AWS CloudFormation Security

Overview

Create secure AWS infrastructure using CloudFormation templates with security best practices. This skill covers encryption with AWS KMS, secrets management with Secrets Manager, secure parameters, IAM least privilege, security groups, TLS/SSL certificates, and defense-in-depth strategies.

When to Use

Use this skill when:

• Creating CloudFormation templates with encryption at-rest and in-transit
• Managing secrets and credentials with AWS Secrets Manager
• Configuring AWS KMS for encryption keys
• Implementing secure parameters with SSM Parameter Store
• Creating IAM policies with least privilege
• Configuring security groups and network security
• Implementing secure cross-stack references
• Configuring TLS/SSL for AWS services
• Applying defense-in-depth for infrastructure