AWS controltower documentation change
Summary
Updated terminology from 'AWS CloudFormation' to 'CloudFormation' in multiple sections, including implementation details and guard rule specifications.
Security assessment
The changes are purely terminological updates (removing redundant 'AWS' prefix from CloudFormation references). There is no evidence of addressing a security vulnerability, modifying security controls, or altering security guidance. The updates appear to align with branding consistency rather than security improvements.
Diff
diff --git a/controltower/latest/controlreference/kms-rules.md b/controltower/latest/controlreference/kms-rules.md index fd142849c..5e363eac5 100644 --- a//controltower/latest/controlreference/kms-rules.md +++ b//controltower/latest/controlreference/kms-rules.md @@ -26 +26 @@ This control checks whether key rotation is enabled for AWS KMS customer managed - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -32 +32 @@ This control checks whether key rotation is enabled for AWS KMS customer managed - * **AWS CloudFormation guard rule:** CT.KMS.PR.1 rule specification + * **CloudFormation guard rule:** CT.KMS.PR.1 rule specification @@ -136 +136 @@ AWS KMS customer managed key configured with key rotation activated. The example - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -143 +143 @@ AWS KMS customer managed key configured with key rotation activated. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -147 +147 @@ AWS KMS customer managed key configured with key rotation activated. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -152 +152 @@ AWS KMS customer managed key configured with key rotation activated. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -158 +158 @@ AWS KMS customer managed key configured with key rotation activated. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -164 +164 @@ AWS KMS customer managed key configured with key rotation activated. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -294 +294 @@ This control checks whether an AWS KMS asymmetric key with RSA key material, whi - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -300 +300 @@ This control checks whether an AWS KMS asymmetric key with RSA key material, whi - * **AWS CloudFormation guard rule:** CT.KMS.PR.2 rule specification + * **CloudFormation guard rule:** CT.KMS.PR.2 rule specification @@ -404 +404 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -411 +411 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -415 +415 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -420 +420 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -427 +427 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -434 +434 @@ An AWS KMS asymmetric key configured for encryption and decryption, with an `RSA - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -571 +571 @@ This control checks whether an AWS KMS key has an associated key policy statemen - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -577 +577 @@ This control checks whether an AWS KMS key has an associated key policy statemen - * **AWS CloudFormation guard rule:** CT.KMS.PR.3 rule specification + * **CloudFormation guard rule:** CT.KMS.PR.3 rule specification @@ -703 +703 @@ An AWS KMS key, configured to deny creation of AWS KMS grants where the `CreateG - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -710 +710 @@ An AWS KMS key, configured to deny creation of AWS KMS grants where the `CreateG - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -714 +714 @@ An AWS KMS key, configured to deny creation of AWS KMS grants where the `CreateG - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -719 +719 @@ An AWS KMS key, configured to deny creation of AWS KMS grants where the `CreateG - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -728 +728 @@ An AWS KMS key, configured to deny creation of AWS KMS grants where the `CreateG - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document