aws-cloudformation / aws-cloudformation/cloudformation-guard

[Enhancement] Allow cloud guard input parameters to be passed into cloud guard tests

Open
#657 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
1.4k
Forks
196
Avg merge
3d 6h
Merged PRs (30d)
5

Description

**Is your feature request related to a problem? Please describe.**

Currently it does not seem like Cloudformation Guard has an easy way allow input parameters to Cloudformation Guard rules to be part of cfn-guard tests. The current organization that I work on has a stable yet growing list for for certain tag values and creating a dynamic input variable is important so that we don't have to keep up

**Describe the solution you'd like**
It would be a useful feature to have an option like "--test-input-parameters " to be able to have inputs parameters for cloud guard be something that can be utilized in cloud guard.

**Describe alternatives you've considered**
I have considered dynamically creating the variables in cloud guard during runtime so that the variable points at the input file during a validate but has the whole list during tests. This is doable but not a native solution to the cloud guard tool.

Contributor guide

Open the contributing guide

Research direction

Start by locating the CloudFormation Guard test command and how test inputs and rule variables are currently loaded. Determine how an input-parameter file should be passed through the proposed --test-input-parameters option, then add coverage showing that cloud guard tests can use those values; done means the requested test-time parameters work without runtime-generated variables.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
cli, security, testing
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.