AWS controltower documentation change
Summary
Updated terminology from 'AWS CloudFormation' to 'CloudFormation' throughout multiple S3 control rule documentation sections
Security assessment
Changes are branding/terminology updates removing 'AWS' prefix from CloudFormation references. No security content changes, vulnerabilities addressed, or new security features documented. The modifications only standardize product naming without altering security controls or configurations.
Diff
diff --git a/controltower/latest/controlreference/s3-rules.md b/controltower/latest/controlreference/s3-rules.md index 7cb4a002a..b91d3eacb 100644 --- a//controltower/latest/controlreference/s3-rules.md +++ b//controltower/latest/controlreference/s3-rules.md @@ -42 +42 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) bucke - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -48 +48 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) bucke - * **AWS CloudFormation guard rule:** CT.S3.PR.1 rule specification + * **CloudFormation guard rule:** CT.S3.PR.1 rule specification @@ -135 +135 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -142 +142 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -146 +146 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -151 +151 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -158 +158 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -165 +165 @@ Amazon S3 bucket with a bucket level Block Public Access configuration that ensu - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -284 +284 @@ This control checks whether server access logging is enabled for your Amazon S3 - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -290 +290 @@ This control checks whether server access logging is enabled for your Amazon S3 - * **AWS CloudFormation guard rule:** CT.S3.PR.2 rule specification + * **CloudFormation guard rule:** CT.S3.PR.2 rule specification @@ -363 +363 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -370 +370 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -374 +374 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -379 +379 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -386 +386 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -391 +391 @@ Amazon S3 bucket with a server access logging configuration. The example is show - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -523 +523 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) versi - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -529 +529 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) versi - * **AWS CloudFormation guard rule:** CT.S3.PR.3 rule specification + * **CloudFormation guard rule:** CT.S3.PR.3 rule specification @@ -621 +621 @@ Amazon S3 bucket with versioning enabled and an active lifecycle rule. The examp - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -628 +628 @@ Amazon S3 bucket with versioning enabled and an active lifecycle rule. The examp - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -632 +632 @@ Amazon S3 bucket with versioning enabled and an active lifecycle rule. The examp - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -638 +638 @@ Amazon S3 bucket with versioning enabled and an active lifecycle rule. The examp - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -645 +645 @@ Amazon S3 bucket with versioning enabled and an active lifecycle rule. The examp - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -780 +780 @@ This control checks whether Amazon S3 events notifications are enabled on your A - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -786 +786 @@ This control checks whether Amazon S3 events notifications are enabled on your A - * **AWS CloudFormation guard rule:** CT.S3.PR.4 rule specification + * **CloudFormation guard rule:** CT.S3.PR.4 rule specification @@ -901 +901 @@ Amazon S3 bucket with SNS topic notifications configured. The example is shown i - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -908 +908 @@ Amazon S3 bucket with SNS topic notifications configured. The example is shown i - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -912 +912 @@ Amazon S3 bucket with SNS topic notifications configured. The example is shown i - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -917 +917 @@ Amazon S3 bucket with SNS topic notifications configured. The example is shown i - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -924 +924 @@ Amazon S3 bucket with SNS topic notifications configured. The example is shown i - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1050 +1050 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) bucke - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1056 +1056 @@ This control checks whether your Amazon Simple Storage Service (Amazon S3) bucke - * **AWS CloudFormation guard rule:** CT.S3.PR.5 rule specification + * **CloudFormation guard rule:** CT.S3.PR.5 rule specification @@ -1121 +1121 @@ Amazon S3 bucket that does not allow user permissions through access control lis - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1128 +1128 @@ Amazon S3 bucket that does not allow user permissions through access control lis - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1132 +1132 @@ Amazon S3 bucket that does not allow user permissions through access control lis - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1137 +1137 @@ Amazon S3 bucket that does not allow user permissions through access control lis - # Given: The input document is an AWS CloudFormation or CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1230 +1230 @@ This control checks whether a lifecycle rule is configured for Amazon S3 buckets - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1236 +1236 @@ This control checks whether a lifecycle rule is configured for Amazon S3 buckets - * **AWS CloudFormation guard rule:** CT.S3.PR.6 rule specification + * **CloudFormation guard rule:** CT.S3.PR.6 rule specification @@ -1316 +1316 @@ Amazon S3 bucket configured with an active lifecycle rule. The example is shown - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1323 +1323 @@ Amazon S3 bucket configured with an active lifecycle rule. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1327 +1327 @@ Amazon S3 bucket configured with an active lifecycle rule. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1333 +1333 @@ Amazon S3 bucket configured with an active lifecycle rule. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1340 +1340 @@ Amazon S3 bucket configured with an active lifecycle rule. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1457 +1457 @@ This control checks whether Amazon S3 bucket policies require requests to use Se - * **Implementation:** AWS CloudFormation Guard Rule + * **Implementation:** CloudFormation Guard Rule @@ -1463 +1463 @@ This control checks whether Amazon S3 bucket policies require requests to use Se - * **AWS CloudFormation guard rule:** CT.S3.PR.8 rule specification + * **CloudFormation guard rule:** CT.S3.PR.8 rule specification @@ -1585 +1585 @@ Amazon S3 bucket policy configured to deny all access to the bucket and bucket o - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1592 +1592 @@ Amazon S3 bucket policy configured to deny all access to the bucket and bucket o - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1596 +1596 @@ Amazon S3 bucket policy configured to deny all access to the bucket and bucket o - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1601 +1601 @@ Amazon S3 bucket policy configured to deny all access to the bucket and bucket o - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1608 +1608 @@ Amazon S3 bucket policy configured to deny all access to the bucket and bucket o - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1877 +1877 @@ This control checks whether an Amazon Simple Storage Service (Amazon S3) bucket - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -1883 +1883 @@ This control checks whether an Amazon Simple Storage Service (Amazon S3) bucket - * **AWS CloudFormation guard rule:** CT.S3.PR.9 rule specification + * **CloudFormation guard rule:** CT.S3.PR.9 rule specification @@ -1958 +1958 @@ An Amazon S3 bucket configured with S3 object lock enabled. The example is shown - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -1965 +1965 @@ An Amazon S3 bucket configured with S3 object lock enabled. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1969 +1969 @@ An Amazon S3 bucket configured with S3 object lock enabled. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1974 +1974 @@ An Amazon S3 bucket configured with S3 object lock enabled. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -1979 +1979 @@ An Amazon S3 bucket configured with S3 object lock enabled. The example is shown - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2075 +2075 @@ This control checks whether default server-side encryption is enabled on an Amaz - * **Implementation:** AWS CloudFormation guard rule + * **Implementation:** CloudFormation guard rule @@ -2081 +2081 @@ This control checks whether default server-side encryption is enabled on an Amaz - * **AWS CloudFormation guard rule:** CT.S3.PR.10 rule specification + * **CloudFormation guard rule:** CT.S3.PR.10 rule specification @@ -2160 +2160 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # AWS CloudFormation, AWS CloudFormation hook + # CloudFormation, CloudFormation hook @@ -2167 +2167 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2171 +2171 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2177 +2177 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2185 +2185 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2196 +2196 @@ An Amazon S3 bucket configured with AWS Key Management Service (AWS KMS) (SSE-KM - # Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document + # Given: The input document is an CloudFormation or CloudFormation hook document @@ -2316 +2316 @@ This control checks whether an Amazon Simple Storage Service (Amazon S3) bucket