AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' in implementation details and guard rule specifications
Security assessment
The changes are branding/terminology updates (removing 'AWS' prefix from CloudFormation references) rather than addressing security vulnerabilities or adding security content. The security controls themselves (EKS cluster endpoint restrictions and secret encryption) remain unchanged in their security implications.
Diff
diff --git a/controltower/latest/controlreference/eks-rules.md b/controltower/latest/controlreference/eks-rules.md index d14dbf303..170e291a6 100644 --- a//controltower/latest/controlreference/eks-rules.md +++ b//controltower/latest/controlreference/eks-rules.md @@ -24 +24 @@ This control checks whether an Amazon Elastic Kubernetes Service (EKS) cluster e - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -30 +30 @@ This control checks whether an Amazon Elastic Kubernetes Service (EKS) cluster e - * **AWS CloudFormation guard rule:** CT.EKS.PR.1 rule specification + * **CloudFormation guard rule:** CT.EKS.PR.1 rule specification @@ -118 +118 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -125 +125 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -129 +129 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -135 +135 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -142 +142 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -149 +149 @@ An Amazon EKS cluster configured with public access disabled to the cluster's Ku - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -344 +344 @@ This control checks whether Amazon Elastic Kubernetes Service (Amazon EKS) clust - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -350 +350 @@ This control checks whether Amazon Elastic Kubernetes Service (Amazon EKS) clust - * **AWS CloudFormation guard rule:** CT.EKS.PR.2 rule specification + * **CloudFormation guard rule:** CT.EKS.PR.2 rule specification @@ -497 +497 @@ Amazon EKS cluster configured to have Kubernetes secrets encrypted using Amazon - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -504 +504 @@ Amazon EKS cluster configured to have Kubernetes secrets encrypted using Amazon - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -508 +508 @@ Amazon EKS cluster configured to have Kubernetes secrets encrypted using Amazon - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -513 +513 @@ Amazon EKS cluster configured to have Kubernetes secrets encrypted using Amazon - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -522 +522 @@ Amazon EKS cluster configured to have Kubernetes secrets encrypted using Amazon - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document