cloudformation-validator

What problem does it solve?

This Skill prevents broken or insecure CloudFormation deployments by running layered validation, security scanning, and template integrity checks before you publish or launch anything.

Core Features & Use Cases

• Multi-stage template validation: Checks YAML/JSON syntax, runs cfn-lint rules, and performs server-side structural validation using AWS CLI when available.
• Security and compliance scanning: Executes checkov CloudFormation framework scans and surfaces high-impact findings (e.g., public S3 access, unencrypted RDS, wildcard IAM).
• Semantic correctness review: Reviews intrinsic functions and cross-stack references (Fn::ImportValue and export naming) to catch issues linting can miss.
• Safety-first reporting: Operates read-only by default, proposing remediations without applying changes unless explicitly requested.

Quick Start

Run the validator against your CloudFormation template file (for example, validate-template 'template.yaml') to produce a stage-by-stage report with prioritized fixes.