AWS CloudFormation - IaC Supported Resources

InsightCloudSec IaC Security for AWS Resources

IaC Security supports AWS CloudFormation, which only supports AWS resources. Review the list below for specifications.

Amazon Web Services (AWS) Supported Resources

Amazon Cognito
Amazon EMR
AWS Backup (Vault)
AWS Certificate Manager (ACM) 
API Gateway
CloudFront (Distributions, SSM Parameter)
CloudTrail
Database Migration Service (Replication Instance)
DynamoDB
EBS Volume
EC2 Instance
EFS/FSx
EKS/ECS/Fargate Cluster
Elastic IP
Elastic Network Interface (ENI)
ElastiCache (including replication groups)
Elasticsearch
Flow Log (VPC)
IAM Group
IAM Policy (Customer Managed)
IAM Role
IAM User
Internet Gateway
Kinesis
KMS
Lambda
Load Balancer (ELB/ALB/NLB/Gateway)
MQ
MSK Instance
NACL/Security Group
NACL/Security Group Rules
NAT Gateway (VPC)
RDS Aurora, Neptune, DocumentDB
RDS Database, Neptune, DocumentDB
Redshift
Route53 DNS Zone
S3 Bucket
Sagemaker Notebook
SFTP Server
Simple Queue Service (SQS)
SNS Subscription
SNS Topic
VPC
VPC Peer
VPC Subnet

📘

CFT Intrinsic Function Support

The following intrinsic functions are supported in AWS CloudFormation Templates (CFT):

  • Ref
  • Fn::GetAtt
  • Fn::FindInMap
  • Fn::Join
  • Fn::Split
  • Fn::Base64
  • Fn::GetAZs
  • Fn::Select
  • Fn::Equals
  • Fn::If
  • Fn::And
  • Fn::Not
  • Fn::Or
  • Fn::Cidr
  • Fn::Sub
  • Fn::Condition

The following intrinsic functions are not supported:

  • Fn::Transform
  • Fn::ImportValue