AWS Control Tower guardrail naming and descriptions have been revised to better reflect the guardrail policy intention. The revised names and descriptions will help users more intuitively understand how guardrails enhance control of their accounts. For example, names of detective guardrails were modified from “Disallow” to “Detect” since the detective guardrail itself does not enforce a specific action but detects policy violations and provides alerts through the dashboard. Guardrail behavior, guidance, and implementation remains unchanged.
Source:: Amazon AWS