DSL - but aren't there any default CloudFormation rules (eg. Conformance Packs)

[markl11]

Hi,

I understand that cfn-guard is a DSL, but aren't there any default rules to validate compliance with? For example, example rules that check compliance with AWS Config Conformance Packs or Security Hub standards would be extremely useful as we shift-left....

If there are not default rules then I think most people will just ignore cfn-guard to be honest (the community will just continue to use Checkov, cfn-nag, etc, etc)

Thanks

[Poweranimal]

I can only agree. Asked me the same question...

[razcloud]

Please check out the AWS Guard Rules Registry which was recently open sourced: https://github.com/aws-cloudformation/aws-guard-rules-registry