AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/neptune-rules.md

Summary

Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document for terminology consistency

Security assessment

The changes are purely branding/terminology updates (removing 'AWS' prefix from CloudFormation references). No security controls, vulnerabilities, or security features were modified or added. The updates maintain existing security-related documentation about Neptune cluster controls (IAM auth, deletion protection, encryption, audit logs, backups) but do not alter their security implications.

Diff

diff --git a/controltower/latest/controlreference/neptune-rules.md b/controltower/latest/controlreference/neptune-rules.md
index da0e3b5f3..ece1a7f7b 100644
--- a//controltower/latest/controlreference/neptune-rules.md
+++ b//controltower/latest/controlreference/neptune-rules.md
@@ -30 +30 @@ This control checks whether an Amazon Neptune cluster has AWS Identity and Acces
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -36 +36 @@ This control checks whether an Amazon Neptune cluster has AWS Identity and Acces
-  * **AWS CloudFormation guard rule:** CT.NEPTUNE.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.NEPTUNE.PR.1 rule specification
@@ -104 +104 @@ Neptune Cluster configured with AWS IAM database authentication enabled. The exa
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -111 +111 @@ Neptune Cluster configured with AWS IAM database authentication enabled. The exa
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -115 +115 @@ Neptune Cluster configured with AWS IAM database authentication enabled. The exa
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -120 +120 @@ Neptune Cluster configured with AWS IAM database authentication enabled. The exa
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -125 +125 @@ Neptune Cluster configured with AWS IAM database authentication enabled. The exa
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -221 +221 @@ This control checks whether an Amazon Neptune cluster has deletion protection en
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -227 +227 @@ This control checks whether an Amazon Neptune cluster has deletion protection en
-  * **AWS CloudFormation guard rule:** CT.NEPTUNE.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.NEPTUNE.PR.2 rule specification
@@ -295 +295 @@ An Amazon Neptune Cluster configured with deletion protection enabled. The examp
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -302 +302 @@ An Amazon Neptune Cluster configured with deletion protection enabled. The examp
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -306 +306 @@ An Amazon Neptune Cluster configured with deletion protection enabled. The examp
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -311 +311 @@ An Amazon Neptune Cluster configured with deletion protection enabled. The examp
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -316 +316 @@ An Amazon Neptune Cluster configured with deletion protection enabled. The examp
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -412 +412 @@ This control checks whether an Amazon Neptune cluster has storage encryption ena
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -418 +418 @@ This control checks whether an Amazon Neptune cluster has storage encryption ena
-  * **AWS CloudFormation guard rule:** CT.NEPTUNE.PR.3 rule specification
+  * **CloudFormation guard rule:** CT.NEPTUNE.PR.3 rule specification
@@ -493 +493 @@ An Amazon Neptune Cluster configured with storage encryption enabled. The exampl
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -500 +500 @@ An Amazon Neptune Cluster configured with storage encryption enabled. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -504 +504 @@ An Amazon Neptune Cluster configured with storage encryption enabled. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -509 +509 @@ An Amazon Neptune Cluster configured with storage encryption enabled. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -514 +514 @@ An Amazon Neptune Cluster configured with storage encryption enabled. The exampl
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -610 +610 @@ This control checks whether an Amazon Neptune cluster is configured to send audi
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -616 +616 @@ This control checks whether an Amazon Neptune cluster is configured to send audi
-  * **AWS CloudFormation guard rule:** CT.NEPTUNE.PR.4 rule specification
+  * **CloudFormation guard rule:** CT.NEPTUNE.PR.4 rule specification
@@ -687 +687 @@ An Amazon Neptune Cluster configured to export audit logs to Amazon CloudWatch L
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -694 +694 @@ An Amazon Neptune Cluster configured to export audit logs to Amazon CloudWatch L
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -698 +698 @@ An Amazon Neptune Cluster configured to export audit logs to Amazon CloudWatch L
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -704 +704 @@ An Amazon Neptune Cluster configured to export audit logs to Amazon CloudWatch L
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -710 +710 @@ An Amazon Neptune Cluster configured to export audit logs to Amazon CloudWatch L
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -813 +813 @@ This control checks whether Amazon Neptune DB clusters have configured automatic
-  * **Implementation:** AWS CloudFormation guard rule
+  * **Implementation:** CloudFormation guard rule
@@ -819 +819 @@ This control checks whether Amazon Neptune DB clusters have configured automatic
-  * **AWS CloudFormation guard rule:** CT.NEPTUNE.PR.5 rule specification
+  * **CloudFormation guard rule:** CT.NEPTUNE.PR.5 rule specification
@@ -887 +887 @@ An Amazon Neptune Cluster configured with a backup retention period of seven (7)
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -894 +894 @@ An Amazon Neptune Cluster configured with a backup retention period of seven (7)
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -898 +898 @@ An Amazon Neptune Cluster configured with a backup retention period of seven (7)
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -903 +903 @@ An Amazon Neptune Cluster configured with a backup retention period of seven (7)
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -909 +909 @@ An Amazon Neptune Cluster configured with a backup retention period of seven (7)
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document