Stelligent/cfn_nag
A linting tool that scans AWS CloudFormation templates for insecure infrastructure patterns and security violations.
What is Stelligent/cfn_nag?
cfn_nag is a security-focused linting tool for AWS CloudFormation templates. It scans Infrastructure-as-Code for patterns that indicate insecure infrastructure, such as overly permissive IAM rules, open security groups, disabled encryption, and password literals. The tool helps developers identify and fix security misconfigurations before deploying cloud resources.
Cloud engineers, DevOps teams, and security professionals who author or review AWS CloudFormation templates and want to enforce security best practices in their infrastructure code.
Developers choose cfn_nag for its comprehensive security rule set, seamless integration into CI/CD pipelines, and flexibility to customize rule enforcement. Its ability to evaluate template parameters and conditions provides more accurate scanning than basic static analysis.
Overview
Linting tool for CloudFormation templates
Use Cases
Best For
- Scanning CloudFormation templates for security misconfigurations before deployment
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
