AWS code-library documentation change
Summary
Added comprehensive CLI example for ListBaselines, including output samples and links to security/compliance baselines like AuditBaseline and LogArchiveBaseline.
Security assessment
Enhances documentation of security-focused baselines (audit logging, backup policies) but doesn't address vulnerabilities. Provides operational guidance for security features.
Diff
diff --git a/code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md b/code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md index f0f041abf..e54973553 100644 --- a//code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md +++ b//code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md @@ -9 +9 @@ There are more AWS SDK examples available in the [AWS Doc SDK Examples](https:// -# Use `ListBaselines` with an AWS SDK +# Use `ListBaselines` with an AWS SDK or CLI @@ -64,0 +65,64 @@ There's more on GitHub. Find the complete example and learn how to set up and ru +CLI + + +**AWS CLI** + + +**To list Control Tower baselines** + +The following `list-baselines` example lists all available AWS Control Tower baselines. + + + aws controltower list-baselines + + +Output: + + + { + "baselines": [ + { + "arn": "arn:aws:controltower:us-east-1::baseline/4T4HA1KMO10S6311", + "description": "Sets up resources to monitor security and compliance of accounts in your organization.", + "name": "AuditBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/J8HX46AHS5MIKQPD", + "description": "Sets up a central repository for logs of API activities and resource configurations from accounts in your organization.", + "name": "LogArchiveBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ", + "description": "Sets up shared resources for AWS Identity Center, which prepares the AWSControlTowerBaseline to set up Identity Center access for accounts.", + "name": "IdentityCenterBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2", + "description": "Sets up resources and mandatory controls for member accounts within the target OU, required for AWS Control Tower governance.", + "name": "AWSControlTowerBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/3WPD0NA6TJ9AOMU2", + "description": "Sets up a central AWS Backup vault in your organization.", + "name": "BackupCentralVaultBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/H6C5JFCJJ3CPU3J5", + "description": "Sets up AWS Backup Audit Manager.", + "name": "BackupAdminBaseline" + }, + { + "arn": "arn:aws:controltower:us-east-1::baseline/APO9ATVPBKFRRGLK", + "description": "Sets up a local AWS Backup vault and attaches multiple AWS Backup plans.", + "name": "BackupBaseline" + } + ] + } + +For more information, see [Types of baselines](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) in the _AWS Control Tower User Guide_. + + * For API details, see [ListBaselines](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-baselines.html) in _AWS CLI Command Reference_. + + + +