aws-cloudformation / aws-cloudformation/cloudformation-guard
[Enhancement] Allow cloud guard input parameters to be passed into cloud guard tests
- Dominant language
- Rust
- Stars
- 1.4k
- Forks
- 196
- Avg merge
- 3d 6h
- Merged PRs (30d)
- 5
Description
**Is your feature request related to a problem? Please describe.**
Currently it does not seem like Cloudformation Guard has an easy way allow input parameters to Cloudformation Guard rules to be part of cfn-guard tests. The current organization that I work on has a stable yet growing list for for certain tag values and creating a dynamic input variable is important so that we don't have to keep up
**Describe the solution you'd like**
It would be a useful feature to have an option like "--test-input-parameters " to be able to have inputs parameters for cloud guard be something that can be utilized in cloud guard.
**Describe alternatives you've considered**
I have considered dynamically creating the variables in cloud guard during runtime so that the variable points at the input file during a validate but has the whole list during tests. This is doable but not a native solution to the cloud guard tool.
Contributor guide
Research direction
Start by locating the CloudFormation Guard test command and how test inputs and rule variables are currently loaded. Determine how an input-parameter file should be passed through the proposed --test-input-parameters option, then add coverage showing that cloud guard tests can use those values; done means the requested test-time parameters work without runtime-generated variables.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli, security, testing
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100