cfn_nag | Linting tool for CloudFormation templates | AWS library

by stelligent Ruby Version: v0.8.10 License: MIT

X-Ray Key Features Code Snippets Community Discussions(4)Vulnerabilities Install Support

kandi X-RAY | cfn_nag Summary

cfn_nag is a Ruby library typically used in Cloud, AWS applications. cfn_nag has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for:.

Support

Quality

Security

License

Reuse

Support

cfn_nag has a medium active ecosystem.

It has 1157 star(s) with 201 fork(s). There are 34 watchers for this library.

It had no major release in the last 12 months.

There are 61 open issues and 295 have been closed. On average issues are closed in 94 days. There are 8 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of cfn_nag is v0.8.10

Quality

cfn_nag has 0 bugs and 0 code smells.

Security

cfn_nag has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

cfn_nag code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

cfn_nag is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

cfn_nag releases are available to install and integrate.

Installation instructions, examples and code snippets are available.

It has 18324 lines of code, 1093 functions and 515 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of cfn_nag

Get all kandi verified functions for this library.

cfn_nag Key Features

No Key Features are available at this moment for cfn_nag.

cfn_nag Examples and Code Snippets

No Code Snippets are available at this moment for cfn_nag.

Community Discussions

Trending Discussions on cfn_nag

AWS cloudformation: How to run cfn-nag locally in Windows

terraform/aws lambda function access denied on s3

Terraform-Cloudformation- aws instance provider: Provided Arn is not in correct format

Cannot execute GO binary file in Docker Containers having Linux Runner

QUESTION

AWS cloudformation: How to run cfn-nag locally in Windows

Asked 2021-Jul-15 at 10:53

I have a cloud formation template where I have all the resources and details for the project.

I have the cfn-lint setup locally and it is running perfectly fine. However when I push the code changes, build fails at deployment stage due to cfn-nag stating some simple changes which could be fixed.

I'm using windows machine and I need a way to run this cfn-nag locally so that I could check this just like cfn-lint and fix them locally instead of waiting 40 minutes for build till it reaches deployment stage.

I referred several posts online, found below two helpful

https://stelligent.com/2018/03/23/validating-aws-cloudformation-templates-with-cfn_nag-and-mu/ https://github.com/stelligent/cfn_nag

What is the difference between cfn-nag and cfn-lint and why lint is not failing on what cfn-nag is complaining about?

The above links have some instructions on Ruby and Brew but I'm using Nodejs, felt lost. Please help.

...

ANSWER

Answered 2021-Jul-15 at 10:53

CFN-Nag looks for patterns in AWS CloudFormation templates that may indicate insecure infrastructure,

Ex:

IAM rules that are too permissive (wildcards), Security group rules that are too permissive (wildcards), Access logs that aren’t enabled, Encryption that isn’t enabled,

CFN-Lint scans the AWS CloudFormation template by processing a collection of Rules, where every rule handles a specific function check or validation of the template. It validates against AWS CloudFormation Resource specification.

This collection of rules can be extended with custom rules using the --append-rules argument.

Ex: Whitespaces, alignment(YAML), type checks, valid values for resource properties, and other best practices.

Those two links you previded above have all the information needed, just not directly for a Nodejs developer using a Windows machine.

Step1: Pull the docket image stelligent/cfn-nag

Step2: Add the script to your package.json for cfn-nag

Ex:

Source https://stackoverflow.com/questions/68327451

QUESTION

terraform/aws lambda function access denied on s3

Asked 2021-Feb-16 at 21:31

Testing AWS instance scheduler with terraform. Code here

Looks like my code is bumming with this error:

Error: error waiting for CloudFormation Stack creation: failed to create CloudFormation stack, rollback requested (ROLLBACK_COMPLETE): ["The following resource(s) failed to create: [Main]. Rollback requested by user." "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for solutions-us-gov-west-1/aws-instance-scheduler/v1.3.1/instance-scheduler.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: AWSLambdaInternal; Status Code: 403; Error Code: AccessDeniedException; Request ID: 731b7c0d-cda9-4f9e-b821-efed4cbced46; Proxy: null)"]

Below is part of the code: IAM policy

...

ANSWER

Answered 2021-Feb-16 at 21:10

You have an issue with your joins in your SchedulerPolicy. You need to remove the trailing *:*:*.

Source https://stackoverflow.com/questions/66232010

QUESTION

Terraform-Cloudformation- aws instance provider: Provided Arn is not in correct format

Asked 2021-Feb-15 at 18:25

I am creating a cloudformation stack to generate aws instance scheduler in aws gov cloud via TF. The goal is to start/stop ec2 based on tags. Many way to achieve it but I have to use terraform and cloudformation. Here is the repo --> https://github.com/Vinod1908/TestTerraform/blob/master/instanceScheduler.tf
Below is the part of the code where I think I am blocked:

...

ANSWER

Answered 2021-Feb-12 at 20:18

The reason why it is failing is because you are forming the wrong ARN in your Terraform Code.

In your repo, link

Replace these following lines with respect to Lambda: 1047, 1358, 1420 as "arn:aws-us-gov:lambda" instead of "arn:aws:lambda".

As per the documentation of aws: The ARN should be in this format arn:aws-us-gov:lambda:account-id:function:function-name.

The answer to your question is to update the above-mentioned line. But I am sure you will get errors with respect to other resources as all resources which you are creating are in the Us-Region. So please update all the necessary Joining Function Arn lines which your forming in your code. :)

Source https://stackoverflow.com/questions/66177516

QUESTION

Cannot execute GO binary file in Docker Containers having Linux Runner

Asked 2020-May-25 at 02:57

Go and binaries were part of our docker image.

I tried all possible combinations to build Go binary

...

ANSWER

Answered 2020-May-25 at 02:57

golang:1.14 is not alpine base but debian base. So of course you cannot run the debian build binary in alpine image.

Try replace

FROM golang:${GOLANG_VERSION} as build-helpers

with

FROM golang:${GOLANG_VERSION}-alpine as build-helpers

and add following lines to download necessary lib for building binary

Source https://stackoverflow.com/questions/61970867

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install cfn_nag

Presuming Ruby >= 2.5.x is installed, installation is just a matter of:.
On MacOS or Linux you can alternatively install with brew:.
To install the current git branch locally:.