AWS controltower documentation change
Summary
Updated documentation to remove redundant 'AWS' prefix from CloudFormation references throughout the file
Security assessment
Changes are purely cosmetic/terminology updates (removing 'AWS' from CloudFormation references). No security configuration changes or vulnerability fixes were made. The security controls described (encryption, VPC config, logging) remain unchanged in their security implications.
Diff
diff --git a/controltower/latest/controlreference/opensearch-rules.md b/controltower/latest/controlreference/opensearch-rules.md index fed10c726..5fd9fb72a 100644 --- a//controltower/latest/controlreference/opensearch-rules.md +++ b//controltower/latest/controlreference/opensearch-rules.md @@ -52 +52 @@ This control checks whether Elasticsearch domains have encryption-at-rest enable - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -58 +58 @@ This control checks whether Elasticsearch domains have encryption-at-rest enable - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.1 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.1 rule specification @@ -67 +67 @@ This control checks whether Elasticsearch domains have encryption-at-rest enable - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.1 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.1 example templates @@ -170 +170 @@ An Elasticsearch domain configured with encryption-at-rest enabled. The example - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -177 +177 @@ An Elasticsearch domain configured with encryption-at-rest enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -181 +181 @@ An Elasticsearch domain configured with encryption-at-rest enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -186 +186 @@ An Elasticsearch domain configured with encryption-at-rest enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -193 +193 @@ An Elasticsearch domain configured with encryption-at-rest enabled. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -331 +331 @@ This control checks whether Elasticsearch domains are configured with VPC option - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -337 +337 @@ This control checks whether Elasticsearch domains are configured with VPC option - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.2 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.2 rule specification @@ -346 +346 @@ This control checks whether Elasticsearch domains are configured with VPC option - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.2 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.2 example templates @@ -454 +454 @@ An Elasticsearch domain configured to deploy within an Amazon VPC by means of VP - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -461 +461 @@ An Elasticsearch domain configured to deploy within an Amazon VPC by means of VP - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -465 +465 @@ An Elasticsearch domain configured to deploy within an Amazon VPC by means of VP - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -470 +470 @@ An Elasticsearch domain configured to deploy within an Amazon VPC by means of VP - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -477 +477 @@ An Elasticsearch domain configured to deploy within an Amazon VPC by means of VP - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -629 +629 @@ This control checks whether Elasticsearch domains have node-to-node encryption e - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -635 +635 @@ This control checks whether Elasticsearch domains have node-to-node encryption e - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.3 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.3 rule specification @@ -644 +644 @@ This control checks whether Elasticsearch domains have node-to-node encryption e - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.3 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.3 example templates @@ -754 +754 @@ An Elasticsearch domain configured with node-to-node encryption enabled. The exa - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -761 +761 @@ An Elasticsearch domain configured with node-to-node encryption enabled. The exa - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -765 +765 @@ An Elasticsearch domain configured with node-to-node encryption enabled. The exa - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -770 +770 @@ An Elasticsearch domain configured with node-to-node encryption enabled. The exa - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -777 +777 @@ An Elasticsearch domain configured with node-to-node encryption enabled. The exa - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -915 +915 @@ This control checks whether Elasticsearch domains are configured to send error l - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -921 +921 @@ This control checks whether Elasticsearch domains are configured to send error l - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.4 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.4 rule specification @@ -930 +930 @@ This control checks whether Elasticsearch domains are configured to send error l - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.4 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.4 example templates @@ -1043 +1043 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1050 +1050 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1054 +1054 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1059 +1059 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1065 +1065 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1075 +1075 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1084 +1084 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1094 +1094 @@ An Elasticsearch domain configured to send error logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1319 +1319 @@ This control checks whether Elasticsearch domains are configured to send audit l - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1325 +1325 @@ This control checks whether Elasticsearch domains are configured to send audit l - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.5 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.5 rule specification @@ -1334 +1334 @@ This control checks whether Elasticsearch domains are configured to send audit l - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.5 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.5 example templates @@ -1488 +1488 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1495 +1495 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1499 +1499 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1504 +1504 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1510 +1510 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1520 +1520 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1529 +1529 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1539 +1539 @@ An Elasticsearch domain configured to send audit logs to Amazon CloudWatch Logs. - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1837 +1837 @@ This control checks whether ElasticSearch domains are configured with at least t - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1843 +1843 @@ This control checks whether ElasticSearch domains are configured with at least t - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.6 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.6 rule specification @@ -1852 +1852 @@ This control checks whether ElasticSearch domains are configured with at least t - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.6 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.6 example templates @@ -1957 +1957 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1964 +1964 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1968 +1968 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1973 +1973 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1982 +1982 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1991 +1991 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2000 +2000 @@ An Elasticsearch domain configured with three data nodes and zone awareness enab - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2144 +2144 @@ This control checks whether Elasticsearch domains are configured with at least t - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -2150 +2150 @@ This control checks whether Elasticsearch domains are configured with at least t - * **AWS CloudFormation guard rule:** CT.OPENSEARCH.PR.7 rule specification + * **CloudFormation guard rule:** CT.OPENSEARCH.PR.7 rule specification @@ -2159 +2159 @@ This control checks whether Elasticsearch domains are configured with at least t - * For examples of PASS and FAIL AWS CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.7 example templates + * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.OPENSEARCH.PR.7 example templates @@ -2327 +2327 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2334 +2334 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2338 +2338 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2343 +2343 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2352 +2352 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2361 +2361 @@ An Elasticsearch domain configured with three dedicated master nodes by means of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2370 +2370 @@ An Elasticsearch domain configured with three dedicated master nodes by means of