AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2026-05-13 · Documentation medium

File: code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md

Summary

Added comprehensive CLI example for ListBaselines, including output samples and links to security/compliance baselines like AuditBaseline and LogArchiveBaseline.

Security assessment

Enhances documentation of security-focused baselines (audit logging, backup policies) but doesn't address vulnerabilities. Provides operational guidance for security features.

Diff

diff --git a/code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md b/code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md
index f0f041abf..e54973553 100644
--- a//code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md
+++ b//code-library/latest/ug/controltower_example_controltower_ListBaselines_section.md
@@ -9 +9 @@ There are more AWS SDK examples available in the [AWS Doc SDK Examples](https://
-# Use `ListBaselines` with an AWS SDK
+# Use `ListBaselines` with an AWS SDK or CLI
@@ -64,0 +65,64 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+CLI
+    
+
+**AWS CLI**
+    
+
+**To list Control Tower baselines**
+
+The following `list-baselines` example lists all available AWS Control Tower baselines.
+    
+    
+    aws controltower list-baselines
+    
+
+Output:
+    
+    
+    {
+        "baselines": [
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/4T4HA1KMO10S6311",
+                "description": "Sets up resources to monitor security and compliance of accounts in your organization.",
+                "name": "AuditBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/J8HX46AHS5MIKQPD",
+                "description": "Sets up a central repository for logs of API activities and resource configurations from accounts in your organization.",
+                "name": "LogArchiveBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ",
+                "description": "Sets up shared resources for AWS Identity Center, which prepares the AWSControlTowerBaseline to set up Identity Center access for accounts.",
+                "name": "IdentityCenterBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2",
+                "description": "Sets up resources and mandatory controls for member accounts within the target OU, required for AWS Control Tower governance.",
+                "name": "AWSControlTowerBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/3WPD0NA6TJ9AOMU2",
+                "description": "Sets up a central AWS Backup vault in your organization.",
+                "name": "BackupCentralVaultBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/H6C5JFCJJ3CPU3J5",
+                "description": "Sets up AWS Backup Audit Manager.",
+                "name": "BackupAdminBaseline"
+            },
+            {
+                "arn": "arn:aws:controltower:us-east-1::baseline/APO9ATVPBKFRRGLK",
+                "description": "Sets up a local AWS Backup vault and attaches multiple AWS Backup plans.",
+                "name": "BackupBaseline"
+            }
+        ]
+    }
+
+For more information, see [Types of baselines](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) in the _AWS Control Tower User Guide_.
+
+  * For API details, see [ListBaselines](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-baselines.html) in _AWS CLI Command Reference_. 
+
+
+
+