AWS CloudFormation
Computer programWikipedia
50
MENTIONS
14
EPISODES
10
PODCASTS
Search complete. 50 mentions across 14 episodes found for "AWS CloudFormation".
Oct 22, 2026
Ryan LucasHOST
Yeah.
Justin BrodleyHOST
But it's also a problem for CloudFormation.
Justin BrodleyHOST
But CloudFormation at least has tried to make drift better by adding at least drift checks.
Justin BrodleyHOST
I mean, there's not even a native drift check capability inside Terraform other than run Terraform plan.
Justin BrodleyHOST
I think it's an enterprise.
8 MINS LATER
Ryan LucasHOST
But yeah, Pulumi still has a managed state file outside of cloud and does not do continuous reconciliation.
Matt KohnHOST
So there you go.
Matt KohnHOST
I mean, I will say CloudFormation had gotten, CloudFormation I felt like was lacking for years.
Justin BrodleyHOST
Uh, but this is an AI-powered service that analyzes infrastructure across cost, security, performance, and reliability, then prioritizes recommendations based on defined business goals.
Justin BrodleyHOST
The agent reviews Terraform, CDK, and CloudFormation templates directly, identifying gaps behind or w- I guess, Well-Architected best practices and generating specific infrastructure as code changes needed to fix them.
Justin BrodleyHOST
Right, where the agents come with execution tools built in, including SSM runbooks, CLI scripts, and guided console walkthroughs, plus cross-pillar impact analysis so teams can see cost and performance trade-offs before applying a change.
Justin BrodleyHOST
Preview is limited currently to US East North Virginia, US East Ohio, and US West Oregon.
6 MINS LATER
Matt KohnHOST
[laughs]
Justin BrodleyHOST
It groups the related exposure findings by root cause, letting teams fix one misconfigured resource or overly permissive policy to resolve multiple findings simultaneously, rather than addressing each exposure separately.
Justin BrodleyHOST
Uh, the plans include prioritization labels of critical, high, medium, and low, impact assessment and step-by-step fix instructions across AWS CLI, Terraform, and CloudFormation.
Justin BrodleyHOST
Security Hub automatically ranks plans by risk reduction and surfacing the highest impact fixes first, which helps the security team prioritize limited remediation resources more effectively.
Warren ParadGUEST
And then you find out that moment and you have to figure out a workaround, but you're not making those decisions based off of the capabilities matrix chart at the beginning.
Karl RobinsonHOST
One quick question that popped into my head that I don't know if either of you know the answer to this, but obviously we're talking about services not having CloudFormation support from the answer.
Karl RobinsonHOST
Are there services that have CloudFormation support in some regions but not others? Or do they all get CloudFormation support at the same time? I was just curious on that.
Jon GoodallHOST
I think they get it at the same time, I think, because CloudFormation versus the API versus Terraform, it works differently.
Jon GoodallHOST
So CloudFormation doesn't talk via the API.
Jon GoodallHOST
It talks directly into the backbone.
Jon GoodallHOST
Terraform talks actually over the API, which is why Terraform can get rate limited.
Jon GoodallHOST
And I've never, ever seen CloudFormation get rate limited, ever.
Warren ParadGUEST
Maybe it's a newer service or functionality that just gets enabled, and then the Cloud Formation team starts hitting that, and you'll, you'll end up with that in your CI/CD job when it actually gets deployed.
Warren ParadGUEST
But yeah, Cloud Formation's just a templating language so Uh, I think fundamentally if CloudFormation is running in that region, it doesn't really, uh, distinguish between the different things.
Warren ParadGUEST
I don't know, uh, people may remember the Cloud Control API, which was released not too long ago, I think it was a couple of years now, with the goal of basically abstracting away the, uh, large differences in the different APIs through all the services in AWS and just giving a single API.
Warren ParadGUEST
I don't really think that went anywhere, but I can imagine there may be a weird connection between that and how the CloudFormation team is actually utilizing the underlying services without having to specifically know every single individual resource that is going to be deployed.
Karl RobertsonHOST
Is that a longer thing, the Cloud Control API?
Jon GoodallHOST
No, it still exists.
