AWS Security ChangesHomeSearch

AWS controltower: Fix broken URL in firewall setup documentation

Service: controltower · 2026-08-19 · Documentation low

File: controltower/latest/userguide/vpc-ct-cidr.md

Summary

Corrected a malformed URL link to the Firewall Manager setup walkthrough.

Security assessment

Change fixes a broken hyperlink but doesn't alter security guidance. The security content about VPC subnet controls remains identical.

Evidence

+In summary, by default, subnet communication within the VPC is unrestricted. The best practice for controlling communication among your VPC subnets, if needed, is to set up access control lists with rules that define the permitted traffic flow. Use security groups for control of traffic among specific instances. For more information about setting up security groups and firewalls in AWS Control Tower, see [Walkthrough: Set Up Security Groups in AWS Control Tower With AWS Firewall Manager](https://docs.aws.amazon.com/controltower/latest/userguide/firewall-setup-walkthrough.html).

Diff

diff --git a/controltower/latest/userguide/vpc-ct-cidr.md b/controltower/latest/userguide/vpc-ct-cidr.md
index 34c69c011..d25177eec 100644
--- a//controltower/latest/userguide/vpc-ct-cidr.md
+++ b//controltower/latest/userguide/vpc-ct-cidr.md
@@ -47 +47 @@ Within each VPC, AWS Control Tower divides your specified CIDR range evenly into
-In summary, by default, subnet communication within the VPC is unrestricted. The best practice for controlling communication among your VPC subnets, if needed, is to set up access control lists with rules that define the permitted traffic flow. Use security groups for control of traffic among specific instances. For more information about setting up security groups and firewalls in AWS Control Tower, see [Walkthrough: Set Up Security Groups in AWS Control Tower With AWS Firewall Manager](https://docs.aws.amazon.com//controltower/latest/userguide/firewall-setup-walkthrough.html).
+In summary, by default, subnet communication within the VPC is unrestricted. The best practice for controlling communication among your VPC subnets, if needed, is to set up access control lists with rules that define the permitted traffic flow. Use security groups for control of traffic among specific instances. For more information about setting up security groups and firewalls in AWS Control Tower, see [Walkthrough: Set Up Security Groups in AWS Control Tower With AWS Firewall Manager](https://docs.aws.amazon.com/controltower/latest/userguide/firewall-setup-walkthrough.html).