>_SecOpsLog_
All courses

AWS CloudFormation

CloudFormation is AWS-native IaC: a YAML template becomes a stack, a change set is the plan, drift is when the console and the template no longer match. This course covers parameters, nested stacks, StackSets, custom resources, and gating with cfn-lint or cfn-guard. A failed update rolls back by default; a custom resource still runs your Lambda with whatever IAM you gave it.

Beginner3 sections · 12 lessons · ~6h total · 14-question self-test
Start course
01

CloudFormation fundamentals

4 lessons
01What CloudFormation is & the modelTemplates, stacks, managed provisioning.12 min02Template anatomyResources, and the sections around them.12 min03Parameters, mappings & outputsMake a template reusable.12 min04Deploying: stacks & eventscreate, update, rollback, delete.12 min
02

Change sets, functions & drift

4 lessons
01Change sets & safe updatesPreview a change before it happens.14 min02Intrinsic functions & pseudo-parametersRef, GetAtt, Sub, and friends.12 min03Nested & cross-stack referencesCompose big infrastructure.12 min04Drift detectionWhen reality diverges from the template.10 min
03

StackSets, security & delivery

4 lessons
01Custom resources & macrosExtend CloudFormation beyond built-ins.14 min02StackSets: multi-account & regionDeploy one template everywhere.12 min03Policy, scanning & least privilegecfn-guard, cfn-nag, stack policies.14 min04CloudFormation in CI/CDAutomate deploys; protect the pipeline.12 min

Progress is saved in this browser only — no account required.

Final exam
Test yourself on everything
14 questions drawn from all 3 sections — every answer explained as you pick.
Start final exam