AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant 'AWS' branding from CloudFormation mentions in implementation details and guard rule specifications
Security assessment
The changes are purely branding/naming convention updates (removing 'AWS' prefix from CloudFormation references). There is no evidence of addressing security vulnerabilities, modifying security controls, or changing security-related guidance. The updates maintain existing security checks for IAM policies but do not alter their security implications.
Diff
diff --git a/controltower/latest/controlreference/iam-rules.md b/controltower/latest/controlreference/iam-rules.md index ca6a7f74d..b9f419f44 100644 --- a//controltower/latest/controlreference/iam-rules.md +++ b//controltower/latest/controlreference/iam-rules.md @@ -30 +30 @@ This control checks that AWS Identity and Access Management (IAM) inline policie - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -36 +36 @@ This control checks that AWS Identity and Access Management (IAM) inline policie - * **AWS CloudFormation guard rule:** CT.IAM.PR.1 rule specification + * **CloudFormation guard rule:** CT.IAM.PR.1 rule specification @@ -224 +224 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -231 +231 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -235 +235 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -240 +240 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -246 +246 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -251 +251 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -257 +257 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -265 +265 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -274 +274 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -282 +282 @@ IAM role configured with an inline policy allowing retrieval of objects from an - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -529 +529 @@ This control checks whether AWS Identity and Access Management (IAM) customer ma - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -535 +535 @@ This control checks whether AWS Identity and Access Management (IAM) customer ma - * **AWS CloudFormation guard rule:** CT.IAM.PR.2 rule specification + * **CloudFormation guard rule:** CT.IAM.PR.2 rule specification @@ -643 +643 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -650 +650 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -654 +654 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -659 +659 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -665 +665 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -674 +674 @@ IAM managed policy configured to allow retrieval of objects from an Amazon S3 bu - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -858 +858 @@ This control checks that AWS Identity and Access Management (IAM) customer-manag - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -864 +864 @@ This control checks that AWS Identity and Access Management (IAM) customer-manag - * **AWS CloudFormation guard rule:** CT.IAM.PR.3 rule specification + * **CloudFormation guard rule:** CT.IAM.PR.3 rule specification @@ -972 +972 @@ IAM managed policy configured to allow the Amazon S3 `ListBucket` action. The ex - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -976 +976 @@ IAM managed policy configured to allow the Amazon S3 `ListBucket` action. The ex - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -981 +981 @@ IAM managed policy configured to allow the Amazon S3 `ListBucket` action. The ex - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -988 +988 @@ IAM managed policy configured to allow the Amazon S3 `ListBucket` action. The ex - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -994 +994 @@ IAM managed policy configured to allow the Amazon S3 `ListBucket` action. The ex - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1190 +1190 @@ This control checks whether your AWS Identity and Access Management (IAM) user h - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1196 +1196 @@ This control checks whether your AWS Identity and Access Management (IAM) user h - * **AWS CloudFormation guard rule:** CT.IAM.PR.4 rule specification + * **CloudFormation guard rule:** CT.IAM.PR.4 rule specification @@ -1360 +1360 @@ IAM managed policy configured with no IAM user associations. The example is show - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1367 +1367 @@ IAM managed policy configured with no IAM user associations. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1371 +1371 @@ IAM managed policy configured with no IAM user associations. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1376 +1376 @@ IAM managed policy configured with no IAM user associations. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1381 +1381 @@ IAM managed policy configured with no IAM user associations. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1387 +1387 @@ IAM managed policy configured with no IAM user associations. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1538 +1538 @@ This control checks whether AWS Identity and Access Management (IAM) inline poli - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1544 +1544 @@ This control checks whether AWS Identity and Access Management (IAM) inline poli - * **AWS CloudFormation guard rule:** CT.IAM.PR.5 rule specification + * **CloudFormation guard rule:** CT.IAM.PR.5 rule specification @@ -1846 +1846 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1850 +1850 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1855 +1855 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1860 +1860 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1866 +1866 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1873 +1873 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1879 +1879 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1887 +1887 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1894 +1894 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1901 +1901 @@ IAM policy associated with an IAM role as an inline policy and configured to all - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document