AWS controltower documentation change
Summary
Updated terminology from 'AWS CloudFormation' to 'CloudFormation' in policy change descriptions
Security assessment
The changes are minor terminology updates (removing 'AWS' prefix from CloudFormation references). No security vulnerabilities, mitigations, or new security features are mentioned in the context of these changes.
Diff
diff --git a/controltower/latest/userguide/managed-policies-table.md b/controltower/latest/userguide/managed-policies-table.md index d179a2989..b3ad42629 100644 --- a//controltower/latest/userguide/managed-policies-table.md +++ b//controltower/latest/userguide/managed-policies-table.md @@ -12 +12 @@ Change | Description | Date -[AWSControlTowerServiceRolePolicy](./access-control-managing-permissions.html#AWSControlTowerServiceRolePolicy) – Update to an existing policy | AWS Control Tower added new AWS CloudFormation permissions that allow AWS Control Tower to query and deploy stack set resources into member accounts when auto-enrolling the accounts into AWS Control Tower. | October 10, 2025 +[AWSControlTowerServiceRolePolicy](./access-control-managing-permissions.html#AWSControlTowerServiceRolePolicy) – Update to an existing policy | AWS Control Tower added new CloudFormation permissions that allow AWS Control Tower to query and deploy stack set resources into member accounts when auto-enrolling the accounts into AWS Control Tower. | October 10, 2025 @@ -14 +14 @@ Change | Description | Date -[AWSControlTowerServiceRolePolicy](./access-control-managing-permissions.html#AWSControlTowerServiceRolePolicy) – Update to an existing policy | AWS Control Tower added new permissions that allow AWS Control Tower to make calls to the AWS CloudFormation service APIs `ActivateType`, `DeactivateType`, and `SetTypeConfiguration`, on `AWS::ControlTower types`. This change allows customers to provision proactive controls without the deployment of private AWS CloudFormation Hook types. | December 10, 2024 +[AWSControlTowerServiceRolePolicy](./access-control-managing-permissions.html#AWSControlTowerServiceRolePolicy) – Update to an existing policy | AWS Control Tower added new permissions that allow AWS Control Tower to make calls to the AWS CloudFormation service APIs `ActivateType`, `DeactivateType`, and `SetTypeConfiguration`, on `AWS::ControlTower types`. This change allows customers to provision proactive controls without the deployment of private CloudFormation Hook types. | December 10, 2024