AWS controltower documentation change
Summary
Removed outdated global identifier reference table and added warning about deprecated content. Replaced with a link to updated resource identifier documentation.
Security assessment
The change removes potentially outdated control identifiers but doesn't address any specific security vulnerability. The warning indicates content deprecation without evidence of security remediation. No security features were documented; instead, existing documentation was streamlined.
Diff
diff --git a/controltower/latest/controlreference/all-global-identifiers.md b/controltower/latest/controlreference/all-global-identifiers.md index da2613c33..adb4f2d49 100644 --- a//controltower/latest/controlreference/all-global-identifiers.md +++ b//controltower/latest/controlreference/all-global-identifiers.md @@ -7 +7 @@ -A _global identifier_ for a control is a unique identifer, independent of the Region in which a control is deployed. Global identifiers are associated with controls that are included in [AWS Control Catalog](https://docs.aws.amazon.com//controlcatalog/latest/userguide/what-is-controlcatalog.html), which is a compendium of controls from several AWS services. +###### Warning @@ -9 +9 @@ A _global identifier_ for a control is a unique identifer, independent of the Re -_Last updated on April 11, 2025._ +The data previously displayed on this page was outdated and has been removed. This page will be removed in a future release. @@ -11 +11 @@ _Last updated on April 11, 2025._ -This section contains a reference list of global identifiers that are assigned to AWS Control Tower controls. The global identifier fulfills the final portion of the Amazon Resource Name (ARN), which is of the following form: +A _global identifier_ for a control is a unique identifier, independent of the Region in which a control is deployed. Global identifiers are associated with controls that are included in [AWS Control Catalog](https://docs.aws.amazon.com//controlcatalog/latest/userguide/what-is-controlcatalog.html), which is a compendium of controls from several AWS services. @@ -12,0 +13 @@ This section contains a reference list of global identifiers that are assigned t +The global identifier fulfills the final portion of the Amazon Resource Name (ARN), which is of the following form: @@ -14,7 +14,0 @@ This section contains a reference list of global identifiers that are assigned t - arn:{PARTITION}:controlcatalog:::control/{CONTROL_CATALOG_OPAQUE_ID} - -The {CONTROL_CATALOG_OPAQUE_ID} values for the controls are shown in the list that follows. - -To obtain the complete global identifer programmatically, with