cdk-nag VS demos-aws-cdk

Thankfully using tools like cdc-nag you can help enforce some best practices around this and enable encryption from the beginning.

cdk-nag is an open-source tool that provides automated checks for AWS CDK code and the resulting Cloudformation templates to help ensure that they adhere to security and compliance best practices.

cdk-nag: Check CDK applications or CloudFormation templates for best practices using a combination of available rule packs. Inspired by cfn_nag.

There are already useful CDK Aspects out there that are ready to be used in your CDK application. In this section I want to give you an example for one of them: One of them is cdk-nag.

In the Construct Hub the construct cdk-nag has been released. The cdk-nag construct allows you to check your CDK applications for best practices using a combination of available rule packs. Using this cdk-nag construct and use it inside your code to check upon security best practises, will eventually make your application more secure. In this article I will describe how to use the cdk-nag construct in combination with CDK.

I'm using cdk-nag and love it https://github.com/cdklabs/cdk-nag

Overall, cdk-nag is a powerful tool for ensuring that your AWS CDK code and templates adhere to security and compliance best practices. By catching security issues early in the development process, cdk-nag can help you build more secure and reliable infrastructure. I've used it in many projects over the last couple of years and it's adding value. Especially if you work in a team that does not have a lot of AWS experience it shines. If you're using AWS CDK, I highly recommend giving cdk-nag a try. The example code in this post and a working project can be found on GitHub.