Learning Objectives

In this lesson, you will learn how to prevent infrastructure from being provisioned if there are any noncompliant rules.

You will learn how to use an open source framework called cfn_nag to prevent CloudFormation templates that have security vulnerabilities from being launched. What's more, you'll learn how to run cfn_nag checks as part of a fully automated deployment pipeline.

By the end of this lesson, you will be able to do the following:

• Describe how cfn_nag can prevent security vulnerabilities from entering infrastructure
• Describe how static analysis be used to check for security vulnerabilities in application code
• Run cfn_nag from the command line to check for security vulnerabilities
• Configure cfn_nag to run from CodePipeline