AWS controltower documentation change

Service: controltower · 2026-02-19 · Documentation low

File: controltower/latest/controlreference/ec2-auto-scaling-rules.md

Summary

Replaced GitHub link with inline CloudFormation examples for CT.AUTOSCALING.PR.4 control, adding PASS/FAIL templates demonstrating ELB health check configuration

Security assessment

Change adds implementation examples for existing security control but doesn't address vulnerabilities. The health check configuration relates to availability best practices, not direct security flaws.

Diff

diff --git a/controltower/latest/controlreference/ec2-auto-scaling-rules.md b/controltower/latest/controlreference/ec2-auto-scaling-rules.md
index 318241314..cca56b003 100644
--- a//controltower/latest/controlreference/ec2-auto-scaling-rules.md
+++ b//controltower/latest/controlreference/ec2-auto-scaling-rules.md
@@ -542 +542 @@ This control checks whether your Amazon EC2 Auto Scaling groups that are associa
-  * For examples of PASS and FAIL CloudFormation Templates related to this control, see: [GitHub](https://github.com/aws-samples/aws-control-tower-samples/tree/main/samples/CT.AUTOSCALING.PR.4)
+  * For examples of PASS and FAIL CloudFormation Templates related to this control, see: CT.AUTOSCALING.PR.4 example templates
@@ -681,0 +682,44 @@ Auto Scaling group with a Target Group association and Elastic Load Balancing he
+### CT.AUTOSCALING.PR.4 example templates
+
+You can view examples of the PASS and FAIL test artifacts for the AWS Control Tower proactive controls.
+
+PASS Example - Use this template to verify a compliant resource creation.
+    
+    
+    Resources:
+      AutoScalingGroup:
+        Type: AWS::AutoScaling::AutoScalingGroup
+        Properties:
+          LaunchTemplate:
+            LaunchTemplateId: example-launch-template-id
+            Version: 1
+          MaxSize: '1'
+          MinSize: '0'
+          DesiredCapacity: '1'
+          LoadBalancerNames:
+            - example-load-balancer
+          HealthCheckType: ELB
+          VPCZoneIdentifier:
+            - example-subnet
+            
+
+FAIL Example - Use this template to verify that the control prevents non-compliant resource creation.
+    
+    
+    Resources:
+      AutoScalingGroup:
+        Type: AWS::AutoScaling::AutoScalingGroup
+        Properties:
+          LaunchTemplate:
+            LaunchTemplateId: example-launch-template-id
+            Version: 1
+          MaxSize: '1'
+          MinSize: '0'
+          DesiredCapacity: '1'
+          TargetGroupARNs:
+            - example-target-group-arn
+          VPCZoneIdentifier:
+            - example-subnet
+          HealthCheckType: EC2
+            
+