cfn-guard 3.2.0

AWS CloudFormation Guard is an open-source general-purpose policy-as-code evaluation tool. It provides developers with a simple-to-use, yet powerful and expressive domain-specific language (DSL) to define policies and enables developers to validate JSON- or YAML- formatted structured data with those policies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

- name: CodeBuild project with safe environment variables, PASS
  input:
    Resources:
      myCluster:
        Type: "AWS::Redshift::Cluster"
        Properties:
          DBName: "mydb"
          KmsKeyId:
            Fn::ImportValue:
              !Sub "${pSecretKmsKey}"
          MasterUsername: "master"
          MasterUserPassword:
            Ref: "MasterUserPassword"
          NodeType: "ds2.xlarge"
          ClusterType: "single-node"
          Tags:
            - Key: foo
              Value: bar
  expectations:
    rules:
      REDSHIFT_ENCRYPTED_CMK: PASS