AWS controltower documentation change
Summary
Updated multiple documentation links by adding double slashes after domain to standardize URL formatting
Security assessment
All changes are URL formatting corrections without altering security content. No evidence of addressing vulnerabilities, security controls, or security features. Changes appear to be documentation link standardization.
Diff
diff --git a/controltower/latest/userguide/2024-all.md b/controltower/latest/userguide/2024-all.md index aa8972a24..964782fd3 100644 --- a//controltower/latest/userguide/2024-all.md +++ b//controltower/latest/userguide/2024-all.md @@ -78 +78 @@ AWS Control Tower now supports resource control policies (RCPs) for Customizatio -AWS Control Tower now supports preventive controls that are implemented by declarative policies from AWS Organizations. Declarative policies are applied directly at the service level. This approach ensures that the specified configuration is enforced, even when new features or APIs are introduced by the service. For more information, see [Controls implemented with declarative policies](https://docs.aws.amazon.com/controltower/latest/controlreference/declarative-controls.html). +AWS Control Tower now supports preventive controls that are implemented by declarative policies from AWS Organizations. Declarative policies are applied directly at the service level. This approach ensures that the specified configuration is enforced, even when new features or APIs are introduced by the service. For more information, see [Controls implemented with declarative policies](https://docs.aws.amazon.com//controltower/latest/controlreference/declarative-controls.html). @@ -98 +98 @@ AWS Control Tower has integrated selected AWS Config controls, so that they can -For more information, see [Integrated AWS Config controls available in AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/config-controls.html) +For more information, see [Integrated AWS Config controls available in AWS Control Tower](https://docs.aws.amazon.com//controltower/latest/controlreference/config-controls.html) @@ -114 +114 @@ After you reset any proactive control, remove the **CT.CLOUDFORMATION.PR.1** con -For more information, see [Update proactive control hooks](https://docs.aws.amazon.com/controltower/latest/controlreference/get-new-hooks.html). +For more information, see [Update proactive control hooks](https://docs.aws.amazon.com//controltower/latest/controlreference/get-new-hooks.html). @@ -128 +128 @@ You can configure the new RCP-based controls, and certain existing SCP-based pre -By combining preventive, proactive, and detective controls in AWS Control Tower, you can monitor whether your multi-account AWS environment is secure and managed in accordance with best practices, such as the [AWS Foundational Security Best Practices standard](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp.html). +By combining preventive, proactive, and detective controls in AWS Control Tower, you can monitor whether your multi-account AWS environment is secure and managed in accordance with best practices, such as the [AWS Foundational Security Best Practices standard](https://docs.aws.amazon.com//securityhub/latest/userguide/securityhub-standards-fsbp.html). @@ -150 +150 @@ AWS Control Tower announces a new API to help you manage control drift programma - * Controls that are implemented with service control policies (SCPs) cannot be reset with this API. For more information, see [`ResetEnabledControl`](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ResetEnabledControl.html). + * Controls that are implemented with service control policies (SCPs) cannot be reset with this API. For more information, see [`ResetEnabledControl`](https://docs.aws.amazon.com//controltower/latest/APIReference/API_ResetEnabledControl.html). @@ -171 +171 @@ The `GetControl` API is part of the `controlcatalog` namespace of AWS Control To -For more information, see the [`GetControl` API](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html) in the _Control Catalog API Reference_. +For more information, see the [`GetControl` API](https://docs.aws.amazon.com//controlcatalog/latest/APIReference/API_GetControl.html) in the _Control Catalog API Reference_. @@ -208 +208 @@ AWS Control Tower has increased the maximum number of accounts allowed per organ -Some account limitations still apply due to the limitations on the number of CloudFormation stack sets available. Specifically, the maximum number of accounts you can enroll in an OU may differ, depending on the number of Regions you have under governance. To learn more, visit [Limitations based on underlying AWS services](https://docs.aws.amazon.com/controltower/latest/userguide/region-stackset-limitations.html) in the [_AWS