Which statement is true regarding CloudFormation templates?

Which statement is true regarding CloudFormation templates?
A . Scan support does not currently exist for nested references, macros, or intrinsic functions.
B . A single template or a zip archive of template files cannot be scanned with a single API request.
C . Request-Header-Field ‘cloudformation-version’ is required to request a scan.
D . Scan support is provided for JSON, HTML and YAML formats.

View Answer

Answer: A

Explanation:

CloudFormation templates, used to describe and provision all the infrastructure resources in cloud environments, support various elements including resources, mappings, parameters, and outputs. However, scan support for CloudFormation templates does not currently exist for nested references, macros, or intrinsic functions (option A). These advanced CloudFormation features can introduce complexity in scanning and interpreting the templates accurately for security and compliance checks.

Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-devops-security/use-the-prisma-cloud-iac-scan-rest-api.html