aws-cloudformation covers template authoring with security-first defaults, pre-deployment validation patterns, and post-deployment troubleshooting. emphasizes untrusted template content handling and resource property verification against official docs.