AWS controltower documentation change
Summary
Updated documentation to replace 'AWS CloudFormation' with 'CloudFormation' terminology throughout multiple control rule sections
Security assessment
The changes are branding/terminology updates rather than substantive security content modifications. All security controls (like prohibiting public access, enabling audit logging, encryption requirements) remain unchanged. The updates standardize references to CloudFormation without altering security requirements or addressing vulnerabilities.
Diff
diff --git a/controltower/latest/controlreference/redshift-rules.md b/controltower/latest/controlreference/redshift-rules.md index 5dca604b8..ef4440464 100644 --- a//controltower/latest/controlreference/redshift-rules.md +++ b//controltower/latest/controlreference/redshift-rules.md @@ -38 +38 @@ This control checks whether Amazon Redshift clusters are configured to prohibit - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -44 +44 @@ This control checks whether Amazon Redshift clusters are configured to prohibit - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.1 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.1 rule specification @@ -128 +128 @@ Amazon Redshift cluster configured to prohibit public access. The example is sho - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -135 +135 @@ Amazon Redshift cluster configured to prohibit public access. The example is sho - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -139 +139 @@ Amazon Redshift cluster configured to prohibit public access. The example is sho - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -144 +144 @@ Amazon Redshift cluster configured to prohibit public access. The example is sho - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -150 +150 @@ Amazon Redshift cluster configured to prohibit public access. The example is sho - # Given: The input document is an AWS CloudFormation document or AWS CloudFormation hook document + # Given: The input document is an CloudFormation document or CloudFormation hook document @@ -279 +279 @@ This control checks whether Amazon Redshift clusters have automated snapshots en - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -285 +285 @@ This control checks whether Amazon Redshift clusters have automated snapshots en - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.2 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.2 rule specification @@ -367 +367 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -374 +374 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -378 +378 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -383 +383 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -389 +389 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -395 +395 @@ Amazon Redshift cluster configured with automatic snapshots active. The example - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -526 +526 @@ This control checks whether an Amazon Redshift cluster has audit logging activat - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -532 +532 @@ This control checks whether an Amazon Redshift cluster has audit logging activat - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.3 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.3 rule specification @@ -623 +623 @@ Amazon Redshift cluster configured with audit logging enabled. The example is sh - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -630 +630 @@ Amazon Redshift cluster configured with audit logging enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -634 +634 @@ Amazon Redshift cluster configured with audit logging enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -639 +639 @@ Amazon Redshift cluster configured with audit logging enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -645 +645 @@ Amazon Redshift cluster configured with audit logging enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -842 +842 @@ This control checks whether automatic major version upgrades are enabled for you - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -848 +848 @@ This control checks whether automatic major version upgrades are enabled for you - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.4 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.4 rule specification @@ -874 +874 @@ The examples that follow show how to implement this remediation. -Amazon Redshift cluster with automatic major version upgrades enabled through AWS CloudFormation defaults. The example is shown in JSON and in YAML. +Amazon Redshift cluster with automatic major version upgrades enabled through CloudFormation defaults. The example is shown in JSON and in YAML. @@ -971 +971 @@ Amazon Redshift cluster configured with automatic major version upgrades enabled - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -978 +978 @@ Amazon Redshift cluster configured with automatic major version upgrades enabled - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -982 +982 @@ Amazon Redshift cluster configured with automatic major version upgrades enabled - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -988 +988 @@ Amazon Redshift cluster configured with automatic major version upgrades enabled - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -993 +993 @@ Amazon Redshift cluster configured with automatic major version upgrades enabled - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1123 +1123 @@ This control checks whether an Amazon Redshift cluster has enhanced VPC routing - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1129 +1129 @@ This control checks whether an Amazon Redshift cluster has enhanced VPC routing - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.5 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.5 rule specification @@ -1211 +1211 @@ Amazon Redshift cluster configured with enhanced VPC routing. The example is sho - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1218 +1218 @@ Amazon Redshift cluster configured with enhanced VPC routing. The example is sho - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1222 +1222 @@ Amazon Redshift cluster configured with enhanced VPC routing. The example is sho - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1227 +1227 @@ Amazon Redshift cluster configured with enhanced VPC routing. The example is sho - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1233 +1233 @@ Amazon Redshift cluster configured with enhanced VPC routing. The example is sho - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1364 +1364 @@ This control checks whether an Amazon Redshift cluster has changed the administr - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1370 +1370 @@ This control checks whether an Amazon Redshift cluster has changed the administr - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.6 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.6 rule specification @@ -1448 +1448 @@ Amazon Redshift cluster configured with an administrator username different from - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1455 +1455 @@ Amazon Redshift cluster configured with an administrator username different from - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1459 +1459 @@ Amazon Redshift cluster configured with an administrator username different from - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1464 +1464 @@ Amazon Redshift cluster configured with an administrator username different from - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1470 +1470 @@ Amazon Redshift cluster configured with an administrator username different from - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1606 +1606 @@ This control checks whether an Amazon Redshift cluster has changed its database - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1612 +1612 @@ This control checks whether an Amazon Redshift cluster has changed its database - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.7 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.7 rule specification @@ -1694 +1694 @@ Amazon Redshift cluster configured with a database name different from the defau - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1701 +1701 @@ Amazon Redshift cluster configured with a database name different from the defau - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1705 +1705 @@ Amazon Redshift cluster configured with a database name different from the defau - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1710 +1710 @@ Amazon Redshift cluster configured with a database name different from the defau - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1715 +1715 @@ Amazon Redshift cluster configured with a database name different from the defau - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1853 +1853 @@ This control checks whether an Amazon Redshift cluster is encrypted. - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1859 +1859 @@ This control checks whether an Amazon Redshift cluster is encrypted. - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.8 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.8 rule specification @@ -1943 +1943 @@ An Amazon Redshift cluster configured with encryption enabled. The example is sh - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1950 +1950 @@ An Amazon Redshift cluster configured with encryption enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1954 +1954 @@ An Amazon Redshift cluster configured with encryption enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1959 +1959 @@ An Amazon Redshift cluster configured with encryption enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1964 +1964 @@ An Amazon Redshift cluster configured with encryption enabled. The example is sh - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2095 +2095 @@ This control checks whether an Amazon Redshift cluster parameter group is config - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -2101 +2101 @@ This control checks whether an Amazon Redshift cluster parameter group is config - * **AWS CloudFormation guard rule:** CT.REDSHIFT.PR.9 rule specification + * **CloudFormation guard rule:** CT.REDSHIFT.PR.9 rule specification @@ -2181 +2181 @@ An Amazon Redshift cluster parameter group, configured to require encryption of - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2188 +2188 @@ An Amazon Redshift cluster parameter group, configured to require encryption of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2192 +2192 @@ An Amazon Redshift cluster parameter group, configured to require encryption of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2197 +2197 @@ An Amazon Redshift cluster parameter group, configured to require encryption of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2204 +2204 @@ An Amazon Redshift cluster parameter group, configured to require encryption of - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2211 +2211 @@ An Amazon Redshift cluster parameter group, configured to require encryption of