cfn-nag

Linting tool for CloudFormation templates

Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov

In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test templates, and dive deeper in tools that help you enforce compliance and network analysis, together with your development pipeline, for a full DevSecOps CI/CD.

A sample pipeline that allows you to manage your infrastructure via cdk while using the aws multi-account strategy.

A repository with training material for a Secure Supply Chain Course

report2junit is a tool that converts various reports into the JUnit format.

Gradle plugin to provide full CI/CD workflow for a CloudFormation project. This includes static analysis of the CloudFormation templates themselves as well as automation to deploy a stack from a template

Run Ansible and Cloudformation templates/tools locally with Docker.