cfn-guard 3.2.0

AWS CloudFormation Guard is an open-source general-purpose policy-as-code evaluation tool. It provides developers with a simple-to-use, yet powerful and expressive domain-specific language (DSL) to define policies and enables developers to validate JSON- or YAML- formatted structured data with those policies.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

Resources:
  newServer:
    Type: AWS::New::Service
    Properties:
      Policy: |
        {
           "Principal": "*",
           "Actions": ["s3*", "ec2*"]
        }
      Arn: arn:aws:newservice:us-west-2:123456789012:Table/extracted
      Encoded: This%20string%20will%20be%20URL%20encoded
      UpdatedAt: "2024-08-15T00:00:00Z"
      CreatedAt: "2023-01-01T12:00:00Z"
    Collection:
      - a
      - b
      - c
    BucketPolicy:
      PolicyText: '{"Version":"2012-10-17","Statement":[{"Sid":"DenyReducedReliabilityStorage","Effect":"Deny","Principal":"*","Action":"s3:*","Resource":"arn:aws:s3:::s3-test-123/*","Condition":{"StringEquals":{"s3:x-amz-storage-class-123":["ONEZONE_IA","REDUCED_REDUNDANCY"]}}}]}'

  s3:
    Type: AWS::S3::Bucket
    Properties:
      PublicAccessBlockConfiguration:
        BlockPublicAcls: true
        BlockPublicPolicy: true
        IgnorePublicAcls: true
        RestrictPublicBuckets: true
      Tags:
        - Key: "Version"
          Value: "2023-07-15T00:00:00Z"
        - Key: "Description"
          Value: "A bucket created for testing date-time handling"

  bucket:
    Type: AWS::S3::Bucket
    Properties:
      PublicAccessBlockConfiguration:
        BlockPublicAcls: false
        BlockPublicPolicy: true
        IgnorePublicAcls: true
        RestrictPublicBuckets: true
      Tags:
        - Key: "CreatedAt"
          Value: "2024-08-15T10:00:00Z"
  bucket2:
    Type: AWS::S3::Bucket
  bucket3:
    Type: AWS::S3::Bucket
  bucket4:
    Type: AWS::S3::Bucket
  asg:
    Type: AWS::AutoScaling::AutoScalingGroup
    Properties:
      MaxSize: "5.0"
      MinSize: "1"
      NewInstancesProtectedFromScaleIn: true
      DefaultInstanceWarmup: 1.5
      HealthCheckGracePeriod: 1
      HealthCheckType: "true"
      UpdatedAt: "4024-08-10T00:00:00Z"