aws-cloudformation-security

Create secure AWS infrastructure using CloudFormation templates with security best practices. This skill covers encryption with AWS KMS, secrets management with Secrets Manager, secure parameters, IAM least privilege, security groups, TLS/SSL certificates, and defense-in-depth strategies.

Stack Policies prevent accidental updates to critical infrastructure resources. Use them to protect production resources from unintended modifications.

Enable termination protection to prevent accidental deletion of production stacks. This adds a safety layer for critical infrastructure.

提供用于基础设施安全、机密管理、加密和安全数据处理的 AWS CloudFormation 模式。在使用 AWS Secrets Manager、KMS 加密、安全參數、IAM 原則、VPC 安全性群組、TLS/SSL 憑證和加密流量配置建立安全 CloudFormation 範本時使用。涵盖模板结构、参数最佳实践、跨堆栈参考和纵深防御策略。 來源：giuseppe-trisciuoglio/developer-kit。