{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance"}],"enrichment":{"capability":"Scans AWS CDK applications and CloudFormation templates against predefined rule packs to identify security and compliance violations.","skillfed_tags":["compliance-scanning","infrastructure-as-code"],"use_cases":["Enforce best practices across CDK applications before synthesis or deployment.","Validate infrastructure code against regulatory frameworks during CI/CD pipelines.","Suppress known violations on specific resources with documented reasons for audit compliance.","Scan CloudFormation templates directly for security and compliance issues.","Integrate compliance checking into synthesis pipelines to catch violations early."],"what_it_does":"cdk-nag is a linting and compliance-checking tool for CDK applications and CloudFormation templates. It runs predefined rule packs\u2014including AWS Solutions best practices, HIPAA security, NIST 800-53 revisions 4 and 5, PCI DSS 3.2.1, and Serverless patterns\u2014to detect security misconfigurations and compliance gaps in infrastructure code. The tool integrates into validation frameworks, allowing you to suppress specific violations on individual constructs or stacks with inline acknowledgments and audit trails.\n\nThe package depends on aws-cdk-lib, constructs, jsii, and publication. It supports Python 3.10 through 3.14 and is actively maintained. Violations are reported in a policy-validation-report.json file in the cloud assembly, with optional CloudFormation metadata integration for compatibility with existing compliance tooling.","worth_installing":"Yes. cdk-nag is actively maintained, has no known vulnerabilities, low install friction, and provides essential compliance and security scanning for CDK users. The permissive Apache-2.0 license poses no restrictions. Install it if you use CDK and need to enforce security or compliance standards."},"id":"cdk-nag","links":{"html":"https://skillfed.io/packages/cdk-nag","md":"https://skillfed.io/packages/cdk-nag.md","pypi":"https://pypi.org/project/cdk-nag/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-04","license_spdx":null,"license_treatment":"permissive","name":"cdk-nag","python_support":"supports_current","summary":"Check CDK v2 applications for best practices using a combination on available rule packs."},"popularity":{"monthly_downloads":3690555,"position":2528,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"3.0.2"}