Side by side
AWS CloudFormation vs c7n-left
Both stand on infrastructure as code security software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APIiPhoneLinux+3
CloudFormation brings template-based provisioning, change previews, and drift tracking to AWS resource management. The service itself is free, but account for the costs of created resources and any chargeable provider or hook operations.
Visit AWS CloudFormation Free plan LinuxMacSelf-hosted+1
Pick c7n-left for free Terraform policy evaluation in CI, with flexible Custodian filters and pull-request reporting. Consider another tool if your workflow cannot fetch remote modules first or depends on a fixed command-line interface.
Visit c7n-leftThe facts
| AWS CloudFormation | c7n-left | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | No | Not published |
| Runs on | API, iPhone, Linux, Mac, Web, Windows | Linux, Mac, Self-hosted, Windows |
| Lowest paid plan | Free or on request | Not published |
| Plans published | 3 | None |
| Maker | Not published | Not published |
| Website | aws.amazon.com | cloudcustodian.io |
| On infrastructure as code security software | #5 of 22 | #9 of 22 |
AWS CloudFormation: what it does well
- Templates use YAML or JSON.
- Change Sets preview proposed stack changes.
- StackSets deploy across AWS accounts and Regions.
- Drift Detection tracks changes made outside CloudFormation.
- Data is encrypted at rest; service channels are encrypted.
What to know first
- Created AWS resources incur their standard charges.
- Third-party provider and custom hook operations may incur charges.
- AWS recommends TLS 1.3 and requires TLS 1.2.
c7n-left: what it does well
- Free and open source under Apache 2.0
- Evaluates Terraform infrastructure-as-code
- GitHub mode adds pull-request annotations
- Supports multi-hop resource graph traversal
- Tests policies with YAML or JSON assertions
What to know first
- Remote Terraform modules require prior Terraform fetching
- Windows users are directed to Docker images
- Command-line interface is subject to change
Alternatives to AWS CloudFormation Alternatives to c7n-left The whole list