cloudformation-guard

{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "rust"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Checks CloudFormation templates for compliance using a declarative syntax",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:36:28+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "cloudformation-guard",
  "github_default_branch": "main",
  "github_last_commit_at": "2026-06-15T18:42:56Z",
  "github_readme_excerpt": "# AWS CloudFormation Guard\n\n**Validate Cloud Environments with Policy-as-Code**\n\nAWS CloudFormation Guard is an open-source general-purpose policy-as-code evaluation tool. It provides developers with a simple-to-use, yet powerful and expressive domain-specific language (DSL) to define policies and enables developers to validate JSON- or YAML- formatted structured data with those policies.\n\nThe Guard 3.0 release introduces support for stateful rules through built-in functions, SAM CLI as an alternative deployment method for `cfn-guard-lambda`, command auto-completions for shell, advanced regular expressions, improved handling of intrinsic functions for the test command, as well as the `--structured` flag to the validate command to emit JSON/YAML parseable output. Note that previously written tests may have to be reviewed due to the corrected behavior of intrinsic function handling. Please see the release notes for full details and examples.\n\nGuard can be used for the following domains:\n\n1. **Preventative Governance and Compliance (shift left):** validate Infrastructure-as-code (IaC) or infrastructure/service compositions such as CloudFormation Templates, CloudFormation ChangeSets, Terraform JSON configuration files, Kubernetes configurations, and more against Guard policies representing your organizational best practices for security, compliance, and more. For example, developers can use Guard policies with\n   1. Terraform plan (**in JSON format**) for deployment safety assessment checks or Terraform state files to detect live state deviations.\n   2. Static assessment of IaC templates to determine network reachability like Amazon Redshift cluster deployed inside a VPC and prevent the provision of such stacks.\n2. **Detective Governance and Compliance:** validate conformity of Configuration Management Database (CMDB) resources such as AWS Config-based configuration items (CIs). For example, developers can use Guard policies against AWS Config CIs to continuously monito",
  "github_repo": "aws-cloudformation/cloudformation-guard",
  "github_stars": 1384,
  "github_topics": [
    "cfn-guard",
    "cloudformation",
    "compliance",
    "governance",
    "k8s",
    "policy-as-code",
    "policy-rule-evaluation",
    "security",
    "terraform"
  ],
  "homepage": "https://github.com/aws-cloudformation/cloudformation-guard",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 41,
  "installs_365d": 476,
  "installs_90d": 125,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "Apache-2.0",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "cloudformation-guard",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 5095,
  "rank_365d": 5230,
  "rank_90d": 5109,
  "raw_hash": "8c7996db42c8e28a",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/c/cloudformation-guard.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": null,
  "version_stable": "3.2.0",
  "versioned_formulae": [],
  "why_use_this": null
}