Which statement is true regarding CloudFormation templates?

The correct answer is A. Scan support does not currently exist for nested references, macros, or intrinsic functions.. Prisma Cloud's IaC (Infrastructure as Code) scanning for CloudFormation templates does not support nested references, macros, or intrinsic functions (e.g., !Sub, !Ref used in complex dynamic ways). These dynamic constructs are resolved at deployment time by AWS, so static analysi

Prisma Cloud Platform

Question

Options

AScan support does not currently exist for nested references, macros, or intrinsic functions.
BA single template or a zip archive of template files cannot be scanned with a single API request.
CScan support is provided for JSON. HTML and YAML formats.
DRequest-Header-Field 'cloudformation-version' is required to request a scan.

How the community answered

(68 responses)

A
93% (63)
B
1% (1)
C
1% (1)
D
4% (3)

Explanation

Prisma Cloud's IaC (Infrastructure as Code) scanning for CloudFormation templates does not support nested references, macros, or intrinsic functions (e.g., !Sub, !Ref used in complex dynamic ways). These dynamic constructs are resolved at deployment time by AWS, so static analysis cannot fully evaluate them. Option B is false - both single templates and zip archives can be scanned via a single API request. Option C is false - CloudFormation supports JSON and YAML, not HTML. Option D is false - no such custom request header is required.

Topics

#CloudFormation Security#IaC Security Scanning#AWS Security

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice