Achieving organisation-scoped AWS Config compliance using Cloudformation Lambda Hooks

AWS CloudFormation Hooks enforce compliance of IaC-provisioned resources against organizational standards. Since November 2024, AWS introduced Guard Hooks (using a DSL) and Lambda Hooks (using Lambda functions) as simpler alternatives to custom hooks. The article explores using Lambda Hooks integrated with AWS Organizations/Stack Sets to automatically validate CloudFormation templates across all accounts and regions within defined OUs.