WS CloudFormation Hooks now support managed proactive controls, allowing customers to validate resource configurations against AWS best practices without writing custom hook logic. Customers can select controls from the AWS Control Tower Controls Catalog and apply them during CloudFormation operations. This helps reduce setup time, avoid manual errors, and improve the completeness and consistency of governance coverage. With this launch, customers can also configure these controls to run in warn mode. This allows teams to test controls without blocking deployments and is currently only available through CloudFormation. It gives customers greater flexibility to evaluate control behavior before fully enforcing policies.
AWS also introduced a new Hooks Invocation Summary page in the CloudFormation console. This view provides a historical record of hook activity, showing which controls were invoked, when and where they ran, and their outcomes such as pass, warn, or fail. This helps customers troubleshoot issues faster and demonstrate control posture for audits and compliance reviews.
With this launch, customers can now use AWS managed controls as part of their provisioning workflows, without the overhead of writing and maintaining custom logic. These controls are curated by AWS and aligned with industry best practices, helping teams enforce policies consistently across environments. The new summary page offers visibility into hook execution history, enabling faster issue resolution and better reporting.
These capabilities are available in all AWS Regions where CloudFormation is supported. To learn more, visit the AWS CloudFormation Hooks documentation
Categories:
Source: Amazon Web Services
