AWS controltower documentation change
Summary
Added version-specific guidance (LZ v4.0 vs v3.3) regarding Security OU management and expanded list of exception controls
Security assessment
The changes clarify exception policies for security controls in different Control Tower versions and add new control IDs (CT.S3.PV.7, CT.S3.PV.8, CT.SNS.PV.1) to the exception list. While these controls relate to security configurations, there is no evidence this change addresses a specific vulnerability or incident - it appears to be documentation updates reflecting product changes and expanded exception options.
Diff
diff --git a/controltower/latest/controlreference/exception-to-controls-security-ou.md b/controltower/latest/controlreference/exception-to-controls-security-ou.md index 51a5c52f3..244460664 100644 --- a//controltower/latest/controlreference/exception-to-controls-security-ou.md +++ b//controltower/latest/controlreference/exception-to-controls-security-ou.md @@ -6,0 +7,6 @@ +For customers on LZ v4.0: + +There is no longer a Security OU managed by AWS Control Tower so restrictions below do not apply. + +For existing customers on LZ v3.3 and below: + @@ -103,0 +110,6 @@ AWS Control Tower deploys and manages resources in the Security OU, which are re + * CT.S3.PV.7 + + * CT.S3.PV.8 + + * CT.SNS.PV.1 +