A specialized linting tool that identifies insecure patterns in AWS CloudFormation templates. It scans for overly permissive IAM policies and unencrypted resources before deployment.
Tech Stack
RubyInfrastructure & Cloud
Why cfn_nag?
• Deep IAM policy analysis
• Easy CI/CD integration
• Extensible via Ruby
Limitations
• CloudFormation only
• Requires Ruby runtime
• High false-positive rate
2/17/2026
Last Update
209
Forks
84
Issues
MIT
License
Financial Leak Detected
Stop the "SaaS Tax"
Your team could be burning cash. Switching to cfn_nag instantly boosts your runway.
