AWS controltower documentation change
Summary
Updated documentation to replace 'AWS CloudFormation' with 'CloudFormation' throughout the file, removing AWS branding from CloudFormation references
Security assessment
Changes are purely branding/naming convention updates (removing 'AWS' prefix from CloudFormation references). No security controls, vulnerabilities, or security features were added/modified. The updates maintain existing security-related content about ECS controls but don't introduce new security aspects.
Diff
diff --git a/controltower/latest/controlreference/ecs-rules.md b/controltower/latest/controlreference/ecs-rules.md index c65774d65..89306ca48 100644 --- a//controltower/latest/controlreference/ecs-rules.md +++ b//controltower/latest/controlreference/ecs-rules.md @@ -44 +44 @@ This control checks whether Amazon Elastic Container Service (Amazon ECS) Fargat - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -50 +50 @@ This control checks whether Amazon Elastic Container Service (Amazon ECS) Fargat - * **AWS CloudFormation guard rule:** CT.ECS.PR.1 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.1 rule specification @@ -83 +83 @@ The examples that follow show how to implement this remediation. -Amazon ECS service configured to deploy using the `LATEST` platform version by means of AWS CloudFormation defaults. The example is shown in JSON and in YAML. +Amazon ECS service configured to deploy using the `LATEST` platform version by means of CloudFormation defaults. The example is shown in JSON and in YAML. @@ -214 +214 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -221 +221 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -225 +225 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -230 +230 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -235 +235 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -241 +241 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -247 +247 @@ Amazon ECS service configured to deploy using the `LATEST` platform version by m - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -472 +472 @@ This control checks whether your Amazon Elastic Container Service (Amazon ECS) c - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -478 +478 @@ This control checks whether your Amazon Elastic Container Service (Amazon ECS) c - * **AWS CloudFormation guard rule:** CT.ECS.PR.2 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.2 rule specification @@ -553 +553 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -560 +560 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -564 +564 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -569 +569 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -575 +575 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -582 +582 @@ Amazon ECS cluster configured with container insights enabled. The example is sh - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -696 +696 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -702 +702 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **AWS CloudFormation guard rule:** CT.ECS.PR.3 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.3 rule specification @@ -792 +792 @@ Amazon ECS task definition configured with a container definition and a non-root - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -799 +799 @@ Amazon ECS task definition configured with a container definition and a non-root - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -803 +803 @@ Amazon ECS task definition configured with a container definition and a non-root - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -808 +808 @@ Amazon ECS task definition configured with a container definition and a non-root - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -814 +814 @@ Amazon ECS task definition configured with a container definition and a non-root - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -821 +821 @@ Amazon ECS task definition configured with a container definition and a non-root - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -952 +952 @@ This control checks whether the networking mode for Amazon Elastic Container Ser - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -958 +958 @@ This control checks whether the networking mode for Amazon Elastic Container Ser - * **AWS CloudFormation guard rule:** CT.ECS.PR.4 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.4 rule specification @@ -1049 +1049 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1056 +1056 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1060 +1060 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1065 +1065 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1072 +1072 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1080 +1080 @@ Amazon ECS task definition configured with `awsvpc` networking mode. The example - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1208 +1208 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1214 +1214 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **AWS CloudFormation guard rule:** CT.ECS.PR.5 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.5 rule specification @@ -1342 +1342 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1349 +1349 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1353 +1353 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1358 +1358 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1365 +1365 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1372 +1372 @@ Amazon ECS task definition configured to send log information to Amazon CloudWat - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1540 +1540 @@ This control checks whether Amazon Elastic Container Service (Amazon ECS) task d - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1546 +1546 @@ This control checks whether Amazon Elastic Container Service (Amazon ECS) task d - * **AWS CloudFormation guard rule:** CT.ECS.PR.6 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.6 rule specification @@ -1641 +1641 @@ Amazon ECS task definition with read-only access to container root filesystems. - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1648 +1648 @@ Amazon ECS task definition with read-only access to container root filesystems. - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1652 +1652 @@ Amazon ECS task definition with read-only access to container root filesystems. - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1657 +1657 @@ Amazon ECS task definition with read-only access to container root filesystems. - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1663 +1663 @@ Amazon ECS task definition with read-only access to container root filesystems. - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1670 +1670 @@ Amazon ECS task definition with read-only access to container root filesystems. - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1796 +1796 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1802 +1802 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **AWS CloudFormation guard rule:** CT.ECS.PR.7 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.7 rule specification @@ -1888 +1888 @@ Amazon ECS task definition configured with a specified memory limit for containe - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1895 +1895 @@ Amazon ECS task definition configured with a specified memory limit for containe - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1899 +1899 @@ Amazon ECS task definition configured with a specified memory limit for containe - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1904 +1904 @@ Amazon ECS task definition configured with a specified memory limit for containe - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1910 +1910 @@ Amazon ECS task definition configured with a specified memory limit for containe - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -1917 +1917 @@ Amazon ECS task definition configured with a specified memory limit for containe - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -2042 +2042 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -2048 +2048 @@ This control checks whether Amazon Elastic Container Service (ECS) task definiti - * **AWS CloudFormation guard rule:** CT.ECS.PR.8 rule specification + * **CloudFormation guard rule:** CT.ECS.PR.8 rule specification @@ -2139 +2139 @@ The examples that follow show how to implement this remediation. -Amazon ECS task definition with host networking mode configured for non-root user container definitions and privileged mode deactivated, by means of AWS CloudFormation defaults. The example is shown in JSON and in YAML. +Amazon ECS task definition with host networking mode configured for non-root user container definitions and privileged mode deactivated, by means of CloudFormation defaults. The example is shown in JSON and in YAML. @@ -2208 +2208 @@ Amazon ECS task definition with host networking mode configured for non-root use - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2215 +2215 @@ Amazon ECS task definition with host networking mode configured for non-root use - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2219 +2219 @@ Amazon ECS task definition with host networking mode configured for non-root use - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2224 +2224 @@ Amazon ECS task definition with host networking mode configured for non-root use - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2230 +2230 @@ Amazon ECS task definition with host networking mode configured for non-root use