checkpoint aws cloudformation