AWS Security ChangesHomeSearch

AWS controltower documentation change

Service: controltower · 2026-06-10 · Documentation low

File: controltower/latest/userguide/getting-started-configure.md

Summary

Updated default shared account names and added version compatibility note

Security assessment

Administrative naming convention update without security implications. No security features modified.

Diff

diff --git a/controltower/latest/userguide/getting-started-configure.md b/controltower/latest/userguide/getting-started-configure.md
index 2d62724a8..f5cc91b72 100644
--- a//controltower/latest/userguide/getting-started-configure.md
+++ b//controltower/latest/userguide/getting-started-configure.md
@@ -15 +15,5 @@ The process of setting up your AWS Control Tower landing zone has multiple steps
-  * During setup, you can select customized names for the shared accounts that AWS Control Tower creates, called **log archive** and **audit** by default, but you cannot change these names after setup. (This is a one-time selection.)
+  * During setup, you can select customized names for the shared accounts that AWS Control Tower creates, called **CloudTrail Administrator** and **Aggregator account** by default.
+
+###### Note
+
+In Landing Zone versions prior to 4.0, these accounts are named "Log Archive" and "Audit" by default. Customers using earlier versions may still see the original names.