Schema Guard Rail
Project description
CloudFormation - Resource Schema Guard Rail
Notes
This is not a stable version (Beta), it's still under development
Overview
AWS CloudFormation Resource Schema Guard Rail is an open-source tool, which uses CloudFormation Guard policy-as-code evaluation engine to assess resource schema compliance. It validates json resource schemas against the AWS CloudFormation modeling best practices.
Contribute
See CONTRIBUTING for more information.
Rule Development
Read Guard Rail: Rule Development for more information on how to write resource schema rules.
How to use it?
Schema guard rail package has a built-in library of rules, that CloudFormation believe are the best practices that resource modelers should follow. It supports two types of evaluation - Basic Linting & Breaking Change;
Basic Linter (Stateless)
Linter works only with current version of resource schema and runs CloudFormation authored rules, which will highlight problematic schema constructs. A provider developers can run multiple independent schemas at once as well as attach custom rules.
In order to start using Basic Linting you need to run following command:
$ guard-rail --schema file://path-to-schema-1 --schema file://path-to-schema-2 --rule file://path-to-custom-ruleset1 --rule file://path-to-custom-ruleset2
Breaking Change (Stateful)
Along with basic linting, guard rail supports capability of breaking change evaluation. Provider developer must provider two json objects - previous & current versions of the same resource schema. CloudFormation authored rules will be run and evaluation current version of the schema whether it is compliant or not.
In order to start using Basic Linting you need to run following command:
$ guard-rail --schema file://path-to-schema-1 --schema file://path-to-schema-2 --rule ... --stateful
*Additionally, you can specify format
argument, which will produce a nicely formatted output.
How to install it locally?
Use following commands
Clone github repo
$ git clone git@github.com:aws-cloudformation/resource-schema-guard-rail.git
Create Virtual Environment & Activate
python3 -m venv env
source env/bin/activate
Install Package Locally from the root
pip install -e . -r requirements.txt
pre-commit install
Run CI Locally
# run all hooks on all files, mirrors what the CI runs
pre-commit run --all-files
License
This project is licensed under the Apache-2.0 License.
Community
Join us on Discord! Connect & interact with CloudFormation developers & experts, find channels to discuss and get help for our CLI, cfn-lint, CloudFormation registry, StackSets, Guard and more:
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for resource-schema-guard-rail-0.0.15.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | b2e1da6c68c09c51cbb4f2ecbfa90a63935afa8a93ee91801994af5710dbd8df |
|
MD5 | b12bb81915fb108fe7e347f508daad14 |
|
BLAKE2b-256 | e0451899e08a974464a46db02280c0526dc5fc2efe6f327646c7673cd93f7c7f |
Hashes for resource_schema_guard_rail-0.0.15-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | aeefe5288d5b4e3d6ace24718268560103426f2175bcbb56d0c29aecb824221d |
|
MD5 | f69cd91b162832e26438763077f03a45 |
|
BLAKE2b-256 | 5deb93aea1c88fd0775a2bc0316e0c63627f95e4127f4be6bcf2b474b343502f |