AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/elb-rules.md

Summary

Updated terminology: replaced 'AWS CloudFormation' with 'CloudFormation' and similar for hook references throughout the document.

Security assessment

The changes are purely branding/terminology updates (removing 'AWS' from 'AWS CloudFormation'). There is no modification to the security controls, their implementation, or any security-related content. Thus, there is no impact on security.

Diff

diff --git a/controltower/latest/controlreference/elb-rules.md b/controltower/latest/controlreference/elb-rules.md
index 666cb27c5..a8ea354d5 100644
--- a//controltower/latest/controlreference/elb-rules.md
+++ b//controltower/latest/controlreference/elb-rules.md
@@ -50 +50 @@ This control checks whether HTTP to HTTPS redirection is configured as a default
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -56 +56 @@ This control checks whether HTTP to HTTPS redirection is configured as a default
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.1 rule specification
@@ -159 +159 @@ Application load balancer listener configured with a default action that redirec
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -166 +166 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -170 +170 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -175 +175 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -181 +181 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -187 +187 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -194 +194 @@ Application load balancer listener configured with a default action that redirec
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -399 +399 @@ This control checks whether your Elastic Load Balancing (ELB) application and ne
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -405 +405 @@ This control checks whether your Elastic Load Balancing (ELB) application and ne
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.2 rule specification
@@ -548 +548 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -555 +555 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -559 +559 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -564 +564 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -569 +569 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -575 +575 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -581 +581 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -586 +586 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -592 +592 @@ Amazon ELB listener certificate configured with an AWS Certificate Manager SSL c
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -865 +865 @@ This control checks to ensure that an Application Load Balancer is configured wi
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -871 +871 @@ This control checks to ensure that an Application Load Balancer is configured wi
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.3 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.3 rule specification
@@ -1007 +1007 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -1014 +1014 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1018 +1018 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1023 +1023 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1031 +1031 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1038 +1038 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1045 +1045 @@ Application Load Balancer configured with `strictest` desync mitigation mode, by
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1235 +1235 @@ This control checks whether Application Load Balancers are configured to drop no
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -1241 +1241 @@ This control checks whether Application Load Balancers are configured to drop no
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.4 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.4 rule specification
@@ -1333 +1333 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -1340 +1340 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1344 +1344 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1349 +1349 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1355 +1355 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1362 +1362 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1370 +1370 @@ Application Load Balancer configured to drop non-valid HTTP headers. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1548 +1548 @@ Checks whether Elastic Load Balancing (ELB) has deletion protection activated.
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -1554 +1554 @@ Checks whether Elastic Load Balancing (ELB) has deletion protection activated.
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.5 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.5 rule specification
@@ -1646 +1646 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -1653 +1653 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1657 +1657 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1662 +1662 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1668 +1668 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1675 +1675 @@ Application Load Balancer configured with deletion protection active. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -1850 +1850 @@ This control checks whether your Elastic Load Balancing (ELB) application and ne
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -1856 +1856 @@ This control checks whether your Elastic Load Balancing (ELB) application and ne
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.6 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.6 rule specification
@@ -2024 +2024 @@ Network Load Balancer configured with access logging activated. The example is s
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -2031 +2031 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2035 +2035 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2040 +2040 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2046 +2046 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2053 +2053 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2060 +2060 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2068 +2068 @@ Network Load Balancer configured with access logging activated. The example is s
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2406 +2406 @@ This control checks whether an Elastic Load Balancing (ELB) classic load balance
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -2412 +2412 @@ This control checks whether an Elastic Load Balancing (ELB) classic load balance
-  * **AWS CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.7 rule specification
+  * **CloudFormation guard rule:** CT.ELASTICLOADBALANCING.PR.7 rule specification
@@ -2639 +2639 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -2646 +2646 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2650 +2650 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2655 +2655 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2662 +2662 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2668 +2668 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2674 +2674 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -2844 +2844 @@ This control checks whether classic load balancers use HTTPS/SSL certificates pr