Control Tower User Guide_](https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html). For a full list of AWS Regions where AWS Control Tower is available, see the [AWS Region Table](https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/). +Some account limitations still apply due to the limitations on the number of CloudFormation stack sets available. Specifically, the maximum number of accounts you can enroll in an OU may differ, depending on the number of Regions you have under governance. To learn more, visit [Limitations based on underlying AWS services](https://docs.aws.amazon.com//controltower/latest/userguide/region-stackset-limitations.html) in the [_AWS Control Tower User Guide_](https://docs.aws.amazon.com//controltower/latest/userguide/what-is-control-tower.html). For a full list of AWS Regions where AWS Control Tower is available, see the [AWS Region Table](https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/). @@ -228 +228 @@ AWS Control Tower added two new API operations that help you find more informati - * The [`GetControl`](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html) API returns details about an enabled control, including the target identifier, a control information summary, a list of target Regions, and the drift status. + * The [`GetControl`](https://docs.aws.amazon.com//controlcatalog/latest/APIReference/API_GetControl.html) API returns details about an enabled control, including the target identifier, a control information summary, a list of target Regions, and the drift status. @@ -235 +235 @@ AWS Control Tower added two new API operations that help you find more informati -These APIs are reached through the [AWS Control Catalog namespace](https://docs.aws.amazon.com/controlcatalog/latest/userguide/what-is-controlcatalog.html). The AWS Control Catalog is a part of AWS Control Tower, which includes controls that help you manage other AWS services, not just AWS Control Tower. This expanded catalog consolidates controls from several AWS services, so that you can view AWS controls according to some common use cases, such as: security, cost, durability, and operations. For more information, see [the Control Catalog API Reference](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/Welcome.html). +These APIs are reached through the [AWS Control Catalog namespace](https://docs.aws.amazon.com//controlcatalog/latest/userguide/what-is-controlcatalog.html). The AWS Control Catalog is a part of AWS Control Tower, which includes controls that help you manage other AWS services, not just AWS Control Tower. This expanded catalog consolidates controls from several AWS services, so that you can view AWS controls according to some common use cases, such as: security, cost, durability, and operations. For more information, see [the Control Catalog API Reference](https://docs.aws.amazon.com//controlcatalog/latest/APIReference/Welcome.html). @@ -241 +241 @@ Beginning with this release, you can extend AWS Control Tower governance into AW -Previously, AWS Control Tower prevented you from extending governance into Regions or enabling controls, when it did not offer consistency across all of your enabled controls and governed Regions. With this release, you have more flexibility, as well as more responsibility to ensure that your configuration is correct for all enabled controls and all governed Regions. The [AWS Control Tower control APIs](https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html) and the [control catalog APIs](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/Welcome.html) can help you get information about the AWS Regions in which you are protected by enabled controls, and the Regions in which additional controls may be deployed. Region and control information also is available in the AWS Control Tower console. +Previously, AWS Control Tower prevented you from extending governance into Regions or enabling controls, when it did not offer consistency across all of your enabled controls and governed Regions. With this release, you have more flexibility, as well as more responsibility to ensure that your configuration is correct for all enabled controls and all governed Regions. The [AWS Control Tower control APIs](https://docs.aws.amazon.com//controltower/latest/APIReference/Welcome.html) and the [control catalog APIs](https://docs.aws.amazon.com//controlcatalog/latest/APIReference/Welcome.html) can help you get information about the AWS Regions in which you are protected by enabled controls, and the Regions in which additional controls may be deployed. Region and control information also is available in the AWS Control Tower console. @@ -253 +253 @@ Account Factory for Terraform (AFT) sets up a Terraform pipeline to help you pro -To learn more, visit