AWS controltower: Rename 'shared account' to 'service integration accounts' in baselines doc
Summary
Terminology update replacing 'shared account' with 'service integration accounts' throughout the baseline types documentation, including headings and descriptions of when baselines are enabled during landing zone setup.
Security assessment
Purely a wording/terminology change with no security content; no permissions, encryption, or vulnerability information is introduced or altered.
Evidence
+During landing zone setup, AWS Control Tower automatically enables certain baselines on service integration accounts. It enables and updates these baselines based on your landing zone settings and configurations. AWS Control Tower creates and deploys the resources to the target in the way that the baseline specifies.
Diff
diff --git a/controltower/latest/userguide/types-of-baselines.md b/controltower/latest/userguide/types-of-baselines.md index 275dc0b56..b391050d1 100644 --- a//controltower/latest/userguide/types-of-baselines.md +++ b//controltower/latest/userguide/types-of-baselines.md @@ -7 +7 @@ -Baseline types that apply at the OU levelBaseline types that may be applied on shared account during landing zone set upEnabled baselines and member accountsBaselines and versioning defaults +Baseline types that apply at the OU levelBaseline types that apply to service integration accounts during landing zone setupEnabled baselines and member accountsBaselines and versioning defaults @@ -13 +13 @@ A _baseline_ in AWS Control Tower is a group of resources and specific configura -During landing zone setup, some baselines may be enabled on shared account automatically. Certain baselines may be enabled and updated based on your landing zone settings and configurations. AWS Control Tower creates and deploys the resources to the target in the way that the baseline specifies. +During landing zone setup, AWS Control Tower automatically enables certain baselines on service integration accounts. It enables and updates these baselines based on your landing zone settings and configurations. AWS Control Tower creates and deploys the resources to the target in the way that the baseline specifies. @@ -21 +21 @@ AWS Control Tower includes two general types of baselines: - * Baselines that can be enabled on shared account, during landing zone set up. + * Baselines that can be enabled on service integration accounts, during landing zone setup. @@ -85 +85 @@ If your OU has `AWSControlTowerBaseline` enabled, the `ConfigBaseline` status sh -## Baseline types that may be applied on shared account during landing zone set up +## Baseline types that apply to service integration accounts during landing zone setup @@ -87 +87 @@ If your OU has `AWSControlTowerBaseline` enabled, the `ConfigBaseline` status sh -AWS Control Tower enables certain baselines on shared account, as part of the landing zone setup and update process. Baselines for your landing zone may change as you change your landing zone settings. For example, if you opt in for IAM Identity Center, AWS Control Tower can enable the latest version of the `IdentityCenterBaseline` baseline on your landing zone. +AWS Control Tower enables certain baselines on service integration accounts, as part of the landing zone setup and update process. Baselines for your landing zone may change as you change your landing zone settings. For example, if you opt in for IAM Identity Center, AWS Control Tower can enable the latest version of the `IdentityCenterBaseline` baseline on your landing zone.