CDK conformance Aspects
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 74
Description
A curated set of Aspects that can be applied to a Application to check if a deployment meets common industry controls prior to deployment. Similar to these [config conformance packs](https://docs.aws.amazon.com/config/latest/developerguide/conformancepack-sample-templates.html).
### Use Case
Organizations have different compliance requirements that they must meet and use tools such as AWS config to check if their infrastructure currently conforms and to remediate non conformant resources. This would add an easy way to check if individuals resources meet conformance per-deployment.
### Proposed Solution
```typescript
import { Nist800171 } from '@aws-cdk/conformance-aspects';
import { App, Aspects } from '@aws-cdk/core';
const app = new App();
// ...
Aspects.of(app).add(new Nist800171({...}))
```
* [ ] :wave: I may be able to implement this feature request
* [ ] :warning: This feature might incur a breaking change
---
This is a :rocket: Feature Request
Contributor guide
Research direction
Start with the AWS Config conformance pack examples linked in the issue and the AWS CDK Aspects API. Clarify which control set and supported resources are in scope, then define the package and validation expectations; the work is done when the agreed curated aspects can check application resources before deployment.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud, infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100