cdk-insights 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/analysis/static/awsServices/ACM/validation/acmValidationChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/AppSync/auth/appSyncAuthChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/AppSync/logging/appSyncLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/AppSync/waf/appSyncWafChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Backup/plans/backupPlanChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Backup/vault/backupVaultChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudFront/httpsOnly/cloudFrontHttpsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudFront/httpsOnly/cloudFrontHttpsChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/CloudFront/logging/cloudFrontLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudFront/logging/cloudFrontLoggingChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/CloudFront/tls/cloudFrontTlsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudFront/tls/cloudFrontTlsChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/CloudFront/waf/cloudFrontWafChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudFront/waf/cloudFrontWafChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/CloudWatch/alarms/cloudWatchAlarmChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudWatch/encryption/cloudWatchEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/CloudWatch/logRetention/cloudWatchLogRetentionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Cognito/mfa/cognitoMfaChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Cognito/mfa/cognitoMfaChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Cognito/password/cognitoPasswordChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Cognito/password/cognitoPasswordChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Cognito/security/cognitoSecurityChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Cognito/security/cognitoSecurityChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/EBS/volumes/ebsVolumesChecks.d.ts +1 -1
- package/dist/analysis/static/awsServices/ECR/immutableTags/ecrImmutableTagsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECR/lifecycle/ecrLifecycleChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECR/scanning/ecrScanningChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECS/logging/ecsLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECS/logging/ecsLoggingChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ECS/resources/ecsResourceChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECS/resources/ecsResourceChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ECS/secrets/ecsSecretsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ECS/secrets/ecsSecretsChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/EKS/encryption/eksEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/EKS/logging/eksLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/EKS/publicEndpoint/eksPublicEndpointChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ELB/deletionProtection/elbDeletionProtectionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ELB/deletionProtection/elbDeletionProtectionChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ELB/https/elbHttpsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ELB/https/elbHttpsChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ELB/logging/elbLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ELB/logging/elbLoggingChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ELB/securityPolicy/elbSecurityPolicyChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ELB/securityPolicy/elbSecurityPolicyChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/ElastiCache/auth/elastiCacheAuthChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ElastiCache/encryption/elastiCacheEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/ElastiCache/failover/elastiCacheFailoverChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Glue/connections/glueConnectionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Glue/encryption/glueEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/IAM/crossAccount/iamCrossAccountChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/IAM/crossAccount/iamCrossAccountChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/IAM/permissionBoundary/iamPermissionBoundaryChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/IAM/permissionBoundary/iamPermissionBoundaryChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Kinesis/encryption/kinesisEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Kinesis/retention/kinesisRetentionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Lambda/concurrency/lambdaConcurrencyChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Lambda/concurrency/lambdaConcurrencyChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Lambda/dlq/lambdaDlqChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Lambda/dlq/lambdaDlqChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Lambda/vpcNat/lambdaVpcNatChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Lambda/vpcNat/lambdaVpcNatChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/MSK/auth/mskAuthChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/MSK/encryption/mskEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/MSK/logging/mskLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/OpenSearch/accessControl/openSearchAccessControlChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/OpenSearch/encryption/openSearchEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/OpenSearch/logging/openSearchLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/RDS/backup/rdsBackupChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/RDS/backup/rdsBackupChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/RDS/deletion/rdsDeletionProtectionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/RDS/deletion/rdsDeletionProtectionChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/RDS/public/rdsPublicChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/RDS/public/rdsPublicChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/Redshift/encryption/redshiftEncryptionChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Redshift/logging/redshiftLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Redshift/publicAccess/redshiftPublicAccessChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Route53/dnssec/route53DnssecChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Route53/healthChecks/route53HealthCheckChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/Route53/queryLogging/route53QueryLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/S3/lifecycle/s3LifecycleChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/S3/lifecycle/s3LifecycleChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/S3/replication/s3ReplicationChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/S3/replication/s3ReplicationChecks.test.d.ts +1 -0
- package/dist/analysis/static/awsServices/VPC/defaultSecurityGroup/vpcDefaultSecurityGroupChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/VPC/flowLogs/vpcFlowLogsChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/WAF/logging/wafLoggingChecks.d.ts +2 -0
- package/dist/analysis/static/awsServices/WAF/webAcl/wafWebAclChecks.d.ts +2 -0
- package/dist/analysis/static/staticAnalysis.d.ts +35 -1
- package/dist/aspects/CdkInsightsAspect.js +114 -34952
- package/dist/bedrock/index.d.ts +3 -7
- package/dist/bedrock/modelPrompts/anthropic.d.ts +33 -0
- package/dist/bedrock/modelPrompts/index.d.ts +11 -0
- package/dist/bedrock/modelPrompts/llama.d.ts +39 -0
- package/dist/bedrock/modelPrompts/mistral.d.ts +33 -0
- package/dist/bedrock/modelPrompts/nova.d.ts +43 -0
- package/dist/bedrock/modelPrompts/promptFactory.d.ts +43 -0
- package/dist/bedrock/modelPrompts/promptFactory.test.d.ts +1 -0
- package/dist/bedrock/models/index.d.ts +6 -0
- package/dist/bedrock/models/modelRegistry.d.ts +71 -0
- package/dist/bedrock/models/modelRegistry.test.d.ts +1 -0
- package/dist/bedrock/services/index.d.ts +6 -0
- package/dist/bedrock/services/modelFailover.d.ts +109 -0
- package/dist/bedrock/services/modelFailover.test.d.ts +1 -0
- package/dist/cli/types/cli.types.d.ts +1 -1
- package/dist/entry.js +486 -0
- package/dist/functions/factories/awsServices.d.ts +70 -8
- package/dist/helpers/generateGitHubActionsOutput/generateGitHubActionsOutput.d.ts +27 -0
- package/dist/helpers/generateSarifOutput/generateSarifOutput.d.ts +57 -0
- package/dist/helpers/serviceSelection/serviceSelection.d.ts +1 -1
- package/dist/index.js +286 -61851
- package/dist/rules/ruleRegistry.d.ts +18 -0
- package/dist/rules/ruleRegistry.test.d.ts +1 -0
- package/dist/shared/config/environment.d.ts +8 -8
- package/dist/types/analysis.types.d.ts +344 -125
- package/dist/types/rules.types.d.ts +15 -0
- package/package.json +1 -3
- package/dist/cli/entry.js +0 -96683
- package/dist/helpers/acquireToken/acquireToken.d.ts +0 -2
- package/dist/helpers/acquireToken/acquireToken.types.d.ts +0 -10
- package/dist/helpers/generatePatch/generatePatch.d.ts +0 -6
- package/dist/helpers/getSourceFiles/getSourceFiles.d.ts +0 -4
- package/dist/helpers/result/result.d.ts +0 -26
- package/dist/shared/featureGating-simple.d.ts +0 -4
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
|
|
2
|
-
export declare const
|
|
2
|
+
export declare const checkEBSVolumes: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -1,5 +1,39 @@
|
|
|
1
|
-
import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, ServiceName } from '../../types/analysis.types';
|
|
1
|
+
import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, ServiceName, Severity } from '../../types/analysis.types';
|
|
2
2
|
import type { ConstructMetadata } from './solutionConstructs/loadConstructMetadata';
|
|
3
|
+
export type AnalysisStatistics = {
|
|
4
|
+
totalResources: number;
|
|
5
|
+
analyzedResources: number;
|
|
6
|
+
totalFindings: number;
|
|
7
|
+
findingsBySeverity: Record<Severity, number>;
|
|
8
|
+
findingsByService: Record<string, number>;
|
|
9
|
+
analysisTimeMs: number;
|
|
10
|
+
servicesAnalyzed: string[];
|
|
11
|
+
};
|
|
3
12
|
export declare const loadCloudFormationTemplate: (templatePath: string) => CloudFormationStack;
|
|
13
|
+
export type StaticAnalysisOptions = {
|
|
14
|
+
/** Services to analyze (defaults to all) */
|
|
15
|
+
selectedServices?: ServiceName[];
|
|
16
|
+
/** Solutions construct registry for pattern detection */
|
|
17
|
+
solutionsRegistry?: Record<string, ConstructMetadata>;
|
|
18
|
+
/** Whether to deduplicate findings (default: true) */
|
|
19
|
+
deduplicateFindings?: boolean;
|
|
20
|
+
/** Whether to include statistics in result (default: false) */
|
|
21
|
+
includeStatistics?: boolean;
|
|
22
|
+
};
|
|
23
|
+
export type StaticAnalysisResultWithStats = {
|
|
24
|
+
findings: AnalysisResults;
|
|
25
|
+
statistics: AnalysisStatistics;
|
|
26
|
+
};
|
|
4
27
|
export declare const runStaticAnalysis: (cloudformationTemplate: CloudFormationStack, createFinding: CreateFindingFunction, selectedServices?: ServiceName[], solutionsRegistry?: Record<string, ConstructMetadata>) => AnalysisResults;
|
|
28
|
+
export declare const runStaticAnalysisWithOptions: (cloudformationTemplate: CloudFormationStack, createFinding: CreateFindingFunction, options?: StaticAnalysisOptions) => StaticAnalysisResultWithStats;
|
|
29
|
+
export type BatchAnalysisResult = {
|
|
30
|
+
results: Record<string, AnalysisResults>;
|
|
31
|
+
aggregateStatistics: AnalysisStatistics;
|
|
32
|
+
perStackStatistics: Record<string, AnalysisStatistics>;
|
|
33
|
+
};
|
|
5
34
|
export declare const runBatchStaticAnalysis: (cloudformationTemplates: Record<string, CloudFormationStack>, createFinding: CreateFindingFunction, selectedServices?: ServiceName[], solutionsRegistry?: Record<string, ConstructMetadata>) => Record<string, AnalysisResults>;
|
|
35
|
+
export declare const runBatchStaticAnalysisWithOptions: (cloudformationTemplates: Record<string, CloudFormationStack>, createFinding: CreateFindingFunction, options?: StaticAnalysisOptions) => BatchAnalysisResult;
|
|
36
|
+
/**
|
|
37
|
+
* Get a summary string from analysis statistics
|
|
38
|
+
*/
|
|
39
|
+
export declare const formatStatisticsSummary: (stats: AnalysisStatistics) => string;
|