Loading…
cfn_nag is a tool that scans CloudFormation templates for insecure infrastructure patterns like overly permissive IAM rules and missing encryption. It can be run locally, in Docker, or as a GitHub Action to identify security issues early in development.
We haven’t found cfn_nag in the AI answers we’ve checked.