AWS CloudFormation Linter

Base64 validation of parametersCFLIN-E1021 Join validation of parametersCFLIN-E1022 Mapping limitCFLIN-I7010 Mapping name limitCFLIN-I7011 Mapping attribute limitCFLIN-I7012 Check values of properties for valid refs and getattsCFLIN-E3008 Resource limit not exceededCFLIN-E3010 Validation not function configurationCFLIN-E1023 Cidr validation of parametersCFLIN-E1024 Cannot reference resources in the conditions block of the templateCFLIN-E1026 Check if a string has between min and max number of values specifiedCFLIN-E3033 Check if a number is between min and maxCFLIN-E3034 Check deletionpolicy values for resourcesCFLIN-E3035 Check updatereplacepolicy values for resourcesCFLIN-E3036 Check if a list has duplicate valuesCFLIN-E3037 Check minimum 90 period is met between backupplan cold and deleteCFLIN-E3504 Metadata interface have appropriate propertiesCFLIN-E4001 Validate the configuration of the metadata sectionCFLIN-E4002 Check that modules resources are validCFLIN-E5001 Outputs have appropriate propertiesCFLIN-E6001 Outputs have required propertiesCFLIN-E6002 Outputs have values of stringsCFLIN-E6003 Outputs have appropriate namesCFLIN-E6004 Output limit not exceededCFLIN-E6010 Output name limit not exceededCFLIN-E6011 Output description limit not exceededCFLIN-E6012 Mappings are appropriately configuredCFLIN-E7001 Mappings have appropriate namesCFLIN-E7002 Mapping keys are strings and alphanumericCFLIN-E7003 Mapping limit not exceededCFLIN-E7010 Mapping name limit not exceededCFLIN-E7011 Conditions have appropriate propertiesCFLIN-E8001 Check if the referenced conditions are definedCFLIN-E8002 Check fn::equals structure for validityCFLIN-E8003 Check fn::not structure for validityCFLIN-E8005 Check fn::or structure for validityCFLIN-E8006 Template size limitCFLIN-I1002 Template description limitCFLIN-I1003 Use sub instead of joinCFLIN-I1022 Parameter limitCFLIN-I2010 Parameter name limitCFLIN-I2011 Parameter value limitCFLIN-I2012 Validate that snapstart is configured for >= java11 runtimesCFLIN-I2530 Resource name limitCFLIN-I3012 Ref/getatt to resource that is available when conditions are appliedCFLIN-W1001 Findinmap keys exist in the mapCFLIN-W1011 Template size limitCFLIN-E1002 Sub validation of parametersCFLIN-W1019 Sub isn't needed if it doesn't have a variable definedCFLIN-W1020 Check if parameters are usedCFLIN-W2001 Resources have appropriate namesCFLIN-E3006 Unique resource and parameter namesCFLIN-E3007 Property is unwanted based on another properties valueCFLIN-E3018 Attributedefinitions / keyschemas mismatchCFLIN-E3039 Outputs descriptions can only be stringsCFLIN-E6005 Mapping attribute limit not exceededCFLIN-E7012 Check fn::and structure for validityCFLIN-E8004 Resource limitCFLIN-I3010 Check stateful resources have a set updatereplacepolicy/deletionpolicyCFLIN-I3011 Arns should use correctly placed pseudo parametersCFLIN-I3042 Check if parameters have a valid value based on an allowed patternCFLIN-W2031 Check if password properties are correctly configuredCFLIN-W2501 Availability zone parameters should not be hardcodedCFLIN-W3010 Check iam permission configurationCFLIN-W3037 Error processing rule on the templateCFLIN-E0002 Getatt validation of parametersCFLIN-E1010 Snapstart supports the configured runtimeCFLIN-E2530 Resource schemaCFLIN-E3000 Basic cloudformation resource checkCFLIN-E3001 Check required properties for lambda if the deployment package is a .zip fileCFLIN-W2533 Template description can only be a stringCFLIN-E1004 Select validation of parametersCFLIN-E1017 Parameters have appropriate namesCFLIN-E2003 Validate route53 recordsetsCFLIN-E3020 Check at least one essential container is specifiedCFLIN-E3042 Output name limitCFLIN-I6011 Check if eol lambda function runtimes are usedCFLIN-W2531 Check if mappings are usedCFLIN-W7001 Check if conditions are usedCFLIN-W8001 Fn::equals will always return true or falseCFLIN-W8003 Check resources with auto expiring content have explicit retention periodCFLIN-I3013 Check if a list that allows duplicates has any duplicatesCFLIN-I3037 Checks for legacy instance type generationsCFLIN-I3100 