AWS controltower: Fix URLs for encryption and compute type documentation
Summary
Corrected multiple broken links related to CloudWatch log encryption, SNS encryption, and CodeBuild compute types by removing extra slashes in URLs.
Security assessment
The changes repair documentation links but do not modify security configurations, introduce new security practices, or resolve vulnerabilities.
Evidence
+ * If the variable `cloudwatch_log_group_enable_cmk_encryption` is set to **true** , the CloudWatch log groups for AFT are encrypted using the CMK. If the variable is set to **false** , which is the default value, the logs are encrypted using [server side encryption with the CloudWatch logs default](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html).
Diff
diff --git a/controltower/latest/userguide/aft-getting-started.md b/controltower/latest/userguide/aft-getting-started.md index d0136640e..2ffb29cb8 100644 --- a//controltower/latest/userguide/aft-getting-started.md +++ b//controltower/latest/userguide/aft-getting-started.md @@ -171 +171 @@ If you opt into these settings, AFT uses the existing CMK, _alias/aft_ , to encr - * If the variable `cloudwatch_log_group_enable_cmk_encryption` is set to **true** , the CloudWatch log groups for AFT are encrypted using the CMK. If the variable is set to **false** , which is the default value, the logs are encrypted using [server side encryption with the CloudWatch logs default](https://docs.aws.amazon.com//AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html). + * If the variable `cloudwatch_log_group_enable_cmk_encryption` is set to **true** , the CloudWatch log groups for AFT are encrypted using the CMK. If the variable is set to **false** , which is the default value, the logs are encrypted using [server side encryption with the CloudWatch logs default](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html). @@ -173 +173 @@ If you opt into these settings, AFT uses the existing CMK, _alias/aft_ , to encr - * If the variable `sns_topic_enable_cmk_encryption` is set to **true** , notifications sent to the AFT SNS topics (_aft-notifications_ and _aft-failure-notifications_) are encrypted using the CMK. If the variable is set to **false** , which is the default value, the SNS messages are encrypted with the AWS-managed key: _alias/aws/sns_. For more information, see [SSE key terms](https://docs.aws.amazon.com//sns/latest/dg/sns-server-side-encryption.html#sse-key-terms). + * If the variable `sns_topic_enable_cmk_encryption` is set to **true** , notifications sent to the AFT SNS topics (_aft-notifications_ and _aft-failure-notifications_) are encrypted using the CMK. If the variable is set to **false** , which is the default value, the SNS messages are encrypted with the AWS-managed key: _alias/aws/sns_. For more information, see [SSE key terms](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms). @@ -179 +179 @@ During deployment, to change the compute type that AFT uses for CodeBuild, set t -For information about accepted compute types, see [About on-demand environment types](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types). The default compute type is `BUILD_GENERAL1_MEDIUM`. +For information about accepted compute types, see [About on-demand environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types). The default compute type is `BUILD_GENERAL1_MEDIUM`.