AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2026-04-01 · Documentation low

File: controltower/latest/userguide/additional-console-required-permissions.md

Summary

Added link to AWSControlTowerCloudTrailRolePolicy documentation in the list of automatically created roles.

Security assessment

This adds documentation about a CloudTrail-related IAM role, which is security-related infrastructure. However, it's a routine documentation improvement without evidence of addressing a specific security issue.

Diff

diff --git a/controltower/latest/userguide/additional-console-required-permissions.md b/controltower/latest/userguide/additional-console-required-permissions.md
index 6cb6b460f..3ec10e2a0 100644
--- a//controltower/latest/userguide/additional-console-required-permissions.md
+++ b//controltower/latest/userguide/additional-console-required-permissions.md
@@ -16,0 +17,2 @@ AWS Control Tower creates three roles automatically when you set up a landing zo
+  * [AWSControlTowerCloudTrailRole](./access-control-managing-permissions.html#AWSControlTowerCloudTrailRolePolicy)
+