Prisma Certified Cloud Security Engineer (PCCSE) — Question 172

Which statement is true regarding CloudFormation templates?

Answer options

• A. Scan support does not currently exist for nested references, macros, or intrinsic functions.
• B. A single template or a zip archive of template files cannot be scanned with a single API request.
• C. Request-Header-Field 'cloudformation-version' is required to request a scan.
• D. Scan support is provided for JSON, HTML and YAML formats.

Correct answer: A

Explanation

The correct answer is A because currently, AWS CloudFormation does not support scanning for nested references, macros, or intrinsic functions. The other options are incorrect as they either misstate the capabilities of the API or mention requirements that are not necessary.