Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
tfsec is a static analysis tool and security scanner for infrastructure as code, specifically designed to detect misconfigurations and compliance violations in Terraform and cloud infrastructure definitions before deployment. It functions as a cloud security policy engine that identifies vulnerabilities across multiple cloud platforms. The tool provides capabilities for cloud compliance auditing and scanning of Cloud Development Kit code. It supports custom security policy enforcement and allows for the definition of organization-specific security requirements. The scanner includes features
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Principalele funcționalități ale aws-cloudformation/cloudformation-guard sunt: Infrastructure and Configuration, Infrastructure as Code, Policy as Code, Cloud Security, Infrastructure Security.
Alternativele open-source pentru aws-cloudformation/cloudformation-guard includ: cesar-rodriguez/terrascan — Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud… tfsec/tfsec — tfsec is a static analysis tool and security scanner for infrastructure as code, specifically designed to detect… awslabs/cfn-python-lint — CloudFormation Linter. wata727/tflint — A Pluggable Terraform Linter. datreeio/datree — Datree is a policy enforcement framework for Kubernetes that validates configurations against rules written in Rego,… cerbos/cerbos — Cerbos is an open-source authorization service that provides a centralized, language-agnostic engine for managing…
