The CloudFormation Scanner tool is used to provide static analysis of CloudFormation templates to locate potential security risks that would be introduced based on the configuration of a setting in the template.