Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DRAFT: Add support for CfnGuard rules #521

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

bmorrissirromb
Copy link
Collaborator

Issue #, if available:
Closes #356

Description of changes:
This is currently a DRAFT, with a LOT of placeholders for where the code still needs to be developed.

The general idea here is to support CfnGuard rules through the usual RDK mechanisms (eg. CFTs).

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@bmorrissirromb bmorrissirromb marked this pull request as draft August 2, 2024 22:35
@bmorrissirromb
Copy link
Collaborator Author

Next milestones/things to work on:

  • rdk create should create two files, a .guard file with the contents of the rule_code.guard sample, and a parameters.json file.
  • rdk create will need some parameter validation and maybe support for additional parameters (eg. debug logging)
  • rdk deploy and deploy-organization will need a lot of work to take those parameters and pass them to the right CFT. It may make sense to split CfnGuard-related rules into their own helper deployer functions since the required parameters are so different.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Feature Request: Support Cloudformation Guard Custom Rules
1 participant