# cloudformation-guard を Homebrew でインストール cloudformation-guard のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:cloudformation-guard ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install cloudformation-guard ``` 証拠: local Homebrew formula metadata ## パッケージ情報 - **パッケージキー:** brew:cloudformation-guard - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 3.2.0 - **ソース概要:** Checks CloudFormation templates for compliance using a declarative syntax - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **生成日時:** 2026-07-25T07:20:51+00:00 ## 実行可能ファイル - cfn-guard (cli) - cfn-guard (エイリアス) ## ビルド依存関係 - rust ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-07-25 - マネージャ版: 3.2.0 - ローカルデータ: OK - 上流リポジトリ: https://github.com/aws-cloudformation/cloudformation-guard - 検出された最新: 3.2.0 (最新) - 情報: No package-manager update timestamp was available. ## プロジェクトの歴史と使われ方 AWS CloudFormation Guard, exposed as cfn-guard, is a policy-as-code CLI and rule language for validating structured configuration such as CloudFormation templates. AWS documentation and the upstream repository both describe it as a way to write declarative guard rules and validate JSON/YAML data. ### プロジェクトの歴史 AWS created the cloudformation-guard repository in 2020 and published an initial preview release shortly afterward. The project gave CloudFormation users a lightweight validation language that could run locally or in CI before templates reached deployment. Guard's scope widened beyond only CloudFormation templates: the official repository describes validation for JSON- and YAML-formatted data including Kubernetes configurations and Terraform JSON plans, while AWS docs keep CloudFormation as the primary user-facing context. ### 採用の歴史 CloudFormation Guard is adopted by platform, security, and compliance teams that need repeatable checks on infrastructure definitions. It fits naturally into CI because the CLI validates files without requiring cloud-side deployment. The Homebrew package is comparatively specialized, but the tool has a clearer package-manager role than many AWS side tools: install cfn-guard, run a rules file against templates, and fail the build if policy checks do not pass. ### 使われ方 Users write Guard rules, then run cfn-guard validate against templates or other structured data. AWS also documents related commands for testing rules and generating rule files from existing templates. There is no single official user config or credential file location for cfn-guard; rules and data files are supplied explicitly as command inputs. ### パッケージ好きにとっての重要性 cfn-guard is significant as a compact Rust-based policy CLI in the IaC packaging ecosystem. It competes in the same mental space as linters and policy engines, but its syntax and examples are tailored to CloudFormation users. For package maintainers, the interesting bit is that cfn-guard is useful even without AWS credentials: it packages cleanly as an offline validator that can run in local pre-commit hooks, CI containers, and developer laptops. ### タイムライン - 2020: Official cloudformation-guard GitHub repository was created. - 2020: Initial preview release v0.5.0-beta was published. - 2020s: Guard documentation expanded around validation, testing, and rule authoring workflows. - 2020s: The repository described validation beyond CloudFormation templates, including Kubernetes and Terraform JSON inputs. ### Related projects - AWS CloudFormation is the primary template ecosystem Guard was built to validate. - CloudFormation Hooks and AWS Config rules are related governance mechanisms with different execution models. - cfn-lint is adjacent template validation tooling, while CloudFormation CLI supports extension authoring rather than policy checks. ### ソース - - - ## セキュリティノート infrastructure mutation or orchestration signal. - **Geiger リスク:** orange / 中 - infrastructure mutation or orchestration signal ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cloudformation-guard - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 関連リンク - [Cloud CLI packages](https://www.automicvault.com/ja/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/ja/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/ja/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/ja/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [rust](https://www.automicvault.com/ja/pkg/brew/rust/) - Build dependency declared by Homebrew. - [regal](https://www.automicvault.com/ja/pkg/brew/regal/) - Shares av.db curated category or tags: cli, developer-tools, policy-as-code. - [iam-policy-json-to-terraform](https://www.automicvault.com/ja/pkg/brew/iam-policy-json-to-terraform/) - Shares av.db curated category or tags: aws, cli, developer-tools, infrastructure-as-code. - [ask-cli](https://www.automicvault.com/ja/pkg/brew/ask-cli/) - Shares av.db curated category or tags: aws, cli, developer-tools. - [conftest](https://www.automicvault.com/ja/pkg/brew/conftest/) - Shares av.db curated category or tags: cli, developer-tools, policy-as-code. - [docker-credential-helper-ecr](https://www.automicvault.com/ja/pkg/brew/docker-credential-helper-ecr/) - Shares av.db curated category or tags: aws, cli, developer-tools. - [git-remote-codecommit](https://www.automicvault.com/ja/pkg/brew/git-remote-codecommit/) - Shares av.db curated category or tags: aws, cli, developer-tools. - [kafkactl-aws-plugin](https://www.automicvault.com/ja/pkg/brew/kafkactl-aws-plugin/) - Shares av.db curated category or tags: aws, cli, developer-tools. - [localstack](https://www.automicvault.com/ja/pkg/brew/localstack/) - Shares av.db curated category or tags: aws, cli, developer-tools. - [cloudformation-cli](https://www.automicvault.com/ja/pkg/brew/cloudformation-cli/) - Package names and metadata indicate a similar tool family. Shared terms: aws, cfn, cli, cloudformation, code. - [tf-profile](https://www.automicvault.com/ja/pkg/brew/tf-profile/) - Local package facts share a topical domain. Shared terms: cli, code, developer, developer-tools, infrastructure. - [tf-summarize](https://www.automicvault.com/ja/pkg/brew/tf-summarize/) - Local package facts share a topical domain. Shared terms: cli, code, developer, developer-tools, infrastructure. ## Combined YAML source View the package source record on GitHub. [combined/cloudformation-guard.yml](https://github.com/automic-vault/db/blob/main/combined/cloudformation-guard.yml) ## ソース - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph