cdklabs/cdk-nag

Issues

• feat: Support PCI DSS 4.0 Rules

  #1791 opened 3 months ago by vumdao
  0

• bug: CDK Stages not linted by Nag rules

  #1726 opened 5 months ago by Clebiez
  4

• feat: Support for AWS Resource Tagging Standards

  #1680 opened 7 months ago by Schwartz-Matthew-bah
  2

• Exported rules aren't typed correctly

  #1701 opened 5 months ago by MagnusHJensen
  2

• feat: Simpler appliesTo syntax for referencing CDK nodes

  #1715 opened 6 months ago by zsstiers
  1

• feat: Support regexes in resourceSuppressionsByPath

  #1373 opened a year ago by cogwirrel
  5

• Node not recognized as CfnResource when using externally imported custom nagpack

  #1362 opened a year ago by MartNoten
  3

• doc: AwsSolutions-CFR6 conflicts with AWS recommendation

  #1582 opened 10 months ago by EysaN
  5

• feat: Test Utils as part of the library

  #1616 opened 9 months ago by FlorianWeissDev
  3

• question: AwsSolutions-COG1 doesn't check requireLowercase configuration

  #1578 opened 10 months ago by clueleaf
  4

• CloudFrontDistributionNoOutdatedSSL: Does not allow for s3 static hosting via cloudfront

  #1691 opened 6 months ago by cheruvian
  1

• AwsSolutions-SF1 conflicts with AWS recommendations

  #1664 opened 7 months ago by krokoko
  2

• bug: AwsSolutions-L1 issue with Python runtime 3.12

  #1685 opened 7 months ago by gyalai-aws
  1

• feat: Serverless Nag Pack

  #1676 opened 7 months ago by Kevinwochan
  0

• Do NagSuppressions have to be applied inside Stack constructor only?

  #1670 opened 7 months ago by anentropic
  1

• feat: discourage use of DesiredCount for auto-scaled ECS services

  #1652 opened 8 months ago by otterley
  1

• bug: CFN Resources go unchecked

  #1636 opened 8 months ago by m3newc
  1

• feat: CIS Checks

  #1640 opened 8 months ago by jlosito
  1

• bug: ApplicationLoadBalancedFargateService not correctly detecting certificate with redirectHTTP

  #1631 opened 8 months ago by jessebs
  1

• bug: SQS used as a DLQ on a lambda produces AwsSolutions-SQS3

  #1629 opened 8 months ago by jessebs
  1

• bug: HIPAA.Security-RDSInBackupPlan not recognizing Serverless Postgres Cluster Instances

  #1627 opened 8 months ago by jessebs
  1

• Usage in pre-commit checks that only flag for brand new resources

  #1621 opened 9 months ago by gurudesu
  5

• bug: CodeBuildProjectSourceRepoUrl is out of date

  #1590 opened 10 months ago by mskrip
  1

• Need the compliance and non-compliance test cases for the typescript-cdk rulesshort issue description

  #1580 opened 10 months ago by csubhras
  1

• Need the compliance and non-compliance test cases for the typescript-cdk rules

  #1575 opened 10 months ago by csubhras
  1

• Need the correct compliance and non-compliance test cases for the typescript-cdk rules

  #1574 opened 10 months ago by csubhras
  1

• doc: broken references and typos in log messages

  #1571 opened 10 months ago by quixoticmonk
  0

• bug: AwsSolutions-COG1 fails even though password policy meets the requirement

  #1577 opened 10 months ago by clueleaf
  1

• The Security Group allows for 0.0.0.0/0 or ::/0 inbound access. in CDK

  #1556 opened a year ago by Harshitha2401
  5

• bug: spurious AwsSolutions-SMG4 with aws-cdk-lib >= 2.116.0

  #1560 opened 10 months ago by anentropic
  2

• bug: SecretsManagerRotationEnabled is non compliant even if rotation is configured after cdk v2.116

  #1565 opened 10 months ago by clueleaf
  0

• bug: AwsSolutions-L1 flags Python 3.11 runtime as not the latest

  #1528 opened a year ago by hearde
  6

• What flag on my opensearch cluster should I change to fix: AwsSolutions-OS3

  #1535 opened a year ago by stefansson30952
  1

• bug: The NAG Report outputs a Compliance: UNKNOWN rows.

  #1527 opened a year ago by drskur
  4

• Cannot detect any warnings or errors when running cdk synth

  #1524 opened a year ago by hageyahhoo
  6

• feat: nag pack that covers all of AWS FSBP

  #1515 opened a year ago by anentropic
  1

• bug: cannot suppress Resource::* on IAM Role with managed policy that uses *-Resource

  #1481 opened a year ago by ArneOttenVW
  2

• AwsSolutions-DOC5 Does not go away after enabling audit logs

  #1421 opened a year ago by stefansson30952
  1

• bug: CDK NAG Suppression fails for DynamoDB with replication regions for Global Tables

  #1464 opened a year ago by mssanjay
  2

• feat: Add S3DefaultEncryptionKMS to AWSSolutionsChecks

  #1364 opened a year ago by rinaudjaws
  3

• bug: EC2EBSVolumeEncrypted (AwsSolutions-EC26): Non compliant when no volumes are defined

  #1441 opened a year ago by udondan
  1

• use cdk-nag in unit test (jest)

  #1434 opened a year ago by pharindoko
  5

• Create a custom rule for CloudFormation stacks

  #1341 opened a year ago by robertjan-b
  1

• Is there a way to continue with synthesis and just output a report?

  #1424 opened a year ago by nessadc
  2

• switch from Annotations addWarning to addWarningV2

  #1418 opened a year ago by JohannesKonings
  1

• feat: ESM support

  #1379 opened a year ago by berenddeboer
  1

• bug: blockDevices configuration in EC2 overwrites each volume of launch template configuration

  #1346 opened a year ago by clueleaf
  0

• bug: AwsSolutions-EC26 should fail when blockDevices is an empty array

  #1345 opened a year ago by clueleaf
  0

• bug: AwsSolutions-EC26 false positive when ec2 instance `requireImdsv2` is set to true

  #1330 opened a year ago by fiserv-plat-eng
  3

• Non-Compliant CloudFront Distribution Using Default Domain Name

  #1320 opened a year ago by bestickley
  3