AWS CloudFormation Guard is now General Avaliable

AWS announced the General Availability of CloudFormation Guard, an open-source CLI tool for CloudFormation templates. 

The CloudFormation Guard helps in enforcing compliance policies against CloudFormation templates.

With the help of a simple, policy-as-code, declarative syntax, the tool validates AWS CloudFormation templates for policy compliance. CloudFormation Guard (Cfn-guard) also comes up with cfn-guard-rulegen CLI which helps in autogenerating rules from existing CloudFormation templates.

The importance of tools can be realized from the fact that many enterprises are deploying their workloads at AWS and leveraging different AWS services. A wrong configuration can lead to security loopholes. The CloudFormation Guard created rules that can be used as a standard compliant environment. These rules can serve as a single point of truth for AWS configuration.

  

The generally available release also brings capabilities to create advanced rules, including rules-based on conditions, rules comparing resource properties to numbers, comments on rule sets, notes the announcement. 

The GA release makes the installation experience is also simplified with the help of Homebrew on macOS and Chocolatey on Windows platforms.

The tool can also be easily integrated into CI/CD pipelines. The integration with CI/CD pipelines ensures that only standard and compliant configurations are deployed at AWS. CloudFormation Guard (cfn-guard) is available at cfn-guard GitHub repository.