Source: https://docs.aws.amazon.com/cfn-guard/latest/ug/cfn-guard.pdf