skills.rest
ToanPV90
ToanPV90COMMUNITY
Explore all skills by this author →
GitHub

cloudformation-validator

Validate AWS CloudFormation templates with cfn-lint, checkov, and AWS CLI.

Updated Apr 15, 2026
Search Tags:#cloudformation#checkov#aws security#template validation#cfn-lint#intrinsic functions#cross-stack references
One-click install
npx skills add https://github.com/ToanPV90/dotfiles --skill cloudformation-validator
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloudformation-validator
Source: https://github.com/ToanPV90/dotfiles/tree/main/claude/.claude/skills/cloudformation-validator
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill cloudformation-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents broken or insecure CloudFormation deployments by running layered validation, security scanning, and template integrity checks before you publish or launch anything.

Core Features & Use Cases

  • Multi-stage template validation: Checks YAML/JSON syntax, runs cfn-lint rules, and performs server-side structural validation using AWS CLI when available.
  • Security and compliance scanning: Executes checkov CloudFormation framework scans and surfaces high-impact findings (e.g., public S3 access, unencrypted RDS, wildcard IAM).
  • Semantic correctness review: Reviews intrinsic functions and cross-stack references (Fn::ImportValue and export naming) to catch issues linting can miss.
  • Safety-first reporting: Operates read-only by default, proposing remediations without applying changes unless explicitly requested.

Quick Start

Run the validator against your CloudFormation template file (for example, validate-template 'template.yaml') to produce a stage-by-stage report with prioritized fixes.

Frequently Asked Questions about cloudformation-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate AWS CloudFormation templates before deployment?▼

Validate CloudFormation templates by checking YAML/JSON syntax, running cfn-lint rules, and executing server-side structural validation using AWS CLI to reduce deployment failures before launching.

How do I scan CloudFormation templates for security risks like public S3 access?▼

Scan CloudFormation templates for security risks by executing checkov framework scans to surface high-impact findings, including public S3 access, unencrypted RDS instances, and wildcard IAM policies.

How do I troubleshoot CloudFormation intrinsic functions and cross-stack references?▼

Troubleshoot CloudFormation intrinsic functions and cross-stack references by reviewing Fn::ImportValue and export naming consistency to catch semantic issues that standard linting can miss.

Does CloudFormation validation require cfn-lint and checkov to check template syntax?▼

CloudFormation validation requires cfn-lint for syntax linting and checkov for security scanning, while optionally using AWS CLI for server-side structural validation when available.

What is the best way to lint CloudFormation templates without applying changes?▼

Lint CloudFormation templates safely by operating in read-only mode to generate a severity-based final report that proposes remediations without applying changes unless explicitly requested.

Why does my CloudFormation template fail deployment with cross-stack reference errors?▼

CloudFormation template deployment failures with cross-stack references often stem from mismatched Fn::ImportValue and export naming, which semantic correctness reviews can identify and help remediate.

Related Skills

Explore More Software Engineering Skills→
partme-aipartme-ai
610

cloudformation

Create and manage AWS CloudFormation templates and stacks as infrastructure as code.

Official
Intermediate
Blake-JohnBlake-John

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

Community
Advanced
Yona544Yona544
1

aws-solution-architect

Design scalable AWS architectures with serverless patterns and IaC templates.

Community
Advanced
ToanPV90ToanPV90

terraform-validator

Validate and harden Terraform configurations with formatting, linting, and Checkov security scans.

Community
Advanced