[アップデート] AWS Control CatalogでControl Towerの各コントールの内容を参照できる様になりました

# AWS CLI Ver.2.17.22 で動作確認
$ aws --version 
aws-cli/2.17.22 Python/3.11.9 Linux/6.1.97-104.177.amzn2023.x86_64 exec-env/CloudShell exe/x86_64.amzn.2023

# コントロールの一覧を取得
$ aws controlcatalog list-controls 
{
    "Controls": [
        {
            "Arn": "arn:aws:controlcatalog:::control/4b0nsxnd47747up54ytdqesxi",
            "Name": "Require any AWS CodeBuild project environment to have logging configured",
            "Description": "This control checks whether AWS CodeBuild projects environment has at least one logging option enabled."
        },
        {
            "Arn": "arn:aws:controlcatalog:::control/7rrde1yjxvdp8hyfina89c07z",
            "Name": "ECS containers should run as non-privileged",
            "Description": "This control checks if the privileged parameter in the container definition of Amazon ECS task definitions is set to 'true'. This control fails if this parameter is equal to 'true'."
        },
        {
            "Arn": "arn:aws:controlcatalog:::control/8cclsjiy1o81kfsmzpt85nbjk",
            "Name": "Disallow changes to Amazon CloudWatch Logs log groups set up by AWS Control Tower",
            "Description": "Prevent deletion and modification of retention policy for Amazon CloudWatch Logs log groups set up by AWS Control Tower."
        },
        #
        # ・・・中略・・・
        #
        {
            "Arn": "arn:aws:controlcatalog:::control/1z2biltzuotpq1tha9ruwwh2g",
            "Name": "Unused Network Access Control Lists should be removed",
            "Description": "This control checks to see if there are any NACLs (Network Access Control List) that are unused. The control will check the item configuration of the resource AWS::EC2::NetworkAcl and determine the relationships of the NACL."
        },
        {
            "Arn": "arn:aws:controlcatalog:::control/9q95fgqyj5tqodrep7z08fn3",
            "Name": "ECS services should not have public IP addresses assigned to them automatically",
            "Description": "This control checks whether ECS services are configured to automatically assign public IP addresses. This control fails if AssignPublicIP is ENABLED."
        }
    ]
}

# 特定コントロールの情報を取得
$ aws controlcatalog get-control --control-arn arn:aws:controlcatalog:::control/4b0nsxnd47747up54ytdqesxi
{
    "Arn": "arn:aws:controlcatalog:::control/4b0nsxnd47747up54ytdqesxi",
    "Name": "Require any AWS CodeBuild project environment to have logging configured",
    "Description": "This control checks whether AWS CodeBuild projects environment has at least one logging option enabled.",
    "Behavior": "PROACTIVE",
    "RegionConfiguration": {
        "Scope": "REGIONAL",
        "DeployableRegions": [
            "af-south-1",
            "ap-east-1",
            "ap-northeast-1",
            "ap-northeast-2",
            "ap-northeast-3",
            "ap-south-1",
            "ap-south-2",
            "ap-southeast-1",
            "ap-southeast-2",
            "ap-southeast-3",
            "ap-southeast-4",
            "ca-central-1",
            "ca-west-1",
            "eu-central-1",
            "eu-central-2",
            "eu-north-1",
            "eu-south-1",
            "eu-south-2",
            "eu-west-1",
            "eu-west-2",
            "eu-west-3",
            "il-central-1",
            "me-central-1",
            "me-south-1",
            "sa-east-1",
            "us-east-1",
            "us-east-2",
            "us-west-1",
            "us-west-2"
        ]
    }
}