AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/msk-rules.md

Summary

Updated terminology from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant AWS branding references

Security assessment

The changes are purely cosmetic branding updates (removing 'AWS' prefix from CloudFormation references). No modifications to security controls, encryption requirements, or public access policies were made. The underlying security rules (CT.MSK.PR.1 and CT.MSK.PR.2) remain unchanged in their enforcement of data encryption and public access restrictions.

Diff

diff --git a/controltower/latest/controlreference/msk-rules.md b/controltower/latest/controlreference/msk-rules.md
index ca58d3700..7ffeca5c0 100644
--- a//controltower/latest/controlreference/msk-rules.md
+++ b//controltower/latest/controlreference/msk-rules.md
@@ -24 +24 @@ This control checks whether an Amazon MSK cluster is configured to encrypt data
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -30 +30 @@ This control checks whether an Amazon MSK cluster is configured to encrypt data
-  * **AWS CloudFormation guard rule:** CT.MSK.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.MSK.PR.1 rule specification
@@ -39 +39 @@ This control checks whether an Amazon MSK cluster is configured to encrypt data
-  * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.MSK.PR.1 example templates
+  * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.MSK.PR.1 example templates
@@ -155 +155 @@ An Amazon MSK cluster configured to encrypt data in transit between the broker n
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -162 +162 @@ An Amazon MSK cluster configured to encrypt data in transit between the broker n
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -166 +166 @@ An Amazon MSK cluster configured to encrypt data in transit between the broker n
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -172 +172 @@ An Amazon MSK cluster configured to encrypt data in transit between the broker n
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -177 +177 @@ An Amazon MSK cluster configured to encrypt data in transit between the broker n
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -451 +451 @@ This control checks whether an Amazon MSK cluster is configured to disallow publ
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -457 +457 @@ This control checks whether an Amazon MSK cluster is configured to disallow publ
-  * **AWS CloudFormation guard rule:** CT.MSK.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.MSK.PR.2 rule specification
@@ -466 +466 @@ This control checks whether an Amazon MSK cluster is configured to disallow publ
-  * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.MSK.PR.2 example templates
+  * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.MSK.PR.2 example templates
@@ -601 +601 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -608 +608 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -612 +612 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -617 +617 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -624 +624 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -630 +630 @@ An Amazon MSK cluster configured to disallow public access to cluster brokers th
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document