AWS controltower: Reword baseline update guidance after landing zone version update
Summary
Replaced the version-specific (2.X to 3.X) CloudTrail-related explanation with a more general statement that OUs showing 'Update required' must have their baseline version updated after a landing zone update.
Security assessment
The edit generalizes wording about updating baseline versions; it removes the specific CloudTrail account-to-organization-level context but introduces no new security control or vulnerability fix.
Evidence
+After you update your AWS Control Tower landing zone version, if your OUs show a status of **Update required** in the console, you must update the baseline version on those OUs.
Diff
diff --git a/controltower/latest/userguide/table-of-baselines.md b/controltower/latest/userguide/table-of-baselines.md index c2d8b97ab..8fe9b5d54 100644 --- a//controltower/latest/userguide/table-of-baselines.md +++ b//controltower/latest/userguide/table-of-baselines.md @@ -44 +44 @@ If you update your landing zone to a version that supports a newer `AWSControlTo -If you update your AWS Control Tower landing zone from any version 2.X to any version 3.X, you also must update the baseline version on your OUs, due to the change from account-level to organization-level AWS CloudTrail trails. In the console, your OU will show a status of **Update required**. +After you update your AWS Control Tower landing zone version, if your OUs show a status of **Update required** in the console, you must update the baseline version on those OUs.