AWS Security ChangesHomeSearch

AWS controltower: Update CloudTrail role policy link

Service: controltower · 2026-08-19 · Documentation low

File: controltower/latest/userguide/key-changes-lz-v4.md

Summary

Fixed URL for Landing Zone 4.0 upgrade prerequisite documentation.

Security assessment

Link correction without altering security guidance for CloudTrail role policies.

Evidence

+  * **Pre-requisite for Landing Zone 4.0:** When upgrading to version 4.0 via API, ensure the `AWSControlTowerCloudTrailRole` service role uses the new managed policy `AWSControlTowerCloudTrailRolePolicy` instead of the existing inline policy. Detach the current inline policy and attach the new managed policy as described in the [documentation](https://docs.aws.amazon.com/controltower/latest/userguide/access-control-managing-permissions.html#AWSControlTowerCloudTrailRolePolicy).

Diff

diff --git a/controltower/latest/userguide/key-changes-lz-v4.md b/controltower/latest/userguide/key-changes-lz-v4.md
index e2c41a288..e07137e3a 100644
--- a//controltower/latest/userguide/key-changes-lz-v4.md
+++ b//controltower/latest/userguide/key-changes-lz-v4.md
@@ -24 +24 @@ Do not disable service integrations (AWS Config, SecurityRoles) as part of the v
-  * **Pre-requisite for Landing Zone 4.0:** When upgrading to version 4.0 via API, ensure the `AWSControlTowerCloudTrailRole` service role uses the new managed policy `AWSControlTowerCloudTrailRolePolicy` instead of the existing inline policy. Detach the current inline policy and attach the new managed policy as described in the [documentation](https://docs.aws.amazon.com//controltower/latest/userguide/access-control-managing-permissions.html#AWSControlTowerCloudTrailRolePolicy). 
+  * **Pre-requisite for Landing Zone 4.0:** When upgrading to version 4.0 via API, ensure the `AWSControlTowerCloudTrailRole` service role uses the new managed policy `AWSControlTowerCloudTrailRolePolicy` instead of the existing inline policy. Detach the current inline policy and attach the new managed policy as described in the [documentation](https://docs.aws.amazon.com/controltower/latest/userguide/access-control-managing-permissions.html#AWSControlTowerCloudTrailRolePolicy).