AWS controltower documentation change
Summary
Updated references from 'AWS CloudFormation' to 'CloudFormation' for consistency, and minor phrasing adjustments in documentation sections.
Security assessment
The changes are terminology updates (removing 'AWS' from 'AWS CloudFormation') and do not introduce or modify security-related content. No evidence of addressing vulnerabilities or security features.
Diff
diff --git a/controltower/latest/userguide/2022-all.md b/controltower/latest/userguide/2022-all.md index f2809baa2..54cac2737 100644 --- a//controltower/latest/userguide/2022-all.md +++ b//controltower/latest/userguide/2022-all.md @@ -5 +5 @@ -Concurrent account operationsAccount Factory Customization (AFC)Comprehensive controls assist in AWS resource provisioning and managementCompliance status viewable for all AWS Config rulesAPI for controls and a new AWS CloudFormation resourceCfCT supports stack set deletionCustomized log retentionRole drift repair availableAWS Control Tower landing zone version 3.0The Organization page combines views of OUs and accountsSimplified account creation and enrollmentAFT supports automated customization for shared AWS Control Tower accountsConcurrent operations for all optional controlsExisting security and logging accountsAWS Control Tower landing zone version 2.9AWS Control Tower landing zone version 2.8 +Concurrent account operationsAccount Factory Customization (AFC)Comprehensive controls assist in AWS resource provisioning and managementCompliance status viewable for all AWS Config rulesAPI for controls and a new CloudFormation resourceCfCT supports stack set deletionCustomized log retentionRole drift repair availableAWS Control Tower landing zone version 3.0The Organization page combines views of OUs and accountsSimplified account creation and enrollmentAFT supports automated customization for shared AWS Control Tower accountsConcurrent operations for all optional controlsExisting security and logging accountsAWS Control Tower landing zone version 2.9AWS Control Tower landing zone version 2.8 @@ -19 +19 @@ In 2022, AWS Control Tower released the following updates: - * API for controls and a new AWS CloudFormation resource + * API for controls and a new CloudFormation resource @@ -60 +60 @@ AWS Control Tower now supports concurrent actions in account factory. You can cr -Account factory customization allows you to customize new and existing accounts from within the AWS Control Tower console. These new customization capabilities give you the flexibility to define account blueprints, which are AWS CloudFormation templates contained in a specialized Service Catalog product. Blueprints provision fully customized resources and configurations. You also may choose use pre-defined blueprints, built and managed by AWS partners, that help you customize accounts for specific use cases. +Account factory customization allows you to customize new and existing accounts from within the AWS Control Tower console. These new customization capabilities give you the flexibility to define account blueprints, which are CloudFormation templates contained in a specialized Service Catalog product. Blueprints provision fully customized resources and configurations. You also may choose use pre-defined blueprints, built and managed by AWS partners, that help you customize accounts for specific use cases. @@ -74 +74 @@ To get started with customizing accounts, you can define the resources for your -AWS Control Tower now supports comprehensive controls management, including new, optional proactive controls, implemented through AWS CloudFormation hooks. These controls are referred to as proactive because they check your resources – before the resources are deployed – to determine whether the new resources will comply with the controls that are activated in your environment. +AWS Control Tower now supports comprehensive controls management, including new, optional proactive controls, implemented through CloudFormation hooks. These controls are referred to as proactive because they check your resources – before the resources are deployed – to determine whether the new resources will comply with the controls that are activated in your environment. @@ -92 +92 @@ Previously, AWS Config rules deployed through the AWS Config service were not vi -## API for controls and a new AWS CloudFormation resource +## API for controls and a new CloudFormation resource @@ -98 +98 @@ Previously, AWS Config rules deployed through the AWS Config service were not vi -AWS Control Tower now supports programmatic management of controls, also known as _guardrails_ , through a set of API calls. A new AWS CloudFormation resource supports the API functionality for controls. For more details, see [ Automate tasks in AWS Control Tower ](./automating-tasks.html) and [ Create AWS Control Tower resources with AWS CloudFormation](./creating-resources-with-cloudformation.html). +AWS Control Tower now supports programmatic management of controls, also known as _guardrails_ , through a set of API calls. A new CloudFormation resource supports the API functionality for controls. For more details, see [ Automate tasks in AWS Control Tower ](./automating-tasks.html) and [ Create AWS Control Tower resources with AWS CloudFormation](./creating-resources-with-cloudformation.html). @@ -100 +100 @@ AWS Control Tower now supports programmatic management of controls, also known a -These APIs allow you to enable, disable, and view the application status of controls in the AWS Control Tower library. The APIs include support for AWS CloudFormation, so you can manage AWS resources as infrastructure-as-code (IaC). AWS Control Tower provides optional preventive and detective controls that express your policy intentions regarding an entire organizational unit (OU), and every AWS account within the OU. These rules remain in effect as you create new accounts or make changes to existing accounts. +These APIs allow you to enable, disable, and view the application status of controls in the AWS Control Tower library. The APIs include support for CloudFormation, so you can manage AWS resources as infrastructure-as-code (IaC). AWS Control Tower provides optional preventive and detective controls that express your policy intentions regarding an entire organizational unit (OU), and every AWS account within the OU. These rules remain in effect as you create new accounts or make changes to existing accounts.