[{"data":1,"prerenderedAt":88},["ShallowReactive",2],{"content-svc-lambda-guides-governance-8-open-source-and-other-tools":3},{"markdown":4,"frontMatterAttributes":5,"bodyRaw":10,"menu":11,"menuType":81,"isCollapseableMenu":14,"nextDocItem":82,"previousDocItem":68,"contributorPaths":83,"contentName":87,"slug":80,"readingTime":77},"\u003Cp>In this guide, we covered the following areas of the developer lifecycle and the AWS services and tools that you can use to ensure that your software and resource deployment comply with your governance requirements.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Developer tooling (local validation): CloudFormation Guard\u003C\u002Fli>\n\u003Cli>Code repository (pre-commit webhook validation): CloudFormation Guard\u003C\u002Fli>\n\u003Cli>Deployment (pipeline validation): CloudFormation Guard, AWS Config, Signer\u003C\u002Fli>\n\u003Cli>Account (resources deployed): Amazon Inspector, AWS Config\u003C\u002Fli>\n\u003Cli>Observability (for governance monitoring): CloudWatch\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A rich open source ecosystem also affords additional options for your governance needs, and we wanted to call out a few tools that we see some of our customers using.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.openpolicyagent.org\u002Fdocs\u002Flatest\u002F\">Open Policy Agent\u003C\u002Fa> for preventative controls, both at the developer workstations and within the deployment toolchain.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcloudcustodian.io\u002Fdocs\u002F\">Cloud Custodian\u003C\u002Fa> for detective controls, monitoring accounts and resources deployed.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fstelligent\u002Fcfn_nag\">cfn_nag\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcdklabs\u002Fcdk-nag\">cdk-nag\u003C\u002Fa> for template linting, inspecting templates for patterns that might violate governance policies.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcdklabs\u002Fcdk-validator-cfnguard\">CfnGuardValidator\u003C\u002Fa> for integration of CloudFormation Guard with CDK infrastructure as code tooling.\u003C\u002Fli>\n\u003C\u002Ful>\n",{"title":6,"order":7,"authors":8},"8. Discussion of Open Source and other AWS tools",8,[9],"Heeki Park","In this guide, we covered the following areas of the developer lifecycle and the AWS services and tools that you can use to ensure that your software and resource deployment comply with your governance requirements.\n\n* Developer tooling (local validation): CloudFormation Guard\n* Code repository (pre-commit webhook validation): CloudFormation Guard\n* Deployment (pipeline validation): CloudFormation Guard, AWS Config, Signer\n* Account (resources deployed): Amazon Inspector, AWS Config\n* Observability (for governance monitoring): CloudWatch\n\nA rich open source ecosystem also affords additional options for your governance needs, and we wanted to call out a few tools that we see some of our customers using.\n\n* [Open Policy Agent](https:\u002F\u002Fwww.openpolicyagent.org\u002Fdocs\u002Flatest\u002F) for preventative controls, both at the developer workstations and within the deployment toolchain.\n* [Cloud Custodian](https:\u002F\u002Fcloudcustodian.io\u002Fdocs\u002F) for detective controls, monitoring accounts and resources deployed.\n* [cfn_nag](https:\u002F\u002Fgithub.com\u002Fstelligent\u002Fcfn_nag) or [cdk-nag](https:\u002F\u002Fgithub.com\u002Fcdklabs\u002Fcdk-nag) for template linting, inspecting templates for patterns that might violate governance policies.\n* [CfnGuardValidator](https:\u002F\u002Fgithub.com\u002Fcdklabs\u002Fcdk-validator-cfnguard) for integration of CloudFormation Guard with CDK infrastructure as code tooling.\n",[12],{"title":13,"collapsible":14,"isCollapsed":14,"content":15},"Governance in Depth",false,[16,28,37,46,53,61,68,75],{"title":17,"order":18,"authors":19,"callout":20,"time":24,"path":25,"id":26,"link":27},"1. Introduction",1,[9],{"title":21,"description":22,"link":23},"Watch this video","This reinvent 2023 video covers the topics of this guide in further detail.","https:\u002F\u002Fyoutu.be\u002Fqlz15v-gHFI","5 min","1-introduction","1-introduction.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F1-introduction",{"title":29,"order":30,"authors":31,"time":33,"path":34,"id":35,"link":36},"2. Proactive Controls with AWS CloudFormation Guard",2,[9,32],"Pallavi Srivastava","4 min","2-proactive-guard","2-proactive-guard.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F2-proactive-guard",{"title":38,"order":39,"authors":40,"time":42,"path":43,"id":44,"link":45},"3. Proactive Controls with AWS Config",3,[41],"Debasis Rath","6 min","3-proactive-config","3-proactive-config.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F3-proactive-config",{"title":47,"order":48,"authors":49,"time":24,"path":50,"id":51,"link":52},"4. Detective Controls with AWS Config",4,[41],"4-detective-config","4-detective-config.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F4-detective-config",{"title":54,"order":55,"authors":56,"time":57,"path":58,"id":59,"link":60},"5. Code Signing with AWS Signer",5,[9],"3 min","5-code-signing","5-code-signing.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F5-code-signing",{"title":62,"order":63,"authors":64,"time":57,"path":65,"id":66,"link":67},"6. Code Scanning with Amazon Inspector",6,[32],"6-code-scanning","6-code-scanning.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F6-code-scanning",{"title":69,"order":70,"authors":71,"time":42,"path":72,"id":73,"link":74},"7. Observability for Security and Compliance",7,[41],"7-observability","7-observability.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F7-observability",{"title":6,"order":7,"authors":76,"time":77,"path":78,"id":79,"link":80},[9],"1 min","8-open-source-and-other-tools","8-open-source-and-other-tools.md","\u002Fcontent\u002Fservice\u002Flambda\u002Fguides\u002Fgovernance\u002F8-open-source-and-other-tools","LIST",null,[84,85,86],"content\u002Fcontributors\u002Fheeki-park.json","content\u002Fcontributors\u002Fdebasis-rath.json","content\u002Fcontributors\u002Fpallavi-srivastava.json","Implementing governance in depth for serverless applications",1792578874389]