5 CloudFormation security tips to take your AWS security to the next level Bridgecrew April 26, 2022July 27, 2022 Learn these 5 AWS CloudFormation security best practices to protect your pipelines, manage compliance, and detect cloud drift. Infrastructure as code
CloudFormation security 101: Four basic best practices for secure infrastructure as code Bridgecrew April 13, 2022July 27, 2022 Learn some basic AWS CloudFormation best practices you can use to build and maintain CloudFormation templates securely. Infrastructure as code
Terraform vs. CloudFormation: Security pros and cons Bridgecrew February 1, 2022 When it comes to developing and deploying secure infrastructure, Terraform and CloudFormation both have unique quirks and considerations. Infrastructure as code
What you need to know about Terraform vs. CloudFormation Bridgecrew January 25, 2022January 25, 2022 Exploring the pros and cons of Terraform and CloudFormation, from syntax and state management to modularity and provisioning. Infrastructure as code
Tutorial: Enforcing security and compliance policies in CloudFormation with Bridgecrew Mike Urbanski October 21, 2020November 6, 2020 Learn how to secure your AWS CloudFormation templates with Bridgecrew's continuous scanning, monitoring, and easy remediation. Cloud security Infrastructure as code
Introducing CfnGoat, a vulnerable-by-design CloudFormation training tool Matt Johnson September 3, 2020February 18, 2022 Bridgecrew introduces a new tool: CfnGoat. Terragoat trains developers to determine and avoid AWS CloudFormation % % misconfigurations and security risks Infrastructure as code Open source projects
Tutorial: Scanning AWS CDK-generated templates at build-time with Bridgecrew Mike Urbanski August 12, 2020July 22, 2021 Learn how to scan for security and compliance violations within your CloudFormation templates generated by AWS CDK at build-time with Bridgecrew. Infrastructure as code
Announcing CloudFormation Support in Checkov Bridgecrew March 10, 2020March 11, 2022 Checkov, our open-source infrastructure-as-code static analysis tool, now supports CloudFormation in addition to Terraform. DevSecOps Infrastructure as code Open source projects