AWS controltower: Fix documentation links for S3, OU, and CloudFormation
Summary
Corrected URLs for S3 bucket policies, Root OU, and CloudFormation Outputs references.
Security assessment
Fixes broken links to resource configuration docs without introducing security content.
Evidence
-You'll replace the `AccountId` variable shown in the example with the AWS account ID for the management account that is deploying CfCT. For more examples, refer to [Bucket policy examples](https://docs.aws.amazon.com//AmazonS3/latest/userguide/example-bucket-policies.html) in the Amazon Simple Storage Service User Guide.
Diff
diff --git a/controltower/latest/userguide/cfct-manifest-file-resources-section.md b/controltower/latest/userguide/cfct-manifest-file-resources-section.md index 7f0a69d36..dbd774e27 100644 --- a//controltower/latest/userguide/cfct-manifest-file-resources-section.md +++ b//controltower/latest/userguide/cfct-manifest-file-resources-section.md @@ -105 +105 @@ If you provide an Amazon S3 URL, verify that the bucket policy allows read acces -You'll replace the `AccountId` variable shown in the example with the AWS account ID for the management account that is deploying CfCT. For more examples, refer to [Bucket policy examples](https://docs.aws.amazon.com//AmazonS3/latest/userguide/example-bucket-policies.html) in the Amazon Simple Storage Service User Guide. +You'll replace the `AccountId` variable shown in the example with the AWS account ID for the management account that is deploying CfCT. For more examples, refer to [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html) in the Amazon Simple Storage Service User Guide. @@ -174 +174 @@ If you want to deploy an SCP or RCP, the target must be an OU, not an account. -The organization’s management account ID is not an allowed value. CfCT does not support deploying stack instances into the organization’s management account, by default. If you have a special use case, see [Root OU](https://docs.aws.amazon.com//controltower/latest/userguide/cfct-root-ou.html). +The organization’s management account ID is not an allowed value. CfCT does not support deploying stack instances into the organization’s management account, by default. If you have a special use case, see [Root OU](https://docs.aws.amazon.com/controltower/latest/userguide/cfct-root-ou.html). @@ -188 +188 @@ The organization’s management account ID is not an allowed value. CfCT does no - * **Valid Values:** Any string or the `$[output_`CfnOutput-Logical-ID`]` variable where `CfnOutput-Logical-ID` corresponds to the template output variable. For more information about the Outputs section in an CloudFormation template, see [**Outputs**](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/outputs-section-structure.html) in the _CloudFormation User Guide_. + * **Valid Values:** Any string or the `$[output_`CfnOutput-Logical-ID`]` variable where `CfnOutput-Logical-ID` corresponds to the template output variable. For more information about the Outputs section in an CloudFormation template, see [**Outputs**](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/outputs-section-structure.html) in the _CloudFormation User Guide_.