George Rolston

Thank you @mattvanstone With any all-caps AWS Guard Rule we have done our best of effort to doing a one-to-one mapping for the AWS Config managed rules when they could...

Regarding the exclusion if the db cluster identifier is present, would it break anything if we had both the values present? What I am asking is: would the explicit setting...

Given the issue with specifying it, we should do that check to be clear and not force someone to try to meet compliance when it is actually breaking something. We...

@mattvanstone The CDK generation of CloudFormation is something I can take a look into. Looking at this we hope to definitely support CDK and if that is not producing it,...

Initially the conformance pack sample templates were used to create the first set of mapping files. This additional mapping could be pulled out from the documentation and mapped, though not...

Let me pull down and run some tests locally to see if we can identify the syntax error.

@benbridts there is a PR request in now that fixes the checks for failed rules.

Thank you for submitting this issue. We are reviewing on our side with the tests you provided.

@fabiodouek looking at this we can require that it has the Action, Resource * and Principal * in the statement to tighten down. Have you tested anything similar that meets...

I ran into the exact same issue: "Unfortunately it seems to be a challenge in Guard to do a dict exact match in a simple way" My first pass through...