AWS controltower documentation change
Summary
Updated documentation links and removed 'created by AWS Control Tower' qualifier from guardrail operations
Security assessment
While the guardrail scope change could impact security configurations, there's no explicit mention of security vulnerabilities being addressed. The modifications appear to broaden functionality rather than fix security issues.
Diff
diff --git a/controltower/latest/userguide/lifecycle-events.md b/controltower/latest/userguide/lifecycle-events.md index 3bd2f0dd3..2fe444633 100644 --- a//controltower/latest/userguide/lifecycle-events.md +++ b//controltower/latest/userguide/lifecycle-events.md @@ -15 +15 @@ Some events logged by AWS Control Tower are _lifecycle events_. A lifecycle even - * AWS CloudTrail automatically records each lifecycle event as a _non-API AWS service event_. For more information, see [ the AWS CloudTrail User Guide.](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/non-api-aws-service-events.html) + * AWS CloudTrail automatically records each lifecycle event as a _non-API AWS service event_. For more information, see [ the AWS CloudTrail User Guide.](https://docs.aws.amazon.com//awscloudtrail/latest/userguide/non-api-aws-service-events.html) @@ -55 +55 @@ You can view lifecycle events from the **Activities** page in your AWS Control T -For more information about how to integrate AWS Control Tower lifecycle events into your workflows, see this blog post, [Using lifecycle events to track AWS Control Tower actions and trigger automated workflows](https://aws.amazon.com/blogs/mt/using-lifecycle-events-to-track-aws-control-tower-actions-and-trigger-automated-workflows/). +For more information about how to integrate AWS Control Tower lifecycle events into your workflows, see this blog post, [Using lifecycle events to track AWS Control Tower actions and trigger automated workflows](https://aws.amazon.com//blogs/mt/using-lifecycle-events-to-track-aws-control-tower-actions-and-trigger-automated-workflows/). @@ -79 +79 @@ In these examples, some account names and organization names are obscured. An `a - * EnableGuardrail: The log records whether AWS Control Tower successfully completed every action to enable a control on an OU that was created by AWS Control Tower. + * EnableGuardrail: The log records whether AWS Control Tower successfully completed every action to enable a control on an OU. @@ -81 +81 @@ In these examples, some account names and organization names are obscured. An `a - * DisableGuardrail: The log records whether AWS Control Tower successfully completed every action to disable a control on an OU that was created by AWS Control Tower. + * DisableGuardrail: The log records whether AWS Control Tower successfully completed every action to disable a control on an OU.