.ECR.PR.3 rule specification + * **CloudFormation guard rule:** CT.ECR.PR.3 rule specification @@ -543 +543 @@ Amazon ECR repository configured with immutable tags. The example is shown in JS - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -550 +550 @@ Amazon ECR repository configured with immutable tags. The example is shown in JS - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -554 +554 @@ Amazon ECR repository configured with immutable tags. The example is shown in JS - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -559 +559 @@ Amazon ECR repository configured with immutable tags. The example is shown in JS - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -564 +564 @@ Amazon ECR repository configured with immutable tags. The example is shown in JS - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document