IaC Security Back to directory

cfn-nag

Lints CloudFormation templates to detect risky security configurations before deploy.

Tool type

Open Source

Cloud support

AWS

Compliance relevance

CIS · NIST · SOC 2

When to use

Use cfn-nag when your team needs stronger coverage in IaC Security and you want outputs that can map to both operational guardrails and audit evidence.