cfn_nag
cfn_nag copied to clipboard
Add support for Fn::Transform within resources
Using Fn::Transform as part of Resources section of the template, like below:
Resources:
ResourceOne:
Type: ...
Properties: ....
Fn::Transform:
Name: AWS::Include
Parameters:
Location: somefile.yaml
throws a fatal error:
| FAIL FATAL
|
| Illegal cfn - missing Type: id: Fn::Transform
while being a completely valid and working template.
+1 to this - just came across the same issue...
I appreciate the security consequences of trying to support this would depend on what Transform's being used. IMO even partial support would be helpful? In our case we're using the AWS::Include transform to include a partial template from a separate file.