cfn_nag icon indicating copy to clipboard operation
cfn_nag copied to clipboard

Add support for Fn::Transform within resources

Open pbudzon opened this issue 2 years ago • 1 comments

Using Fn::Transform as part of Resources section of the template, like below:

Resources:
    ResourceOne:
        Type: ...
        Properties: ....

    Fn::Transform:
        Name: AWS::Include
        Parameters:
            Location: somefile.yaml

throws a fatal error:

| FAIL FATAL
|
| Illegal cfn - missing Type: id: Fn::Transform

while being a completely valid and working template.

pbudzon avatar Feb 04 '23 12:02 pbudzon

+1 to this - just came across the same issue...

I appreciate the security consequences of trying to support this would depend on what Transform's being used. IMO even partial support would be helpful? In our case we're using the AWS::Include transform to include a partial template from a separate file.

athewsey avatar Nov 08 '24 03:11 athewsey