Skip to content

Latest commit

 

History

History
23 lines (17 loc) · 916 Bytes

README.md

File metadata and controls

23 lines (17 loc) · 916 Bytes

Scanning CloudFormation templates for misconfigurations

This is a demo repository to scan the CloudFormation templates. The scanned results can be viewed via the Nirmata Policy Manager (NPM).

The GitHub Action converts the CDK file into a CloudFormation template using the cdk synth command.

- name: CDK Synth
  run: |
    cd sample-cdk
    cdk synth --json

In the next step, the policies are applied on the generated JSON file. The results are then published to NPM.

- name: NCTL Scan Repository for CDK
  run: |
    nctl scan json -r sample-cdk/cdk.out/MyEcsStack.template.json --policies policies/ --publish

image

![cdk code repo] (https://github.com/nirmata/cdk-code)