Skip to content

Conversation

bmorrissirromb
Copy link
Collaborator

Issue #, if available:
Closes #356

Description of changes:
This is currently a DRAFT, with a LOT of placeholders for where the code still needs to be developed.

The general idea here is to support CfnGuard rules through the usual RDK mechanisms (eg. CFTs).

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@bmorrissirromb bmorrissirromb marked this pull request as draft August 2, 2024 22:35
@bmorrissirromb
Copy link
Collaborator Author

Next milestones/things to work on:

  • rdk create should create two files, a .guard file with the contents of the rule_code.guard sample, and a parameters.json file.
  • rdk create will need some parameter validation and maybe support for additional parameters (eg. debug logging)
  • rdk deploy and deploy-organization will need a lot of work to take those parameters and pass them to the right CFT. It may make sense to split CfnGuard-related rules into their own helper deployer functions since the required parameters are so different.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Feature Request: Support Cloudformation Guard Custom Rules

1 participant