AWS prescriptive-guidance documentation change
Summary
Updated control title from 'AWS Control Tower and AWS CloudFormation' to 'AWS Control Tower and CloudFormation'
Security assessment
The change only removes redundant 'AWS' prefix from CloudFormation reference in a control title. The underlying security control (preventing IAM role changes) remains unchanged with no new security guidance added.
Diff
diff --git a/prescriptive-guidance/latest/designing-control-tower-landing-zone/mandatory.md b/prescriptive-guidance/latest/designing-control-tower-landing-zone/mandatory.md index 09793bd8e..bacbe263f 100644 --- a//prescriptive-guidance/latest/designing-control-tower-landing-zone/mandatory.md +++ b//prescriptive-guidance/latest/designing-control-tower-landing-zone/mandatory.md @@ -39 +39 @@ AWS Control Tower controls are continuously updated. For the most up-to-date and -[Disallow Changes to AWS IAM Roles Set Up by AWS Control Tower and AWS CloudFormation](https://docs.aws.amazon.com/controltower/latest/controlreference/mandatory-controls.html#iam-disallow-changes) | Mandatory | Preventive | All OUs | Prevents changes to the IAM roles that AWS Control Tower created when you set up the landing zone so that the landing zone is secured. +[Disallow Changes to AWS IAM Roles Set Up by AWS Control Tower and CloudFormation](https://docs.aws.amazon.com/controltower/latest/controlreference/mandatory-controls.html#iam-disallow-changes) | Mandatory | Preventive | All OUs | Prevents changes to the IAM roles that AWS Control Tower created when you set up the landing zone so that the landing zone is secured.