Radar helps teams to solve for common mistakes found in infrastructure templates that can expose a Full Stack deployment to Security and Compliance defects. It is intended to be a harness that can be used by individuals and teams to support error checking and validation against their own requirements and provide a common means for writing these checks so they can be exchanged.
Radar will be extended to support an API front-end that can be deployed as a common tool from initial desktop checks during development through automated deployment via a CICD pipeline.
Radar is developed using:
- Ruby 2.x
- hashdiff
The repository is being set up to support an API endpoint, the infrastructure templates to support it, and tools that are useful.
|- docs
|- infrastructure
|- source
|--- CloudFormation
We're working on understanding and developing the vision for where this tool could go. We believe it needs an API and other test harnesses to run through different resources, templates, and components within a Full Stack workload.
We are planning to build an API capability to allow Radar to be run as part of the CICD pipeline. And we'll be adding tests to run against CloudFormation templates from the CLI in order to support DevOps teams consumption.
Radar is planned for expansion to allow for other resources to be tested and integrations with other tools, such as Gauntlt.
Radar needs to allow for tests to be run against thousands of accounts, allow for real-time test development, and posting of results into Forecast.