AWS CloudFormation Guard
An open-source policy-as-code tool that validates JSON/YAML data like CloudFormation and Kubernetes configs against custom rules.
What is AWS CloudFormation Guard?
AWS CloudFormation Guard is an open-source policy-as-code tool that allows developers to define custom rules using a domain-specific language (DSL) and validate JSON or YAML data against them. It is commonly used to enforce security, compliance, and best practices on infrastructure-as-code templates like CloudFormation, Kubernetes configurations, and Terraform plans. The tool helps shift governance left by catching policy violations early in the development and deployment lifecycle.
DevOps engineers, cloud architects, and platform teams who manage infrastructure-as-code and need to enforce organizational policies across CloudFormation, Kubernetes, Terraform, or similar configurations.
Developers choose Guard for its purpose-built, expressive DSL that simplifies policy writing without requiring general programming skills, its support for stateful rules and unit testing, and its seamless integration into CI/CD pipelines and pre-commit hooks for automated validation.
Overview
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
