AWS controltower documentation change
Summary
Clarified CloudFormation usage in Control Tower with specific examples of baseline resources (IAM roles, AWS Config recorders)
Security assessment
Adds explicit examples of security resources (IAM roles) deployed via CloudFormation, enhancing documentation of security features without addressing specific vulnerabilities.
Diff
diff --git a/controltower/latest/userguide/cloudformation.md b/controltower/latest/userguide/cloudformation.md index 7ad0cd2cd..7e37c7695 100644 --- a//controltower/latest/userguide/cloudformation.md +++ b//controltower/latest/userguide/cloudformation.md @@ -11 +11 @@ CloudFormation enables you to create and provision AWS infrastructure deployment -AWS Control Tower uses CloudFormation stacksets to apply controls on accounts. For more information about how CloudFormation and AWS Control Tower work together, see [Create AWS Control Tower resources with AWS CloudFormation](./creating-resources-with-cloudformation.html). +AWS Control Tower uses CloudFormation StackSets to deploy and manage baseline resources, such as IAM roles and AWS Config recorders, in your accounts. For more information about how CloudFormation and AWS Control Tower work together, see [Create AWS Control Tower resources with AWS CloudFormation](./creating-resources-with-cloudformation.html).