stelligent / cfn_nag

Linting tool for CloudFormation templates
MIT License
1.26k stars 212 forks source link

Add support for Fn::Transform within resources #616

Open pbudzon opened 1 year ago

pbudzon commented 1 year ago

Using Fn::Transform as part of Resources section of the template, like below:

Resources:
    ResourceOne:
        Type: ...
        Properties: ....

    Fn::Transform:
        Name: AWS::Include
        Parameters:
            Location: somefile.yaml

throws a fatal error:

| FAIL FATAL
|
| Illegal cfn - missing Type: id: Fn::Transform

while being a completely valid and working template.

athewsey commented 2 weeks ago

+1 to this - just came across the same issue...

I appreciate the security consequences of trying to support this would depend on what Transform's being used. IMO even partial support would be helpful? In our case we're using the AWS::Include transform to include a partial template from a separate file.