the full ARN, you can call the `GetControl` and `ListControls` APIs. You also can view the complete global ARN in the AWS Control Tower console, on the **Control details** page. - -###### Note @@ -22,6 +16 @@ To obtain the complete global identifer programmatically, with the full ARN, you -Some controls may also have an AWS Control Tower identifier, a Regional identifier, which is of the form - - - arn:{PARTITION}:controltower:{REGION}::control/{CONTROL_TOWER_OPAQUE_ID} - -In most cases, the value for {PARTITION} is `aws`. + arn:{PARTITION}:controlcatalog:::control/{CONTROL_CATALOG_OPAQUE_ID} @@ -29 +18 @@ In most cases, the value for {PARTITION} is `aws`. -These Regional identifiers are associated with an `EnabledControl` resource, especially if the control was enabled by calling that Regional identifier initially. +To obtain the complete global identifier programmatically, with the full ARN, you can call the [`GetControl`](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_GetControl.html) and [`ListControls`](https://docs.aws.amazon.com/controlcatalog/latest/APIReference/API_ListControls.html) APIs. You also can view the complete global ARN in the AWS Control Tower console, on the **Control details** page. @@ -31,764 +20 @@ These Regional identifiers are associated with an `EnabledControl` resource, esp -**Control** | **Global identifier** ----|--- -API_GW_CACHE_ENABLED_AND_ENCRYPTED| 8yfgv1as4flg600mdijhjyq69 -APPSYNC_ASSOCIATED_WITH_WAF| 5a9vtg189jvdqqlypcouc7voc -AURORA_LAST_BACKUP_RECOVERY_POINT_CREATED| 96jt6tgoadmqsahe86xxc8cgm -AURORA_RESOURCES_PROTECTED_BY_BACKUP_PLAN| 5v9l25gsxucfgiowfbp5ixh7y -AUTOSCALING_CAPACITY_REBALANCING| 8zfd7nm6xbeevojp7yw6ihgo6 -AWS-GR_AUDIT_BUCKET_DELETION_PROHIBITED| 3cerasw3dhjqcwatjqo2gk3wj -AWS-GR_AUDIT_BUCKET_ENCRYPTION_ENABLED| k4izcjxhukijhajp6ks5mjxk -AWS-GR_AUDIT_BUCKET_LOGGING_ENABLED| kr15xvw9oltta064g3o80ppk -AWS-GR_AUDIT_BUCKET_POLICY_CHANGES_PROHIBITED| 4wtwsih93j7vct3k0pyvrs3e2 -AWS-GR_AUDIT_BUCKET_PUBLIC_READ_PROHIBITED| 9jzlkwys54gzgsx3pmkqnx8l1 -AWS-GR_AUDIT_BUCKET_PUBLIC_WRITE_PROHIBITED| ci9ov6vzjoi6vzkajgademvvo -AWS-GR_AUDIT_BUCKET_RETENTION_POLICY| ew9b99j144ugzye49kokym66c -AWS-GR_AUTOSCALING_LAUNCH_CONFIG_PUBLIC_IP_DISABLED| aemn4s3hxv9erree434pvjboi -AWS-GR_CLOUDTRAIL_CHANGE_PROHIBITED| 1iskvg0qcxofs1t78ittjbnr5 -AWS-GR_CLOUDTRAIL_CLOUDWATCH_LOGS_ENABLED| 9kckk934zwozk5koykyc8w2t2 -AWS-GR_CLOUDTRAIL_ENABLED| 3y0z7ziftmm28vdnlzjwe9410 -AWS-GR_CLOUDTRAIL_VALIDATION_ENABLED| wa2yjrj2zlenc1y71rim6z49 -AWS-GR_CLOUDWATCH_EVENTS_CHANGE_PROHIBITED| aoa66btqlvrz0ztealide8ll7 -AWS-GR_CONFIG_AGGREGATION_AUTHORIZATION_POLICY| 742lj0swg82u6ql8zgt51s7ji -AWS-GR_CONFIG_AGGREGATION_CHANGE_PROHIBITED| 3ksucrmpxrisrr73zuw5jxry8 -AWS-GR_CONFIG_CHANGE_PROHIBITED| e2saoisw5u8xe40acfetio41w -AWS-GR_CONFIG_ENABLED| 4t6npb1xfud01v5ihhj9ldfax -AWS-GR_CONFIG_RULE_CHANGE_PROHIBITED| 5lwgwp498974xwygy5ge7pxfz -AWS-GR_CT_AUDIT_BUCKET_ENCRYPTION_CHANGES_PROHIBITED| 1hgbgne5nxz2xtw51snbmli9b -AWS-GR_CT_AUDIT_BUCKET_LIFECYCLE_CONFIGURATION_CHANGES_PROHIBITED| 68y2k0smdsw3luca7s2fzoqhn -AWS-GR_CT_AUDIT_BUCKET_LOGGING_CONFIGURATION_CHANGES_PROHIBITED| 5sms9yvx9k7iawusagao3bx8u -AWS-GR_CT_AUDIT_BUCKET_POLICY_CHANGES_PROHIBITED| dmvclaluiuvtsmivvw5t7an1x -AWS-GR_DETECT_CLOUDTRAIL_ENABLED_ON_MEMBER_ACCOUNTS| 8sdhbqfe2fsmh3b1i2b24xaic -AWS-GR_DETECT_CLOUDTRAIL_ENABLED_ON_SHARED_ACCOUNTS| 1ln29qglgkigm9ajfka6u2p2u -AWS-GR_DISALLOW_CROSS_REGION_NETWORKING| dvuaav61i5cnfazfelmvn9m6k -AWS-GR_DISALLOW_VPC_INTERNET_ACCESS| 41ngl8m5c4eb1myoz0t707n7h -AWS-GR_DISALLOW_VPN_CONNECTIONS| 5rlqt6yj6u0v0gb62pqdy4ae -AWS-GR_DMS_REPLICATION_NOT_PUBLIC| dekrrxbiux86m6jdowdsbamze -AWS-GR_EBS_OPTIMIZED_INSTANCE| 2j9gjxqfo040xtx8kd1jf4ni6 -AWS-GR_EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK| 87qo8rsoettjrxjevmjqcw1tu -AWS-GR_EC2_INSTANCE_NO_PUBLIC_IP| 4v7xtm83uvvyulk1wwpm4qm3s -AWS-GR_EC2_VOLUME_INUSE_CHECK| 8c3i4catfgmyy1e19476v06rr -AWS-GR_EKS_ENDPOINT_NO_PUBLIC_ACCESS| aeellyghb27pbehyzua1nyena -AWS-GR_ELASTICSEARCH_IN_VPC_ONLY| 2civrte1w8tqff4vbtzdl4abq -AWS-GR_EMR_MASTER_NO_PUBLIC_IP| 5cnql6so7p7bs0khdjodjr9e2 -AWS-GR_ENCRYPTED_VOLUMES| 503uicglhjkokaajywfpt6ros -AWS-GR_IAM_ROLE_CHANGE_PROHIBITED| e8m8q8hlntzfkjhhf99yk84jl -AWS-GR_IAM_USER_MFA_ENABLED| 7z1uzm6s8qk7ym7m0sm56cq0u -AWS-GR_LAMBDA_CHANGE_PROHIBITED| 6g1vku0mw1b12o9jhuouxj8ia -AWS-GR_LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED| b2gzofz99eb7nsuj5g8wcimse -AWS-GR_LOG_GROUP_POLICY| 8cclsjiy1o81kfsmzpt85nbjk -AWS-GR_MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS| 1fvktjhpo9wdpt3pjb2wsz7nt -AWS-GR_NO_UNRESTRICTED_ROUTE_TO_IGW| b8pjfqosgkgknznstduvel4rh -AWS-GR_RDS_INSTANCE_PUBLIC_ACCESS_CHECK| 4jc77cq1lcr7g64xywwypykv8 -AWS-GR_RDS_SNAPSHOTS_PUBLIC_PROHIBITED| 1h4eyqyyonp19dlrreqf1i3w0 -AWS-GR_RDS_STORAGE_ENCRYPTED| e34kieahgkm0lggs5g0s412jt -AWS-GR_REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK| 1oxkwnc4hwhi2ndv6ekwy7np7 -AWS-GR_REGION_DENY| cwlixshc8c8mw9qiwdw2z0zav -AWS-GR_RESTRICTED_COMMON_PORTS| df2ta5ytg2zatj1q7y5e09u32 -AWS-GR_RESTRICTED_SSH| 6rilu41n0gb9w6mxrkyewoer4 -AWS-GR_RESTRICT_ROOT_USER| 5kvme4m5d2b4d7if2fs5yg2ui -AWS-GR_RESTRICT_ROOT_USER_ACCESS_KEYS| 8ui9y3oace2513xarz8aqojl7 -AWS-GR_RESTRICT_S3_CROSS_REGION_REPLICATION| 3zbcht7oxkzts9r1z20nz5lcw -AWS-GR_RESTRICT_S3_DELETE_WITHOUT_MFA| 