Jon GoodallHOST
Um, the firm that he works for, I, I assume works for, I don't really know his employment status, uh, they built a whole heap of stuff on top of that Cloud Control API because it was the most consistent-
Karl RobertsonHOST
Consistent
Erik OstermanGUEST
And here's what I mean.
Erik OstermanGUEST
So I think, uh, what are the main contenders today, uh, for infrastructure as code, IaC? So you have CloudFormation.
Erik OstermanGUEST
Honestly, I... my understanding is CloudFormation dwarfs everything else in terms of adoption within inside of AWS, even though in my echo chamber, nobody uses CloudFormation.
Erik OstermanGUEST
They wouldn't be caught dead with it.
Erik OstermanGUEST
Then you have, uh, Terraform of course, and you have Pulumi.
Erik OstermanGUEST
Because it's limiting, it's led to greater interoperability.
Erik OstermanGUEST
Because of the module ecosystem, you see so many mo- there are tens of thousands of modules out there, conservatively speaking, and it's because of that that it works.
Erik OstermanGUEST
But you don't really find CloudFormation libraries or like, uh, you know, architectures out there in the same capacity, or if they are, they were meant to be forked.
Flo MotlikHOST
Established AWS controls help you secure workloads, govern access, and audit model invocations, making it a strong fit for production.
Flo MotlikHOST
Domain administrators in SageMaker Unified Studio can define every project's foundation with custom tooling blueprints built from their own CloudFormation templates.
Flo MotlikHOST
Templates are validated at registration and after each deployment and reserved parameters like project ID fill in automatically.
Flo MotlikHOST
So one template works across accounts and regions while meeting company standards.
Toni de la FuenteGUEST
And that is, that is what we are trying to, to, to tell people, right? So remember the, the, the old days of infrastructure as code automation.
Toni de la FuenteGUEST
I mean, when, when that started, when the cloud started, with CloudFormation, Terraform, right?
James WilsonHOST
Yeah.
Toni de la FuenteGUEST
We, we were like, okay, we can deploy infrastructure super fast with infrastructure as code.
speaker_0HOST
It is a full-blown infrastructure orchestration engine.
speaker_1HOST
It leverages powerful declarative tools like Terraform and CloudFormation under the hood.
speaker_1HOST
It doesn't just spin up a few servers, it constructs an entire logically isolated reality from scratch.
speaker_0HOST
I like to think of the IPI installer as hiring a master general contractor to build a highly secure corporate headquarters.
Eric OstermanHOST
If not, uh, the next release, w- So the next release is gonna be Atmos.131.0. That's the one I'm targeting to get it into.
Eric OstermanHOST
If it's not that, it'll be 132.0. At the same rate, we are still working on the CloudFormation support, the native CloudFormation support.
Eric OstermanHOST
Um, I believe both Paul, you, and Michael are, uh, fans of, uh, formerly, uh, Reign.
Eric OstermanHOST
And, uh, Reign, uh, if you're not familiar, was a popular CLI from AWS on deploying, uh, CloudFormation, uh, templates and managing the life cycle of that CloudFormation.
Eric OstermanHOST
We have, uh, feature parity in the, the implementation that we've done, plus everything else that Atmos already does.
Eric OstermanHOST
So imagine when we announce, uh, the Atmos automation language combined with CloudFormation, combined with Terraform, combined with all the other component types, it is now a coherent story for how to describe, uh, you know, uh, build, deploy, and release your software anywhere.
Eric OstermanHOST
And, you know, the first release will be, you know, very comprehensive, but it- that's only a start, right? And, um, can't wait.
Eric OstermanHOST
So yeah, keep st- keep using Reign.
Flo MotlikHOST
So fixing one misconfigured setting or overly permissive policy can resolve or downgrade several exposures at once.
Flo MotlikHOST
Each plan comes with a priority rating, an impact assessment, and step-by-step fixes in AWS CLI, Terraform, CloudFormation, Python, and CDK, with the plans that cut the most risk ranked first.
Flo MotlikHOST
AI agents can pull them through the API to automate fixes, and they're free under the Essentials plan.
Flo MotlikHOST
On the billing side, GuardDuty runtime monitoring is now part of the Threat Analytics plan, metered as one usage type across EC2, EKS, and ECS on Fargate, with no change to detections or agents and nothing to reconfigure.
4 more episodes mention AWS CloudFormation.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.