the Account Factory for Terraform and Customizations for AWS Control Tower pages; in the AWS Control Tower User Guide. You also may wish to review the release notes on the AFT Github page and the CfCT Github page. AFT and CfCT are supported in all AWS Regions, with some exceptions. For specifics, see [Region limitations](https://docs.aws.amazon.com/controltower/latest/userguide/limits.html). +To learn more, visit the Account Factory for Terraform and Customizations for AWS Control Tower pages; in the AWS Control Tower User Guide. You also may wish to review the release notes on the AFT Github page and the CfCT Github page. AFT and CfCT are supported in all AWS Regions, with some exceptions. For specifics, see [Region limitations](https://docs.aws.amazon.com//controltower/latest/userguide/limits.html). @@ -261 +261 @@ To learn more, visit the Account Factory for Terraform and Customizations for AW -AWS Control Tower has added an API that allows you to retrieve a list of operations recently applied to your landing zone, and operations currently in progress. The API can return the history of landing zone operations and their identifiers for up to 90 days. For usage examples, see [View the status of your landing zone operations](https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-examples-short.html). +AWS Control Tower has added an API that allows you to retrieve a list of operations recently applied to your landing zone, and operations currently in progress. The API can return the history of landing zone operations and their identifiers for up to 90 days. For usage examples, see [View the status of your landing zone operations](https://docs.aws.amazon.com//controltower/latest/userguide/lz-api-examples-short.html). @@ -263 +263 @@ AWS Control Tower has added an API that allows you to retrieve a list of operati -For more information about the `ListLandingZoneOperations` API, see [`ListLandingZoneOperations`](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html) in the _AWS Control Tower API Reference_. +For more information about the `ListLandingZoneOperations` API, see [`ListLandingZoneOperations`](https://docs.aws.amazon.com//controltower/latest/APIReference/API_ListLandingZoneOperations.html) in the _AWS Control Tower API Reference_. @@ -273 +273 @@ AWS Control Tower now supports multiple control operations with higher concurren -To monitor the status of your ongoing and queued control operations, you can navigate to the new **Recent operations** page in the AWS Control Tower console, or you can call the new [`ListControlOperations`](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html) API. +To monitor the status of your ongoing and queued control operations, you can navigate to the new **Recent operations** page in the AWS Control Tower console, or you can call the new [`ListControlOperations`](https://docs.aws.amazon.com//controltower/latest/APIReference/API_ListControlOperations.html) API. @@ -283 +283 @@ The AWS Control Tower library contains more than 500 controls, which map to diff -Starting today, you can activate AWS Control Tower in the Canada West (Calgary) Region. If you already have deployed AWS Control Tower and you want to extend its governance features to this Region, you can do so with the AWS Control Tower [landing zone APIs](https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html). Or from the console, go to the **Settings** page in your AWS Control Tower dashboard, select your Regions, and then update your landing zone. +Starting today, you can activate AWS Control Tower in the Canada West (Calgary) Region. If you already have deployed AWS Control Tower and you want to extend its governance features to this Region, you can do so with the AWS Control Tower [landing zone APIs](https://docs.aws.amazon.com//controltower/latest/APIReference/Welcome.html). Or from the console, go to the **Settings** page in your AWS Control Tower dashboard, select your Regions, and then update your landing zone. @@ -289 +289 @@ The Canada West (Calgary) Region does not support AWS Service Catalog. For this -To create and provision a new account in the Canada West (Calgary) Region, we recommend that you create an account outside of AWS Control Tower, and then enroll it into a registered OU. For more information, see [Enroll an existing account](https://docs.aws.amazon.com/controltower/latest/userguide/quick-account-provisioning.html) and [Steps to enroll an account](https://docs.aws.amazon.com/controltower/latest/userguide/quick-account-provisioning.html#enrollment-steps). +To create and provision a new account in the Canada West (Calgary) Region, we recommend that you create an account outside of AWS Control Tower, and then enroll it into a registered OU. For more information, see [Enroll an