AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2025-11-19 · Documentation low

File: controltower/latest/userguide/cfct-codepipeline-overview.md

Summary

Updated terminology from 'AWS CloudFormation' to 'CloudFormation' throughout the document

Security assessment

The changes are purely terminological updates (AWS CloudFormation → CloudFormation) with no security implications. Validation processes using cfn_nag remain unchanged.

Diff

diff --git a/controltower/latest/userguide/cfct-codepipeline-overview.md b/controltower/latest/userguide/cfct-codepipeline-overview.md
index 3acc0ee3a..a64902254 100644
--- a//controltower/latest/userguide/cfct-codepipeline-overview.md
+++ b//controltower/latest/userguide/cfct-codepipeline-overview.md
@@ -55 +55 @@ The source stage is the initial stage. Your customized configuration package ini
-The build stage requires AWS CodeBuild to validate the contents of the configuration package. These checks include testing the `manifest.yaml` file syntax and schema, along with all AWS CloudFormation templates included in the package or remotely hosted, using AWS CloudFormation `validate-template` and `cfn_nag`. If the manifest file and AWS CloudFormation templates pass the tests, the pipeline continues to the next stage. If the tests fail, you can review the CodeBuild logs to identify the issue and edit the configuration source file as needed.
+The build stage requires AWS CodeBuild to validate the contents of the configuration package. These checks include testing the `manifest.yaml` file syntax and schema, along with all CloudFormation templates included in the package or remotely hosted, using CloudFormation `validate-template` and `cfn_nag`. If the manifest file and CloudFormation templates pass the tests, the pipeline continues to the next stage. If the tests fail, you can review the CodeBuild logs to identify the issue and edit the configuration source file as needed.
@@ -65 +65 @@ The policy stage invokes the service control policy (SCP) or resource control po
-  5. **AWS CloudFormation resource stage**
+  5. **CloudFormation resource stage**
@@ -67 +67 @@ The policy stage invokes the service control policy (SCP) or resource control po
-The AWS CloudFormation resource stage invokes the stack set state machine to deploy the resources specified in the list of accounts or organizational units (OUs), which you provided in the manifest file. The state machine creates the AWS CloudFormation resources in the order that they are specified in the manifest file. To specify a resource dependency, arrange the order in which resources are specified in the manifest file. The order of resources within the manifest file is the only way to specify a dependency.
+The CloudFormation resource stage invokes the stack set state machine to deploy the resources specified in the list of accounts or organizational units (OUs), which you provided in the manifest file. The state machine creates the CloudFormation resources in the order that they are specified in the manifest file. To specify a resource dependency, arrange the order in which resources are specified in the manifest file. The order of resources within the manifest file is the only way to specify a dependency.