PV4 ⊧ CloudFORMALchecks common security best-practices and user-specified queries of a cloud configuration

Application domain/field

• Infrastructure as Code (IaC)
• Security analysis
• Configuration files
• Cloud infrastructure

Type of tool

Security analyser?

Expected input

cfn (CloudFormation) configuration file

Format:

.json file

Expected output

.owl file that can be opened, navigated and queried in Protégé. The models are automatically checked against common security best-practices. For each of these properties it will determine whether it is TRUE, FALSE or UNKNOWN. These results are outputted in a .csv file.

Internals

Encodes AWS CloudFormation templates into Description Logic models.