AWS controltower documentation change
Summary
Added hyperlink to 'service integration accounts' documentation and minor text refinement
Security assessment
Formatting improvement with added link, but no security content changes. References existing security accounts without introducing new security information.
Diff
diff --git a/controltower/latest/userguide/key-changes-lz-v4.md b/controltower/latest/userguide/key-changes-lz-v4.md index 65bbd0c27..e2c41a288 100644 --- a//controltower/latest/userguide/key-changes-lz-v4.md +++ b//controltower/latest/userguide/key-changes-lz-v4.md @@ -28 +28 @@ Do not disable service integrations (AWS Config, SecurityRoles) as part of the v - * **Optional Organization Structure:** AWS Control Tower no longer enforces or manages the Security OU creation so customers can define and manage their own organization structure. However, AWS Control Tower will require all accounts that are configured for each AWS service integration to be under the same parent OU. There is no impact for customers that have already set-up the AWS Control Tower and have the Security OU. AWS Control Tower automatically deploys the resources and controls necessary to manage service integration accounts in the Security OU. For example, when AWS Config integration is enabled, AWS Config recording is enabled in all service integration accounts. The AWS Control Tower Baseline and the AWS Config Baseline are not applicable to the Security OU and integration accounts. To change service integrations, update landing zone settings. + * **Optional Organization Structure:** AWS Control Tower no longer enforces or manages the Security OU creation so customers can define and manage their own organization structure. However, AWS Control Tower will require all accounts that are configured for each AWS service integration to be under the same parent OU. There is no impact for customers that have already set-up the AWS Control Tower and have the Security OU. AWS Control Tower automatically deploys the resources and controls necessary to manage service integration accounts in the Security OU. For example, when AWS Config integration is enabled, AWS Config recording is enabled in all [service integration accounts](./special-accounts.html). The AWS Control Tower Baseline and the AWS Config Baseline are not applicable to the Security OU and the service integration accounts. To change service integrations, update landing zone settings.