cdklabs / cdk-nag

Check CDK applications for best practices using a combination of available rule packs

cdklabs/cdk-nag Issues

feat: Support regexes in resourceSuppressionsByPath
Updated a month ago5
bug: CDK Stages not linted by Nag rules
Updated a month ago
Node not recognized as CfnResource when using externally imported custom nagpack
Updated a month ago3
feat: Simpler appliesTo syntax for referencing CDK nodes
Updated a month ago
doc: AwsSolutions-CFR6 conflicts with AWS recommendation
Updated 2 months ago5
Exported rules aren't typed correctly
Updated 2 months ago
feat: Test Utils as part of the library
Updated 2 months ago3
question: AwsSolutions-COG1 doesn't check requireLowercase configuration
Updated 2 months ago4
CloudFrontDistributionNoOutdatedSSL: Does not allow for s3 static hosting via cloudfront
Updated 2 months ago1
AwsSolutions-SF1 conflicts with AWS recommendations
Updated 2 months ago2
feat: Support for AWS Resource Tagging Standards
Updated 2 months ago1
bug: AwsSolutions-L1 issue with Python runtime 3.12
Updated 2 months ago1
feat: Serverless Nag Pack
Updated 2 months ago
Do NagSuppressions have to be applied inside Stack constructor only?
Updated 3 months ago1
feat: discourage use of DesiredCount for auto-scaled ECS services
Updated 3 months ago1
bug: CFN Resources go unchecked
Updated 3 months ago1
feat: CIS Checks
Updated 3 months ago1
bug: ApplicationLoadBalancedFargateService not correctly detecting certificate with redirectHTTP
Updated 4 months ago1
bug: SQS used as a DLQ on a lambda produces AwsSolutions-SQS3
Closed 4 months ago1
bug: HIPAA.Security-RDSInBackupPlan not recognizing Serverless Postgres Cluster Instances
Updated 4 months ago1
Usage in pre-commit checks that only flag for brand new resources
Updated 4 months ago5
bug: CodeBuildProjectSourceRepoUrl is out of date
Updated 5 months ago1
Need the compliance and non-compliance test cases for the typescript-cdk rulesshort issue description
Closed 6 months ago1
Need the compliance and non-compliance test cases for the typescript-cdk rules
Closed 6 months ago1
Need the correct compliance and non-compliance test cases for the typescript-cdk rules
Updated 6 months ago1
doc: broken references and typos in log messages
Closed 6 months ago
bug: AwsSolutions-COG1 fails even though password policy meets the requirement
Closed 6 months ago1
The Security Group allows for 0.0.0.0/0 or ::/0 inbound access. in CDK
Updated 6 months ago5
bug: spurious AwsSolutions-SMG4 with aws-cdk-lib >= 2.116.0
Closed 6 months ago2
bug: SecretsManagerRotationEnabled is non compliant even if rotation is configured after cdk v2.116
Closed 6 months ago
bug: AwsSolutions-L1 flags Python 3.11 runtime as not the latest
Updated 6 months ago6
What flag on my opensearch cluster should I change to fix: AwsSolutions-OS3
Updated 7 months ago1
bug: The NAG Report outputs a Compliance: UNKNOWN rows.
Closed 7 months ago4
Cannot detect any warnings or errors when running cdk synth
Closed 7 months ago6
feat: nag pack that covers all of AWS FSBP
Updated 7 months ago1
bug: cannot suppress Resource::* on IAM Role with managed policy that uses *-Resource
Closed 9 months ago2
AwsSolutions-DOC5 Does not go away after enabling audit logs
Closed 9 months ago1
bug: CDK NAG Suppression fails for DynamoDB with replication regions for Global Tables
Closed 9 months ago2
feat: Add S3DefaultEncryptionKMS to AWSSolutionsChecks
Closed 10 months ago3
bug: EC2EBSVolumeEncrypted (AwsSolutions-EC26): Non compliant when no volumes are defined
Updated 10 months ago1
use cdk-nag in unit test (jest)
Closed 10 months ago5
Create a custom rule for CloudFormation stacks
Closed a year ago1
Is there a way to continue with synthesis and just output a report?
Closed a year ago2
switch from Annotations addWarning to addWarningV2
Updated a year ago1
feat: ESM support
Updated a year ago1
bug: blockDevices configuration in EC2 overwrites each volume of launch template configuration
Closed a year ago
bug: AwsSolutions-EC26 should fail when blockDevices is an empty array
Closed a year ago
bug: AwsSolutions-EC26 false positive when ec2 instance `requireImdsv2` is set to true
Closed a year ago3
Non-Compliant CloudFront Distribution Using Default Domain Name
Closed a year ago3
Guidance: NagSuppressions on cdk created stacks
Closed a year ago5