From the course: AWS Certified Advanced Networking - Specialty (ANS-C01) Cert Prep

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

AWS CloudFormation Guard

AWS CloudFormation Guard - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified Advanced Networking - Specialty (ANS-C01) Cert Prep

Start my 1-month free trial Buy for my team

AWS CloudFormation Guard

“

You're writing CloudFormation templates, but how do you make sure they always meet your organization's security and compliance rules before you deploy? AWS CloudFormation Guard helps you exactly do that. CloudFormation Guard or CFN Guard is an open-source policy as code evaluation tool. tool. You write rules in a simple domain-specific language, DSL, using its CLI, and then you validate structured data, like JSON or YAML, against those policies. Guard also includes a built-in unit testing framework to make sure your rules do what you expect. Importantly, Guard does not check for template syntax errors. For that, you would use CFM Lint instead. Here are some common scenarios where Guard is very useful. First, shift left governance. Validate your CloudFormation template before deployment to ensure they comply with your company policies for security or cost. Second, detective compliance. Validate structured configuration…

Contents