AWS CloudFormation
7.7#2 in infrastructure testing toolsFree planFree planiOSWebAPILinux
VisitAWS CloudFormation vs cfn-nag
What both publish
| Fact | AWS CloudFormation | cfn-nag |
|---|---|---|
| Purpose | CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code. | cfn-nag scans CloudFormation templates for patterns that may indicate insecure infrastructure. |
AWS CloudFormation plans
- AWS CloudFormationFree
- CloudFormation serviceFree
- Third-party resource providersFree
cfn-nag plans
- cfn-nagFree
Pick AWS CloudFormation if…
It suits teams managing AWS infrastructure as code, from individual instances to complex multi-Region applications, and automating infrastructure templates in CI/CD workflows. It can also suit users who need cross-account deployments or previews of proposed stack changes.
Pick cfn-nag if…
It suits teams checking AWS CloudFormation templates for security-related patterns in local or pipeline workflows. Users who need custom checks can add rules, while those analyzing deployment parameters need to supply them separately.