Ok, this is kinda cool, a new managed CloudFormation hook that lets you run validation logic with Lambda.
You can choose when the hook runs, based on resource type, name, deployment action, stack name, etc.
Official announcement:
aws.amazon.com/blogs/devops...