AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/controlreference/waf-rules.md

Summary

Updated references from 'AWS CloudFormation' to 'CloudFormation' throughout the document, removing redundant 'AWS' branding in implementation details and guard rule specifications.

Security assessment

The changes are purely branding/naming updates (removing 'AWS' prefix from CloudFormation references) and do not alter security controls, rules, or configurations. No security vulnerabilities, mitigations, or new security features are mentioned in the diff.

Diff

diff --git a/controltower/latest/controlreference/waf-rules.md b/controltower/latest/controlreference/waf-rules.md
index f78c08e56..154f03694 100644
--- a//controltower/latest/controlreference/waf-rules.md
+++ b//controltower/latest/controlreference/waf-rules.md
@@ -24 +24 @@ This control checks whether an AWS WAF Classic global rule contains any conditio
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -30 +30 @@ This control checks whether an AWS WAF Classic global rule contains any conditio
-  * **AWS CloudFormation guard rule:** CT.WAF.PR.1 rule specification
+  * **CloudFormation guard rule:** CT.WAF.PR.1 rule specification
@@ -113 +113 @@ AWS WAF Classic global rule configured with an IP match predicate. The example i
-    #   AWS CloudFormation, AWS CloudFormation Hook
+    #   CloudFormation, CloudFormation Hook
@@ -120 +120 @@ AWS WAF Classic global rule configured with an IP match predicate. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -124 +124 @@ AWS WAF Classic global rule configured with an IP match predicate. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -129 +129 @@ AWS WAF Classic global rule configured with an IP match predicate. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -134 +134 @@ AWS WAF Classic global rule configured with an IP match predicate. The example i
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -244 +244 @@ This control checks whether an AWS WAF Classic global web ACL contains any WAF r
-  * **Implementation:** AWS CloudFormation Guard Rule
+  * **Implementation:** CloudFormation Guard Rule
@@ -250 +250 @@ This control checks whether an AWS WAF Classic global web ACL contains any WAF r
-  * **AWS CloudFormation guard rule:** CT.WAF.PR.2 rule specification
+  * **CloudFormation guard rule:** CT.WAF.PR.2 rule specification
@@ -341 +341 @@ AWS WAF Classic global web ACL configured with a rule to block requests based on
-    #   AWS CloudFormation, AWS CloudFormation hook
+    #   CloudFormation, CloudFormation hook
@@ -348 +348 @@ AWS WAF Classic global web ACL configured with a rule to block requests based on
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -352 +352 @@ AWS WAF Classic global web ACL configured with a rule to block requests based on
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -357 +357 @@ AWS WAF Classic global web ACL configured with a rule to block requests based on
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document
@@ -362 +362 @@ AWS WAF Classic global web ACL configured with a rule to block requests based on
-    #     Given: The input document is an AWS CloudFormation or AWS CloudFormation hook document
+    #     Given: The input document is an CloudFormation or CloudFormation hook document