AWS solutions documentation change
Summary
Capitalization fix ('stack set instance' to 'StackSet instance') and maintained SCP protection context
Security assessment
Change maintains existing security control documentation about SCPs protecting resource deletion. Formatting adjustment doesn't alter security posture.
Diff
diff --git a/solutions/latest/innovation-sandbox-on-aws/cloudformation-stacks.md b/solutions/latest/innovation-sandbox-on-aws/cloudformation-stacks.md index 24e92ccc7..7a8df8fc6 100644 --- a//solutions/latest/innovation-sandbox-on-aws/cloudformation-stacks.md +++ b//solutions/latest/innovation-sandbox-on-aws/cloudformation-stacks.md @@ -70 +70 @@ As part of the deployment, the solution deploys these CloudFormation stacks. -The **SandboxAccount** stack is automatically configured as a service-managed CloudFormation StackSet resource in the AccountPool stack using the Sandbox OU as the deployment target. The stack contains a single spoke role that is assumed into by compute resources in the compute stack to run the account clean-up job. SCPs established in the AccountPool stack protect the deletion of the role as well as the stack set instance. +The **SandboxAccount** stack is automatically configured as a service-managed CloudFormation StackSet resource in the AccountPool stack using the Sandbox OU as the deployment target. The stack contains a single spoke role that is assumed into by compute resources in the compute stack to run the account clean-up job. SCPs established in the AccountPool stack protect the deletion of the role as well as the StackSet instance.