existing account](https://docs.aws.amazon.com//controltower/latest/userguide/quick-account-provisioning.html) and [Steps to enroll an account](https://docs.aws.amazon.com//controltower/latest/userguide/quick-account-provisioning.html#enrollment-steps). @@ -291 +291 @@ To create and provision a new account in the Canada West (Calgary) Region, we re -The Service Catalog APIs are not available in Canada West (Calgary) Region. The example script shown in [Automate account provisioning in AWS Control Tower by Service Catalog APIs ](https://docs.aws.amazon.com/controltower/latest/userguide/automated-provisioning-walkthrough.html) is not workable. +The Service Catalog APIs are not available in Canada West (Calgary) Region. The example script shown in [Automate account provisioning in AWS Control Tower by Service Catalog APIs ](https://docs.aws.amazon.com//controltower/latest/userguide/automated-provisioning-walkthrough.html) is not workable. @@ -321 +321 @@ AWS Control Tower now supports self-service quota adjustments through the Servic -AWS Control Tower released the _Controls Reference Guide_ , a new document where you can find detailed information about the controls that are specific to the AWS Control Tower environment. Previously, this material was included in the _AWS Control Tower User Guide_. The _Controls Reference Guide_ covers controls in an expanded format. For more information, see the [AWS Control Tower Controls Reference Guide](https://docs.aws.amazon.com/controltower/latest/controlreference/introduction.html). +AWS Control Tower released the _Controls Reference Guide_ , a new document where you can find detailed information about the controls that are specific to the AWS Control Tower environment. Previously, this material was included in the _AWS Control Tower User Guide_. The _Controls Reference Guide_ covers controls in an expanded format. For more information, see the [AWS Control Tower Controls Reference Guide](https://docs.aws.amazon.com//controltower/latest/controlreference/introduction.html). @@ -331 +331 @@ AWS Control Tower has renamed two proactive controls to align with updates to Am - * [**[CT.OPENSEARCH.PR.8]** Require an Elasticsearch Service domain to use TLSv1.2](https://docs.aws.amazon.com/controltower/latest/controlreference/opensearch-rules.html#ct-opensearch-pr-8-description) + * [**[CT.OPENSEARCH.PR.8]** Require an Elasticsearch Service domain to use TLSv1.2](https://docs.aws.amazon.com//controltower/latest/controlreference/opensearch-rules.html#ct-opensearch-pr-8-description) @@ -333 +333 @@ AWS Control Tower has renamed two proactive controls to align with updates to Am - * [**[CT.OPENSEARCH.PR.16 ]** Require an Amazon OpenSearch Service domain to use TLSv1.2](https://docs.aws.amazon.com/controltower/latest/controlreference/opensearch-rules.html#ct-opensearch-pr-16-description) + * [**[CT.OPENSEARCH.PR.16 ]** Require an Amazon OpenSearch Service domain to use TLSv1.2](https://docs.aws.amazon.com//controltower/latest/controlreference/opensearch-rules.html#ct-opensearch-pr-16-description) @@ -383 +383 @@ The AWS Control Tower `GetEnabledControl`, `EnableControl`, and `ListTagsforReso -For more information, see [Tagging `EnabledControl` resources in AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/tagging.html) and [`EnabledControl`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-controltower-enabledcontrol.html) in the _CloudFormation User Guide_. +For more information, see [Tagging `EnabledControl` resources in AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/tagging.html) and [`EnabledControl`](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-resource-controltower-enabledcontrol.html) in the _CloudFormation User Guide_. @@ -427 +427 @@ With the new APIs and defined baselines, you can register OUs and automate your -To learn more about these APIs, review [Baselines](https://docs.aws.amazon.com/controltower/latest/userguide/table-of-baselines.html) in the AWS Control Tower User Guide, and the [API Reference](https://docs.aws.amazon.com/controltower/latest/APIReference/API_Operations.html). The new APIs are available in AWS Regions where AWS Control Tower is available, except GovCloud (US) Regions. For a list of AWS Regions where AWS Control Tower is available, see the AWS Region Table. +To learn more about these APIs, review [Baselines](https://docs.aws.amazon.com//controltower/latest/userguide/table-of-baselines.html) in the AWS Control Tower User Guide, and the [API Reference](https://docs.aws.amazon.com//controltower/latest/APIReference/API_Operations.html). The new APIs are available in AWS Regions where AWS Control Tower is available, except GovCloud (US) Regions. For a list of AWS Regions where AWS Control Tower is available, see the AWS Region Table.