aws-cloudformation-security

Create secure AWS infrastructure using CloudFormation templates with security best practices. This skill covers encryption with AWS KMS, secrets management with Secrets Manager, secure parameters, IAM least privilege, security groups, TLS/SSL certificates, and defense-in-depth strategies.

Stack Policies prevent accidental updates to critical infrastructure resources. Use them to protect production resources from unintended modifications.

Enable termination protection to prevent accidental deletion of production stacks. This adds a safety layer for critical infrastructure.

提供用于基础设施安全、机密管理、加密和安全数据处理的 AWS CloudFormation 模式。在使用 AWS Secrets Manager、KMS 加密、安全参数、IAM 策略、VPC 安全组、TLS/SSL 证书和加密流量配置创建安全 CloudFormation 模板时使用。涵盖模板结构、参数最佳实践、跨堆栈参考和纵深防御策略。 来源：giuseppe-trisciuoglio/developer-kit。