From Reactive to Proactive - Infrastructure Governance by Design

Learn how to shift from reactive compliance monitoring to proactive infrastructure governance using AWS CloudFormation Hooks and AWS CloudFormation Guard in this 59-minute conference talk from AWS re:Invent 2025. Discover how to prevent non-compliant infrastructure deployments before they occur by implementing security controls at the design phase rather than discovering violations after resources are already deployed. Master the CloudFormation Guard domain-specific language (DSL) to write effective rules for static template validation that enforce security standards across your organization. Explore integration techniques with CloudFormation Hooks, including managed hooks, to create a comprehensive governance framework that eliminates security gaps, reduces compliance issues, and prevents costly remediation efforts. Gain practical insights into maintaining consistent security controls across cloud infrastructure at scale through proactive enforcement mechanisms that catch potential violations during the deployment planning stage.