> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloudeval.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Review AWS CloudFormation (beta)

> Evaluate AWS CloudFormation JSON or YAML statically with Cloudeval while keeping beta coverage and live-cloud limitations explicit.

<Badge color="yellow">Beta</Badge>

Cloudeval can review supported AWS CloudFormation JSON and YAML as static infrastructure-as-code. This does not connect to a live AWS account and does not provide Azure/AWS feature parity.

## Why it matters

Use this workflow to identify applicable template risks before deployment, generate architecture context, and carry evidence into GitHub or CLI review. Unsupported or unavailable evaluation areas must remain `Not assessed` rather than appearing to pass.

## Quick example

Start with the public [AWS CloudFormation review example](https://github.com/ganakailabs/cloudeval-aws-cloudformation-review-example).

```bash theme={null}
git clone https://github.com/ganakailabs/cloudeval-aws-cloudformation-review-example.git
cd cloudeval-aws-cloudformation-review-example
cloudeval review --source-root . --format json --output review
```

## Supported workflow

<Steps>
  <Step title="Choose a supported template source">
    Use CloudFormation JSON or YAML from a local workspace or GitHub-linked project.
  </Step>

  <Step title="Confirm the project boundary">
    For repositories with multiple or nested templates, commit `.cloudeval/config.yaml` and identify the intended roots and entry templates.
  </Step>

  <Step title="Run the review">
    Use the CLI locally or the GitHub Action in CI. Keep the ref, commit, and source root with the review artifact.
  </Step>

  <Step title="Inspect applicability">
    Review findings, evidence, unsupported resources, and every `Not assessed` area before making a merge decision.
  </Step>
</Steps>

## Coverage boundary

| Area                                      | Current behavior                                                 |
| ----------------------------------------- | ---------------------------------------------------------------- |
| CloudFormation JSON and YAML ingestion    | Beta static evaluation for supported templates                   |
| Source-linked GitHub review               | Available through the documented repository and Action workflows |
| Architecture and evaluation output        | Depends on parsed resources and applicable checks                |
| Live AWS account connection               | Not available                                                    |
| Runtime telemetry or deployed-state proof | Not available from static CloudFormation input                   |
| Unsupported services or signals           | Report as unsupported or `Not assessed`; do not infer a pass     |

<Warning>Do not describe this workflow as live AWS assessment, full CNAPP coverage, or provider parity. The evidence is limited to the supplied source and supported static evaluation paths.</Warning>

## Related pages

* [Supported clouds and IaC formats](/trust/supported-clouds-and-iac)
* [Evaluation coverage](/trust/evaluation-coverage)
* [IaC project configuration](/guides/projects/iac-config)
* [Review with GitHub Actions](/guides/review/github-actions)