A collection of AWS Security controls for AWS CloudFormation. Controls include AWS Config rules for monitoring compliance, IAM policies, and CloudWatch Alarms. Configuration templates are available in AWS CloudFormation, AWS CLI and Terraform

CloudFormation
CloudFormation Nested Stack

This template creates a nested stack using the `AWS::CloudFormation::Stack` resource. It specifies a template URL and parameters for the nested stack.

CloudFormationTerraform
CloudFormation Resource Default Version

This template creates a default version of a resource in CloudFormation. It specifies a new resource version and sets it as the default version. The `ResourceVersion` resource is created with the `TypeName` property set to `My::Sample::Resource` and the `SchemaHandlerPackage` property set to `s3://my-sample-resourceversion-bucket/my-sample-resource.zip`. The `ResourceDefaultVersion` resource is then created with the `TypeVersionArn` property set to the `Ref` value of the `ResourceVersion` resource.

CloudFormationTerraform
Register a CloudFormation Module

This template registers a module version with the CloudFormation service. It specifies the module name and the location of the module package in an S3 bucket.

CloudFormationTerraform
CloudFormation Default Module Version

This template registers two versions of a module and sets the second version as the default version for CloudFormation to use. The `DependsOn` attribute is used to ensure that CloudFormation provisions version one before version two.

CloudFormationTerraform
CloudFormation Hook Version with Schema Handler Package

This template creates a new hook version for the AWS CloudFormation registry and sets it as the default version. It specifies the type name and the schema handler package for the hook version, and uses the `Ref` return value to set the version as the default for the hook.

CloudFormationTerraform
CloudFormation Hook Default Version

This template creates a default version of a hook. The default version of the hook is used in CloudFormation operations for this AWS account and AWS Region.

CloudFormationTerraform
CloudFormation Hook Configuration with TypeName Example

This template creates a new hook configuration with the TypeName property type. The hook configuration specifies the target stacks, failure mode, and properties for the hook.

CloudFormationTerraform
CloudFormation Hook Configuration with TypeArn Example

This template creates a new hook configuration with the TypeArn property type. The hook configuration specifies the target stacks, failure mode, and properties for the hook.

CloudFormationTerraform
CloudFormation StackSet with Active Managed Execution

This template creates a stack set with managed execution activated. With managed execution, StackSets performs non-conflicting operations concurrently and queues conflicting operations.

CloudFormationTerraform
AWS CloudFormation StackSet Administration Role and StackSet Example

This template sets up an IAM role for AWS CloudFormation StackSet administration and defines a CloudFormation StackSet for deploying a VPC across multiple accounts or regions.

Terraform
Manage CloudFormation Type Version

Creates and manages a specific version of a CloudFormation Type, setting up logging and lifecycle policies.

Terraform
CloudFormation Guard
Cloudformation Guard Rules for AWS IAM

CloudFormation guard rules template for IAM resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon EC2

CloudFormation guard rules template for EC2 resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon S3

CloudFormation guard rules template for S3 resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Security Groups

CloudFormation guard rules template for Security Groups

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Lambda

CloudFormation guard rules template for AWS Lambda resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS OpenSearch

CloudFormation guard rules template for AWS OpenSearch resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon VPC

CloudFormation guard rules template for Amazon VPC resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon SageMaker

CloudFormation guard rules template for Amazon SageMaker resources

CloudFormation Guard Rules
Cloudformation Guard Rules for DynamoDB

CloudFormation guard rules template for DynamoDB and DynamoDB Accelerator (DAX) resources

CloudFormation Guard Rules
Cloudformation Guard Rules for ACM (AWS Certificate Manager)

CloudFormation guard rules template for AWS Certificate Manager (ACM) resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Budgets

CloudFormation guard rules template for AWS Budget resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS CloudFront

CloudFormation guard rules template for AWS CloudFront resources

CloudFormation Guard Rules
Cloudformation Guard Rules for CloudWatch Logs

CloudFormation guard rules template for CloudWatch Log groups

CloudFormation Guard Rules
Cloudformation Guard Rules for CodeBuild

CloudFormation guard rules template for CodeBuild resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Config

CloudFormation guard rules template for AWS Config

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Database Migration Service (DMS)

CloudFormation guard rules template for AWS DMS

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS DocumentDB

CloudFormation guard rules template for AWS DocumentDB resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon EFS (Elastic File System)

CloudFormation guard rules template for EFS resources

CloudFormation Guard Rules
Cloudformation Guard Rules for ElastiCache (Redis)

CloudFormation guard rules template for ElastiCache resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS KMS

CloudFormation guard rules template for KMS resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Network Firewall

CloudFormation guard rules template for Network Firewall resources

CloudFormation Guard Rules
Cloudformation Guard Rules for SNS

CloudFormation guard rules template for SNS resources

CloudFormation Guard Rules
Cloudformation Guard Rules for SQS

CloudFormation guard rules template for SQS resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS WAF

CloudFormation guard rules template for WAF resources

CloudFormation Guard Rules
Cloudformation Guard Rules for API Gateway

CloudFormation guard rules template for API Gateway resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Backup

CloudFormation guard rules template for AWS Backup resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS CloudTrail

CloudFormation guard rules template for AWS CloudTrail resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS CloudWatch Alarms

CloudFormation guard rules template for AWS CloudWatch Alarms

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon ECR

CloudFormation guard rules template for Amazon ECR resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon EKS

CloudFormation guard rules template for Amazon EKS resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Load Balancers

CloudFormation guard rules template for AWS Load Balancer resources

CloudFormation Guard Rules
Cloudformation Guard Rules for EMR

CloudFormation guard rules template for EMR resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon FSx

CloudFormation guard rules template for Amazon FSx resources

CloudFormation Guard Rules
Cloudformation Guard Rules for AWS Secrets Manager

CloudFormation guard rules template for AWS Secrets Manager resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon Redshift

CloudFormation guard rules template for Amazon Redshift resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon Route53

CloudFormation guard rules template for Amazon Route53 resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon MSK

CloudFormation guard rules template for Amazon MSK (Managed Apache Kafka) resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Amazon Neptune

CloudFormation guard rules template for Amazon Neptune resources

CloudFormation Guard Rules
Cloudformation Guard Rules for Auto Scaling Groups

CloudFormation guard rules template for Auto Scaling Group resources

CloudFormation Guard Rules