AWS CloudFormation Guard is an open-source command line interface (CLI). It provides you with a simple, domain-specific language to write policy rules and validate their structured hierarchical JSON and YAML data against those rules. The rules can represent company policy guidelines related to security, compliance, and more. The structured hierarchical data can represent cloud infrastructure described as code. For example, you can create rules to ensure that they always model encrypted Amazon Simple Storage Service (Amazon S3) buckets in their CloudFormation templates.
The following topics provide information about how to install Guard using your chosen operating system or as an AWS Lambda function.
Topics
