https://github.com/snyk/snyk-iac-cloudformation

Snyk Infrastructure as Code Cloudformation demo
https://github.com/snyk/snyk-iac-cloudformation

demo infrastructure-as-code

Last synced: 1 day ago
JSON representation

Snyk Infrastructure as Code Cloudformation demo

• Host: GitHub
• URL: https://github.com/snyk/snyk-iac-cloudformation
• Owner: snyk
• License: other
• Created: 2021-05-27T15:19:27.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2024-06-05T10:46:50.000Z (7 months ago)
• Last Synced: 2024-11-10T19:53:05.413Z (about 2 months ago)
• Topics: demo, infrastructure-as-code
• Homepage:
• Size: 45.9 KB
• Stars: 5
• Watchers: 3
• Forks: 64
• Open Issues: 0
• Metadata Files:
  • Readme: readme.md
  • License: LICENSE
  • Codeowners: .github/CODEOWNERS

Awesome Lists containing this project

README

        
# Snyk Infrastructure as Code - CloudFormation

The Snyk Infrastructure as Code product can scan CloudFormation templates for configuration issues.

[CloudFormation](https://aws.amazon.com/cloudformation/) files can be a mix of YAML or JSON formats.

## Demo

This repository contains a mix of valid configuration files, which contain a range of configuration issues.

You can see the results by running

`snyk iac test .`

A snippet of the output looks as follows

```bash

-------------------------------------------------------

Testing vpc.json...

Infrastructure as code issues:

  ✗ Security Group allows open ingress [Medium Severity] [SNYK-CC-TF-1] in VPC

    introduced by Resources > ELBSecurityGroup > Properties > SecurityGroupIngress[0]

Organization:      ben.laplanche.test

Type:              CloudFormation

Target file:       /Users/benlaplanche/workspace/snyk-iac-cloudformation/vpc.json

Project name:      snyk-iac-cloudformation

Open source:       no

Project path:      .

Tested vpc.json for known issues, found 1 issues

Tested 11 projects, 9 contained issues.

```