# 使用 Homebrew 安装 cloudformation-guard

查看 cloudformation-guard 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:cloudformation-guard
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install cloudformation-guard
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:cloudformation-guard
- **软件包管理器:** Homebrew
- **版本:** 3.2.0
- **来源摘要:** Checks CloudFormation templates for compliance using a declarative syntax
- **主页:** <https://github.com/aws-cloudformation/cloudformation-guard>
- **仓库:** <https://github.com/aws-cloudformation/cloudformation-guard>
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- cfn-guard (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 3.2.0
## 项目历史与用法

AWS CloudFormation Guard, exposed as cfn-guard, is a policy-as-code CLI and rule language for validating structured configuration such as CloudFormation templates. AWS documentation and the upstream repository both describe it as a way to write declarative guard rules and validate JSON/YAML data.

### 项目历史

AWS created the cloudformation-guard repository in 2020 and published an initial preview release shortly afterward. The project gave CloudFormation users a lightweight validation language that could run locally or in CI before templates reached deployment.

Guard's scope widened beyond only CloudFormation templates: the official repository describes validation for JSON- and YAML-formatted data including Kubernetes configurations and Terraform JSON plans, while AWS docs keep CloudFormation as the primary user-facing context.

### 采用历史

CloudFormation Guard is adopted by platform, security, and compliance teams that need repeatable checks on infrastructure definitions. It fits naturally into CI because the CLI validates files without requiring cloud-side deployment.

The Homebrew package is comparatively specialized, but the tool has a clearer package-manager role than many AWS side tools: install cfn-guard, run a rules file against templates, and fail the build if policy checks do not pass.

### 使用方式

Users write Guard rules, then run cfn-guard validate against templates or other structured data. AWS also documents related commands for testing rules and generating rule files from existing templates.

There is no single official user config or credential file location for cfn-guard; rules and data files are supplied explicitly as command inputs.

### 为什么软件包爱好者会关心

cfn-guard is significant as a compact Rust-based policy CLI in the IaC packaging ecosystem. It competes in the same mental space as linters and policy engines, but its syntax and examples are tailored to CloudFormation users.

For package maintainers, the interesting bit is that cfn-guard is useful even without AWS credentials: it packages cleanly as an offline validator that can run in local pre-commit hooks, CI containers, and developer laptops.

### 时间线

- 2020: Official cloudformation-guard GitHub repository was created.
- 2020: Initial preview release v0.5.0-beta was published.
- 2020s: Guard documentation expanded around validation, testing, and rule authoring workflows.
- 2020s: The repository described validation beyond CloudFormation templates, including Kubernetes and Terraform JSON inputs.

### Related projects

- AWS CloudFormation is the primary template ecosystem Guard was built to validate.
- CloudFormation Hooks and AWS Config rules are related governance mechanisms with different execution models.
- cfn-lint is adjacent template validation tooling, while CloudFormation CLI supports extension authoring rather than policy checks.

### 来源

- <https://docs.aws.amazon.com/cfn-guard/latest/ug/what-is-guard.html>
- <https://docs.aws.amazon.com/cfn-guard/latest/ug/cfn-guard-validate.html>
- <https://github.com/aws-cloudformation/cloudformation-guard>


## 安全说明

infrastructure mutation or orchestration signal.

- **Geiger 风险:** orange / 中
- infrastructure mutation or orchestration signal


## Combined YAML source

View the package source record on GitHub. [combined/cloudformation-guard.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cloudformation-guard.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph