AWS controltower documentation change
Summary
Updated CloudTrail documentation links and organizational trail references
Security assessment
The changes update documentation links and clarify organizational trail usage, but don't introduce new security features or address specific vulnerabilities. Organizational trails are a security best practice, but this is existing functionality.
Diff
diff --git a/controltower/latest/userguide/logging-using-cloudtrail.md b/controltower/latest/userguide/logging-using-cloudtrail.md index 6d991b19b..7b5a92cce 100644 --- a//controltower/latest/userguide/logging-using-cloudtrail.md +++ b//controltower/latest/userguide/logging-using-cloudtrail.md @@ -21 +21 @@ CloudTrail is enabled on your AWS account when you create the account. When supp -In AWS Control Tower releases before landing zone version 3.0, AWS Control Tower created a member account trail. When you update to release 3.0, your CloudTrail trail is updated to become an organization trail. For best practices when moving between trails, see [Creating an organizational trail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html#creating-an-organizational-trail-best-practice) in the CloudTrail User Guide. +In AWS Control Tower releases before landing zone version 3.0, AWS Control Tower created a member account trail. When you update to release 3.0, your CloudTrail trail is updated to become an organization trail. For best practices when moving between trails, see [Creating an organizational trail](https://docs.aws.amazon.com//awscloudtrail/latest/userguide/creating-trail-organization.html#creating-an-organizational-trail-best-practice) in the CloudTrail User Guide. @@ -29 +29 @@ For an ongoing record of events in your AWS account, including events for AWS Co - * [Prepare for creating a trail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html) + * [Prepare for creating a trail](https://docs.aws.amazon.com//awscloudtrail/latest/userguide/creating-an-organizational-trail-prepare.html) @@ -31 +31 @@ For an ongoing record of events in your AWS account, including events for AWS Co - * [Managing CloudTrail costs](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-trail-manage-costs.html) + * [Managing CloudTrail costs](https://docs.aws.amazon.com//awscloudtrail/latest/userguide/cloudtrail-trail-manage-costs.html) @@ -46 +46 @@ AWS Control Tower logs the following actions as events in CloudTrail log files: - * For a full list of the AWS Control Tower public APIs and details about each one, see [The AWS Control Tower API Reference](https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html). Calls to these public APIs are logged by AWS CloudTrail. + * For a full list of the AWS Control Tower public APIs and details about each one, see [The AWS Control Tower API Reference](https://docs.aws.amazon.com//controltower/latest/APIReference/Welcome.html). Calls to these public APIs are logged by AWS CloudTrail.