{"adoption": {"forks": 196, "observed_at": "2026-08-28T04:04:34.819487+00:00", "stars": 1385}, "canonical_url": "https://ross.abutalabs.com/products/cloudformation-guard", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0", "domain": ["security", "cloud-computing", "infrastructure-as-code", "legal"], "enriched": true, "function": ["security", "testing", "configuration-management", "cli", "parser"], "health_score": 100, "homepage": null, "language": "Rust", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["aws-cloudformation/cloudformation-guard"], "name": "aws-cloudformation/cloudformation-guard", "platform": ["windows", "cli", "rust"], "pushed_at": "2026-08-26T15:44:17+00:00", "repo": "aws-cloudformation/cloudformation-guard", "stars": 1385, "tags": ["policy-as-code", "cloudformation", "terraform", "kubernetes", "governance", "compliance", "iac-validation", "shift-left", "devops", "linux", "macos"], "topics": ["policy-as-code", "cloudformation", "terraform", "k8s", "policy-rule-evaluation", "governance", "security", "compliance", "cfn-guard"], "urls": [], "use_cases": ["validate cloudformation templates against security and compliance policies", "check terraform plan  for deployment safety before applying", "enforce organizational rules on kubernetes configurations", "detect live state deviations in terraform state files", "validate cloudformation changesets in ci/cd pipelines to prevent unsafe replacements", "continuously monitor aws config configuration items for policy violations", "shift-left governance checks for infrastructure-as-code"], "what_it_is": "AWS CloudFormation Guard (cfn-guard) is a general-purpose policy-as-code evaluation tool with an expressive DSL for defining rules. It validates JSON- and YAML-formatted structured data such as CloudFormation templates, Terraform JSON plans, and Kubernetes configurations against those policies.", "when_to_avoid": ["you need policy evaluation for formats other than JSON/YAML structured data", "you rely on Guard 1.0 rules without migrating, since 2.0+ is backward incompatible", "you need runtime runtime enforcement of deployed resources rather than static/config validation"], "when_to_choose": ["you need a declarative DSL to write policy rules for JSON/YAML structured data", "you want to enforce security, compliance, or governance checks on IaC before deployment", "you need to gate CloudFormation, Terraform, or Kubernetes changes in CI/CD pipelines", "you want a Rust-based CLI with lambda deployment options for policy evaluation"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/cloudformation-guard", "repo": "aws-cloudformation/cloudformation-guard", "role": "main", "score": 88}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:34.819487+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:39:56.461762+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "00128bddc8abe85a76b01fe458fcd257f4bea403ffae8949a0561889e6dca34d", "fetched_at": "2026-08-28T04:04:34.819487+00:00", "kind": "readme", "missing": false, "url": "https://github.com/aws-cloudformation/cloudformation-guard"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 67}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2273, "days_push": 7, "days_rel": 8, "gap_med": 318.5, "n_releases_24m": 3}, "score": 88, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}