69wj8mo0sfw7gbz9lklsu9u51 -AWS-GR_ROOT_ACCOUNT_MFA_ENABLED| 24izmu4k16gv9tvd7sexnyrfy -AWS-GR_S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS_PERIODIC| 6wmutsohbkwhfw6sf7cbt5e81 -AWS-GR_S3_BUCKET_PUBLIC_READ_PROHIBITED| 8sw3pbid15t9cbww8d2w2qwgf -AWS-GR_S3_BUCKET_PUBLIC_WRITE_PROHIBITED| 9j9nwxj789d82sypnukhyyowy -AWS-GR_S3_VERSIONING_ENABLED| e7pjiyz7qwijz4hvngvnsa61g -AWS-GR_SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS| 66gfl06uj1v999z53szvu0exa -AWS-GR_SNS_CHANGE_PROHIBITED| 8axz4m7a5i0p6djlcszljt4v1 -AWS-GR_SNS_SUBSCRIPTION_CHANGE_PROHIBITED| 4nsca5yf5oz41tr6r6bs5mmte -AWS-GR_SSM_DOCUMENT_NOT_PUBLIC| dfanrd8y5p7oj8fjyugqnakfr -AWS-GR_SUBNET_AUTO_ASSIGN_PUBLIC_IP_DISABLED| 50z1ot237wl8u1lv5ufau6qqo -BACKUP_PLAN_MIN_FREQUENCY_AND_MIN_RETENTION_CHECK| dagreqi0i3fitenunuuo4q64t -BACKUP_RECOVERY_POINT_MANUAL_DELETION_DISABLED| d1wltz1jx8c4aok5062g4kzz3 -BACKUP_RECOVERY_POINT_MINIMUM_RETENTION_CHECK| m7a5gbdf08wg2o0en010mkng -CONFIG.ACCOUNT.DT.1| 4x11tie7h25sws4g7ilakhcb7 -CONFIG.APPCONFIG.DT.1| 5r0u6wixts2apa2axx2ncqi84 -CONFIG.APPCONFIG.DT.2| 440isyu33k5st7hw54dzjyvlm -CONFIG.APPCONFIG.DT.3| 2am8dq8mqwgkhncvvfr6zznyx -CONFIG.APPCONFIG.DT.4| hk6vqsoxq2lwijzn6erlqrvq -CONFIG.APPMESH.DT.1| aneb2l6i8sr1vfcvrt71hiyuw -CONFIG.APPMESH.DT.2| cxjfi1zzb1m0zpg50p9pysnsc -CONFIG.APPMESH.DT.3| eb09bagcwcznxt4eu9brt4z73 -CONFIG.APPMESH.DT.4| clg7hv5v0kkmdf56iox9gbaby -CONFIG.APPMESH.DT.5| bgk0hcnypiq0nfsxdel2qtcbg -CONFIG.APPMESH.DT.6| 48ug9gvpxofiopwuaur6gg3i9 -CONFIG.APPMESH.DT.7| e4obpvaj70tmdn0pzz0hzhfdx -CONFIG.APPSYNC.DT.2| cyl1rdgjkkesqqbz7ilt1pdvh -CONFIG.APPSYNC.DT.3| 4xilq5m797lh2y9841uszqho5 -CONFIG.APPSYNC.DT.4| dokxnr9hqmfbswppmrpdmayh0 -CONFIG.APPSYNC.DT.5| 7l040cp0g4fx022ns53hgoy5c -CONFIG.ATHENA.DT.1| 2qk419909irkwq4l3uistcphn -CONFIG.ATHENA.DT.2| 5o87rztmw5nk2a757afwjlb42 -CONFIG.AUTOSCALING.DT.1| cs1w3sab11tulyemv0wqfjc26 -CONFIG.BACKUP-GATEWAY.DT.1| 13n7y1ty3aqe1m61oz3016vti -CONFIG.BACKUP-GATEWAY.DT.2| 3zoxqfp9ky3mw8or097527nal -CONFIG.BACKUP-GATEWAY.DT.3| e6gcpxwgywy63br0tdn5zcaf -CONFIG.CLOUDFORMATION.DT.1| q12pzvmb9w8922k22h9vpvm2 -CONFIG.CLOUDFRONT.DT.10| 9g7y84m2v4q22ws0op5jqspup -CONFIG.CLOUDFRONT.DT.11| 9yw3svk0wh6lj3hieingudtab -CONFIG.CLOUDFRONT.DT.1| qxbezv5syl11qyx50ewdp81b -CONFIG.CLOUDFRONT.DT.2| jl8cyw64jfpl9cal11yzd2j7 -CONFIG.CLOUDFRONT.DT.3| 6nv2nsrsjosjbmb0kuxmgqz86 -CONFIG.CLOUDFRONT.DT.4| 5k4pxd5tsidcp0a3bonn42tei -CONFIG.CLOUDFRONT.DT.5| 1f6fgca7yd4sw5dxos1f52um6 -CONFIG.CLOUDFRONT.DT.6| cv43r7l373xqx96p1a0g3cm9i -CONFIG.CLOUDFRONT.DT.7| bfi1zvjlzboh74q6ots2ta91u -CONFIG.CLOUDFRONT.DT.8| dge4anogfk8dy6575qlbvl27u -CONFIG.CLOUDFRONT.DT.9| 36nrh8dt8jf11speofpiglec8 -CONFIG.CLOUDTRAIL.DT.1| 7mi6d1cl1ji83q39c8xh3w6da -CONFIG.CLOUDTRAIL.DT.2| m210ps7tw47wjifrjjvagrrs -CONFIG.CLOUDTRAIL.DT.3| 65l0pkpmktv0d9qw0c7gdhv5d -CONFIG.CLOUDTRAIL.DT.4| 5svkm0sfsp3chc06m683cygz -CONFIG.CLOUDTRAIL.DT.5| 1m3wi9y66gi199vwyqmu4lm4l -CONFIG.CLOUDTRAIL.DT.6| ci7muk3pch8c7mmdkdd80dwum -CONFIG.CLOUDWATCH.DT.1| dk29asxlgsndiettlx36hhyw -CONFIG.CODEBUILD.DT.2| b2ld0ruiijt1kgj7t8eom6xxm -CONFIG.CODEBUILD.DT.3| 7fur69l67qg0bsa0gnqdr49jp -CONFIG.CODEDEPLOY.DT.1| 9u5xmn6k6p26wjjt7lcdd7tgj -CONFIG.CODEDEPLOY.DT.2| f0h5jaodhycbbvtoibzbrzh7r -CONFIG.CODEDEPLOY.DT.3| 177n8bngq06506vcymqgp0kuu -CONFIG.CODEPIPELINE.DT.1| 8k65jh499ji8qa5tb3it7tdi5 -CONFIG.CODEPIPELINE.DT.2| coufv85xoh2u3k08z6tqkd4xc -CONFIG.COGNITO-IDP.DT.1| 1038h7d21e6g8i10g6v3xsssi -CONFIG.DATASYNC.DT.1| 1i8rzlzj1t6lvzxvl79choux5 -CONFIG.DAX.DT.1| g5y72s02eroja0dwbvzyf9aa -CONFIG.DMS.DT.1| 8xk9cyefqtyxm28i5o8c23u5f -CONFIG.DMS.DT.2| uanhnqbg62ahgiofzztotbkt -CONFIG.DMS.DT.3| 41d17647wk31qhsnu0q188k7u -CONFIG.DMS.DT.4| a3v3bysbnz2pti4y24l3zjd13 -CONFIG.DMS.DT.5| 8v0mhkjltu0kv36ztf3ntjyxi -CONFIG.DMS.DT.6| ei0dfiq0hchohgi0crfp0rhz9 -CONFIG.DYNAMODB.DT.1| e962xnnuz3i5h3018afnpet2c -CONFIG.DYNAMODB.DT.2| 6am65w27qcfni6boy9ote2vpr -CONFIG.DYNAMODB.DT.3| 4gqcm1tpsuij5vmhtk4n6b4vf -CONFIG.DYNAMODB.DT.4| a0ufrfbomg90qbskltuop262u -CONFIG.DYNAMODB.DT.5| dgrdav585stm2ktstd6u59q4x -CONFIG.DYNAMODB.DT.6| 1h5467ejzh5x9hy9vdopyzvv -CONFIG.DYNAMODB.DT.7| dm91qhaj7bjtyrovbq0szj49u -CONFIG.EC2.DT.10| aqh482zxh1libhd8e5pff5r1w -CONFIG.EC2.DT.11| 96ojkxif5ixxv48cgnmbd6486 -CONFIG.EC2.DT.13| 8wvqgxocfqohcsue8uaeem5j5 -CONFIG.EC2.DT.14| 7bzysipfyg9dlis90c6smd860 -CONFIG.EC2.DT.15| 6heehmmgm9nuz00k1vqvt5i8x -CONFIG.EC2.DT.16| 5ao4e0mwkmssrou940zp6dwpn -CONFIG.EC2.DT.17| 1d908j9c0qtyr5vq7mora1ht2 -CONFIG.EC2.DT.18| 91sn66egshnk7jeyn0k6p5z8q -CONFIG.EC2.DT.19| f31dtpeonlx0amimdud6i2pmd -CONFIG.EC2.DT.1| 27lgd3oknluio5kzcl324kr0d -CONFIG.EC2.DT.20| tfbxih078lm84qa0dgbhk8v9 -CONFIG.EC2.DT.21| ddxbnp5bt3mx4fa36q32u0cn5 -CONFIG.EC2.DT.22| 24rma2apzrcpffp9vvmvxo7ry -CONFIG.EC2.DT.2| 7mkjbe5vjo1560d3ora6hixwj -CONFIG.EC2.DT.3| 3qqgtt6s7ex9qpznavelzr54y -CONFIG.EC2.DT.4| 8cien4aouhql5y2pwmwixwzcf -CONFIG.EC2.DT.5| e7542jytxkw9oukuqi6m33d85 -CONFIG.EC2.DT.6| 129gcq7rggc9ej3wpxym6renr -CONFIG.EC2.DT.7| by52ti0i4ubc8vc55p7u0984e -CONFIG.EC2.DT.8| 387olf003gcg3tfhngl63t6kg -CONFIG.EC2.DT.9| e2ia8mwmksgev8s6w6lzd0peb -CONFIG.ECS.DT.1| b1g22d0xhjkzfe0sic93z2or7 -CONFIG.ECS.DT.2| k95i0fpodb7ehw7x9o4pff6u -CONFIG.ECS.DT.3| 2ku7sxgbc8nkzdyhya2lmb8l6 -CONFIG.ECS.DT.4| dgygjy058dqn2hfzjgzzcoojt -CONFIG.EKS.DT.1| 8i4rci08epasf0b9h94gj1zt8 -CONFIG.EKS.DT.2| acauoj4kp0ksvufhr5lnaeolk