Output limitCFLIN-I6010 Ref validation of valueCFLIN-E1020 Check properties that need at least one of a list of propertiesCFLIN-E2522 Codepipeline stage actionsCFLIN-E2541 Check dependson values for resourcesCFLIN-E3005 Check resource properties valuesCFLIN-E3012 Cloudfront aliasesCFLIN-E3013 Check if serverless resources have serverless transformCFLIN-E3038 Recordset hostedzonename is a superdomain of nameCFLIN-E3041 Validate parameters for in a nested stackCFLIN-E3043 Check fargate service scheduling strategyCFLIN-E3044 Validate accesscontrol are set with ownershipcontrolsCFLIN-E3045 Check if refing to a iam resource with path setCFLIN-E3050 Basic cloudformation template configurationCFLIN-E1001 Template description limitCFLIN-E1003 Findinmap validation of configurationCFLIN-E1011 Check if refs existCFLIN-E1012 Getaz validation of parametersCFLIN-E1015 Importvalue validation of parametersCFLIN-E1016 Split validation of parametersCFLIN-E1018 Sub validation of parametersCFLIN-E1019 Check dynamic references secure strings are in supported locationsCFLIN-E1027 Check fn::if structure for validityCFLIN-E1028 Sub is required if a variable is used in a stringCFLIN-E1029 Length validation of parametersCFLIN-E1030 Tojsonstring validation of parametersCFLIN-E1031 Validates foreach functionsCFLIN-E1032 Parameters have appropriate propertiesCFLIN-E2001 Parameters have appropriate typeCFLIN-E2002 Parameter limit not exceededCFLIN-E2010 Parameter name limit not exceededCFLIN-E2011 Parameter value limit not exceededCFLIN-E2012 Default value cannot use refsCFLIN-E2014 Default value is within parameter constraintsCFLIN-E2015 Resource elb propertiesCFLIN-E2503 Check ec2 ebs propertiesCFLIN-E2504 Resource ec2 security group ingress propertiesCFLIN-E2506 Check if iam policies are properly configuredCFLIN-E2507 Check properties that are mutually exclusiveCFLIN-E2520 Check properties that are required togetherCFLIN-E2521 Check properties that need only one of a list of propertiesCFLIN-E2523 Output description limitCFLIN-I6012 Check for subscriptionfilters have beyond 2 attachments to a cloudwatch log groupCFLIN-E2529 Check if eol lambda function runtimes are usedCFLIN-E2531 Check state machine definition for proper syntaxCFLIN-E2532 Codepipeline stagesCFLIN-E2540 Resource properties are invalidCFLIN-E3002 Required resource properties are missingCFLIN-E3003 Resource dependencies are not circularCFLIN-E3004 Resource name limit not exceededCFLIN-E3011 Check the configuration of a resources updatepolicyCFLIN-E3016 Property is required based on another properties valueCFLIN-E3017 Check events rule targets are less than or equal to 5CFLIN-E3021 Resource subnetroutetableassociation propertiesCFLIN-E3022 Check if a json object is within size limitsCFLIN-E3502 Rds instance type is compatible with the rds typeCFLIN-E3025 Check elastic cache redis cluster settingsCFLIN-E3026 Validate aws event scheduleexpression formatCFLIN-E3027 Check if properties have a valid valueCFLIN-E3030 Validationdomain is superdomain of domainnameCFLIN-E3503 Check if property values adhere to a specific patternCFLIN-E3031 Check if a list has between min and max number of values specifiedCFLIN-E3032 Check if parameters have a valid valueCFLIN-W2030 Check if imageid parameters have the correct typeCFLIN-W2506 Parameter memory size attributes should have max and minCFLIN-W2510 Check iam resource policies syntaxCFLIN-W2511 Validate that snapstart is properly configuredCFLIN-W2530 Warn when properties are configured to only work with the package commandCFLIN-W3002 Check obsolete dependson configuration for resourcesCFLIN-W3005 Check resources with updatereplacepolicy/deletionpolicy have bothCFLIN-W3011 Controlling access to an s3 bucket should be done with bucket policiesCFLIN-W3045 Metadata interface parameters existCFLIN-W4001 Check for noecho referencesCFLIN-W4002 Check outputs using importvalueCFLIN-W6001

AWS CloudFormation Linter

Static Analysis, SAST, Code Coverage, Code Complexity

Sample Configuration

.deepsource.toml

version = 1

[[analyzers]]
name = "cfn-lint"
type = "community"

Explore the docs for all configuration options.