aws / aws/aws-cdk

CDK conformance Aspects

Open
#15,017 3 comments 10 reactions 0 assignees View on GitHub
effort/large feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
1d 19h
Merged PRs (30d)
74

Description

A curated set of Aspects that can be applied to a Application to check if a deployment meets common industry controls prior to deployment. Similar to these [config conformance packs](https://docs.aws.amazon.com/config/latest/developerguide/conformancepack-sample-templates.html).

### Use Case

Organizations have different compliance requirements that they must meet and use tools such as AWS config to check if their infrastructure currently conforms and to remediate non conformant resources. This would add an easy way to check if individuals resources meet conformance per-deployment.

### Proposed Solution
```typescript
import { Nist800171 } from '@aws-cdk/conformance-aspects';
import { App, Aspects } from '@aws-cdk/core';

const app = new App();

// ...

Aspects.of(app).add(new Nist800171({...}))

```

* [ ] :wave: I may be able to implement this feature request
* [ ] :warning: This feature might incur a breaking change

---

This is a :rocket: Feature Request

Contributor guide

Open the contributing guide

Research direction

Start with the AWS Config conformance pack examples linked in the issue and the AWS CDK Aspects API. Clarify which control set and supported resources are in scope, then define the package and validation expectations; the work is done when the agreed curated aspects can check application resources before deployment.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.