Current limits

• AWS only. No Azure, no GCP. Drop us a line if that shapes whether you'd adopt; we're tracking demand.
• Terraform and CloudFormation. Both are scanned by the GitHub App, the MCP server, and the VS Code extension — CloudFormation as raw JSON or YAML (short tags included), SAM, and CDK-synthesized output. Pulumi is not supported.
• Up to 1,000 files per PR scan, 2,000 per MCP call. audytx reads your repository's Terraform tree and CloudFormation templates for cross-resource context, changed files first. Repos past the 1,000-file ceiling are scanned diff-only, and the PR comment says so when it happens. If you regularly exceed it, ping us.
• Expression budget for network-placement lists. audytx evaluates the Terraform expression behind a list that places a resource in your network (for example a database subnet group's subnet_ids) within 16,384 evaluation steps, at most 4,096 members per level and 16 levels of nesting, and only when the expression is under 1 MiB of text. A list past any of these is treated as unknown: audytx does not use it to decide whether a subnet is in the group, so a check that depends on it reports nothing for that resource instead of guessing. Ordinary lists, including nested for expressions, stay far inside it.
• Precision is the bar. Open a support ticket if a finding looks wrong; we tune the check catalog from real PR feedback.