AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant 'AWS' branding from CloudFormation-related terms
Security assessment
The changes are purely cosmetic branding updates to standardize terminology. No security controls, vulnerability mitigations, or policy logic were modified. The updates maintain existing security checks for Lambda resource policies, VPC access, authentication types, and CORS configurations without altering their security implications.
Diff
diff --git a/controltower/latest/controlreference/lambda-rules.md b/controltower/latest/controlreference/lambda-rules.md index bc73242c4..7e23e2f0f 100644 --- a//controltower/latest/controlreference/lambda-rules.md +++ b//controltower/latest/controlreference/lambda-rules.md @@ -30 +30 @@ This control checks whether an AWS Lambda function resource-based policy prohibi - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -36 +36 @@ This control checks whether an AWS Lambda function resource-based policy prohibi - * **AWS CloudFormation guard rule:** CT.LAMBDA.PR.2 rule specification + * **CloudFormation guard rule:** CT.LAMBDA.PR.2 rule specification @@ -193 +193 @@ AWS Lambda function policy configured with a service principal and source ARN co - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -200 +200 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -204 +204 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -209 +209 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -217 +217 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -225 +225 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -230 +230 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -237 +237 @@ AWS Lambda function policy configured with a service principal and source ARN co - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -471 +471 @@ This control checks whether an AWS Lambda function has been configured with acce - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -477 +477 @@ This control checks whether an AWS Lambda function has been configured with acce - * **AWS CloudFormation guard rule:** CT.LAMBDA.PR.3 rule specification + * **CloudFormation guard rule:** CT.LAMBDA.PR.3 rule specification @@ -597 +597 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -604 +604 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -608 +608 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -613 +613 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -621 +621 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -629 +629 @@ AWS Lambda function configured to access resources in a VPC. The example is show - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -887 +887 @@ This control checks whether an AWS Lambda layer permission has been configured t - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -893 +893 @@ This control checks whether an AWS Lambda layer permission has been configured t - * **AWS CloudFormation guard rule:** CT.LAMBDA.PR.4 rule specification + * **CloudFormation guard rule:** CT.LAMBDA.PR.4 rule specification @@ -1004 +1004 @@ An AWS Lambda version permission URL configured to grant layer usage permission - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1011 +1011 @@ An AWS Lambda version permission URL configured to grant layer usage permission - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1015 +1015 @@ An AWS Lambda version permission URL configured to grant layer usage permission - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1021 +1021 @@ An AWS Lambda version permission URL configured to grant layer usage permission - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1027 +1027 @@ An AWS Lambda version permission URL configured to grant layer usage permission - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1167 +1167 @@ This control checks whether an AWS Lambda function URL is configured to use auth - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1173 +1173 @@ This control checks whether an AWS Lambda function URL is configured to use auth - * **AWS CloudFormation guard rule:** CT.LAMBDA.PR.5 rule specification + * **CloudFormation guard rule:** CT.LAMBDA.PR.5 rule specification @@ -1251 +1251 @@ An AWS Lambda function URL (endpoint) configured with AWS IAM-based authenticati - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1258 +1258 @@ An AWS Lambda function URL (endpoint) configured with AWS IAM-based authenticati - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1262 +1262 @@ An AWS Lambda function URL (endpoint) configured with AWS IAM-based authenticati - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1267 +1267 @@ An AWS Lambda function URL (endpoint) configured with AWS IAM-based authenticati - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1272 +1272 @@ An AWS Lambda function URL (endpoint) configured with AWS IAM-based authenticati - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1443 +1443 @@ This control checks whether an AWS Lambda function URL is configured with a cros - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1449 +1449 @@ This control checks whether an AWS Lambda function URL is configured with a cros - * **AWS CloudFormation guard rule:** CT.LAMBDA.PR.6 rule specification + * **CloudFormation guard rule:** CT.LAMBDA.PR.6 rule specification @@ -1534 +1534 @@ AWS Lambda function URL configured with a cross-origin resource sharing (CORS) p - # AWS CloudFormation, AWS CloudFormation Hook + # CloudFormation, CloudFormation Hook @@ -1541 +1541 @@ AWS Lambda function URL configured with a cross-origin resource sharing (CORS) p - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1545 +1545 @@ AWS Lambda function URL configured with a cross-origin resource sharing (CORS) p - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1550 +1550 @@ AWS Lambda function URL configured with a cross-origin resource sharing (CORS) p - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1557 +1557 @@ AWS Lambda function URL configured with a cross-origin resource sharing (CORS) p - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document