cfn-nag
6.1#14 in infrastructure testing toolsFree planFree planLinuxmacOSSelf-hosted
Visitcfn-nag vs Test Kitchen
Test Kitchen
7.2#4 in infrastructure testing toolsFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | cfn-nag | Test Kitchen |
|---|---|---|
| License | The project uses the MIT License, which grants permission to use, copy, modify, merge, publish, distribute, sublicense, and sell the software subject to its terms. | The project is released under the Apache License 2.0. |
| Purpose | cfn-nag scans CloudFormation templates for patterns that may indicate insecure infrastructure. | Test Kitchen is a test harness for executing infrastructure code on one or more platforms in isolation. |
| Support | The project directs users to submit bug reports and feature requests through its GitHub issue tracker. | The documentation directs users to the #test-kitchen channel on Chef Community Slack for assistance from community members. |
cfn-nag plans
- cfn-nagFree
Test Kitchen plans
- Open-source Test KitchenFree
Pick cfn-nag if…
It suits teams checking AWS CloudFormation templates for security-related patterns in local or pipeline workflows. Users who need custom checks can add rules, while those analyzing deployment parameters need to supply them separately.
Pick Test Kitchen if…
Test Kitchen suits infrastructure developers who want to provision isolated environments and verify infrastructure code, including Chef cookbook workflows. Users should be comfortable with its Ruby environment and prerequisite virtualization setup.