Automic VaultAutomic Vault

brew

Install cloudformation-cli with Homebrew

CloudFormation Provider Development Toolkit. Version 0.2.39 via Homebrew; verified 2026-05-20.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cloudformation-cli

local Homebrew formula metadata

overview

Package summary

CloudFormation Provider Development Toolkit

Commands and aliases

  • cfn
  • cfn-cli

history

Project history and usage

AWS CloudFormation CLI is the provider development toolkit for authoring, testing, and registering CloudFormation resource providers and modules. It matters less as an everyday deploy CLI and more as the toolchain behind CloudFormation Registry extension development.

Project history

AWS created the cloudformation-cli repository in 2018 and released early public versions in 2019 as CloudFormation's extension model became public. The official AWS docs position the CLI as the tool used to model, develop, test, and submit resource providers for CloudFormation.

The project sits in the aws-cloudformation GitHub organization alongside language plugins and related extension tooling, reflecting a design where the core CLI coordinates schemas, handlers, contract tests, and registry publication.

Adoption history

Unlike general-purpose AWS CLIs, CloudFormation CLI is adopted mostly by provider authors, platform teams, and vendors that need first-class CloudFormation resource types. Homebrew packaging gives macOS users a simple install path, but the package is inherently narrower than awscli or cdk.

Its adoption is tied to the CloudFormation Registry ecosystem: as organizations add private or third-party resource types, the cfn/cfn-cli package becomes part of build pipelines for extension development and contract testing.

How it is used

Developers use cfn init, generate, test, submit, and related commands to create a provider project, run contract tests, and register or update a resource type or module in CloudFormation.

typeConfiguration.json under ~/.cfn-cli is used by the toolkit for type configuration during contract testing and development workflows. AWS credentials normally come from the broader AWS SDK/CLI credential chain rather than a CloudFormation CLI-specific credential file.

Why package nerds care

cloudformation-cli is package-nerd significant because it exposes AWS's extension-development workflow as a Python CLI in Homebrew. It is not a high-volume shell utility, but it is the canonical local tool for a specialized infrastructure-as-code authoring loop.

The formula also illustrates a common cloud-tooling packaging pattern: a narrow vendor CLI with a small user base but high importance for the teams that need reproducible IaC extension builds.

Timeline

  • 2018: Official cloudformation-cli GitHub repository was created.
  • 2019: Early public v0.1.x releases were published as CloudFormation extension tooling emerged.
  • 2019: AWS documented the CloudFormation CLI and Registry workflow for provider development.
  • 2020s: The CLI continued as the toolkit behind CloudFormation resource provider and module development.

Related projects

  • AWS CloudFormation Registry is the service surface where generated providers and modules are registered.
  • Language plugins such as cloudformation-cli-python-plugin and other aws-cloudformation tooling extend the provider-development workflow.
  • AWS CDK, SAM, cfn-lint, and CloudFormation Guard are adjacent IaC tools, but they solve different authoring, deployment, validation, or policy problems.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:cloud

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 4 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.cfn-cli/typeConfiguration.json

executables

Installed executables

CommandKindExposureNote
cfncliglobal executable
cfn-clicliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.2.39
manager updated2026-05-20
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/aws-cloudformation/cloudformation-cli

install metadata

Package metadata

Package keybrew:cloudformation-cli
Version0.2.39
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cloudformation-cli
Homepagehttps://github.com/aws-cloudformation/cloudformation-cli/
Repositoryhttps://github.com/aws-cloudformation/cloudformation-cli
Upstream docshttps://docs.aws.amazon.com/cloudformation
LicenseApache-2.0
Source archivehttps://files.pythonhosted.org/packages/12/ed/36f14b63957e99d9f2cbb5ac5671eed9fb93569e57add60534d47fc630e4/cloudformation-cli-0.2.39.tar.gz
Last updated2026-05-20T12:13:54Z
Pulseupdated
Dependenciescertifi, libyaml, pydantic, python@3.13
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared
Caveatscloudformation java, go, python plugins are installed, but the Go and Java are not bundled with the installation.

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecloudformation-cli
Version Scheme0
Revision13
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment