AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/waf-regional-rules.md

Summary

Updated references from 'AWS CloudFormation' to 'CloudFormation' in implementation details and guard rule specifications

Security assessment

The changes are purely branding/naming updates (removing 'AWS' prefix from CloudFormation references). There is no evidence of addressing a security vulnerability, modifying security controls, or introducing new security features. The updates appear to align with naming conventions rather than addressing security concerns.

Diff

diff --git a/controltower/latest/controlreference/waf-regional-rules.md b/controltower/latest/controlreference/waf-regional-rules.md
index a95eb4ebf..ee4ba764e 100644
--- a//controltower/latest/controlreference/waf-regional-rules.md
+++ b//controltower/latest/controlreference/waf-regional-rules.md
@@ -24 +24 @@ This control checks whether an AWS WAF Classic Regional rule contains any condit
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -30 +30 @@ This control checks whether an AWS WAF Classic Regional rule contains any condit
-  * **AWS CloudFormation guard rule:** CT.WAF-REGIONAL.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.WAF-REGIONAL.PR.1 rule specification
@@ -113 +113 @@ AWS WAF Classic Regional rule configured with an IP match predicate. The example
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -120 +120 @@ AWS WAF Classic Regional rule configured with an IP match predicate. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -124 +124 @@ AWS WAF Classic Regional rule configured with an IP match predicate. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -129 +129 @@ AWS WAF Classic Regional rule configured with an IP match predicate. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -134 +134 @@ AWS WAF Classic Regional rule configured with an IP match predicate. The example
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -244 +244 @@ This control checks whether an AWS WAF Classic Regional web ACL contains any WAF
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -250 +250 @@ This control checks whether an AWS WAF Classic Regional web ACL contains any WAF
-  * **AWS CloudFormation guard rule:** CT.WAF-REGIONAL.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.WAF-REGIONAL.PR.2 rule specification
@@ -341 +341 @@ AWS WAF Classic Regional web ACL configured with a rule to block requests based
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -348 +348 @@ AWS WAF Classic Regional web ACL configured with a rule to block requests based
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -352 +352 @@ AWS WAF Classic Regional web ACL configured with a rule to block requests based
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -357 +357 @@ AWS WAF Classic Regional web ACL configured with a rule to block requests based
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -362 +362 @@ AWS WAF Classic Regional web ACL configured with a rule to block requests based
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document