cdk-insights 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (123) hide show
  1. package/dist/analysis/static/awsServices/ACM/validation/acmValidationChecks.d.ts +2 -0
  2. package/dist/analysis/static/awsServices/AppSync/auth/appSyncAuthChecks.d.ts +2 -0
  3. package/dist/analysis/static/awsServices/AppSync/logging/appSyncLoggingChecks.d.ts +2 -0
  4. package/dist/analysis/static/awsServices/AppSync/waf/appSyncWafChecks.d.ts +2 -0
  5. package/dist/analysis/static/awsServices/Backup/plans/backupPlanChecks.d.ts +2 -0
  6. package/dist/analysis/static/awsServices/Backup/vault/backupVaultChecks.d.ts +2 -0
  7. package/dist/analysis/static/awsServices/CloudFront/httpsOnly/cloudFrontHttpsChecks.d.ts +2 -0
  8. package/dist/analysis/static/awsServices/CloudFront/httpsOnly/cloudFrontHttpsChecks.test.d.ts +1 -0
  9. package/dist/analysis/static/awsServices/CloudFront/logging/cloudFrontLoggingChecks.d.ts +2 -0
  10. package/dist/analysis/static/awsServices/CloudFront/logging/cloudFrontLoggingChecks.test.d.ts +1 -0
  11. package/dist/analysis/static/awsServices/CloudFront/tls/cloudFrontTlsChecks.d.ts +2 -0
  12. package/dist/analysis/static/awsServices/CloudFront/tls/cloudFrontTlsChecks.test.d.ts +1 -0
  13. package/dist/analysis/static/awsServices/CloudFront/waf/cloudFrontWafChecks.d.ts +2 -0
  14. package/dist/analysis/static/awsServices/CloudFront/waf/cloudFrontWafChecks.test.d.ts +1 -0
  15. package/dist/analysis/static/awsServices/CloudWatch/alarms/cloudWatchAlarmChecks.d.ts +2 -0
  16. package/dist/analysis/static/awsServices/CloudWatch/encryption/cloudWatchEncryptionChecks.d.ts +2 -0
  17. package/dist/analysis/static/awsServices/CloudWatch/logRetention/cloudWatchLogRetentionChecks.d.ts +2 -0
  18. package/dist/analysis/static/awsServices/Cognito/mfa/cognitoMfaChecks.d.ts +2 -0
  19. package/dist/analysis/static/awsServices/Cognito/mfa/cognitoMfaChecks.test.d.ts +1 -0
  20. package/dist/analysis/static/awsServices/Cognito/password/cognitoPasswordChecks.d.ts +2 -0
  21. package/dist/analysis/static/awsServices/Cognito/password/cognitoPasswordChecks.test.d.ts +1 -0
  22. package/dist/analysis/static/awsServices/Cognito/security/cognitoSecurityChecks.d.ts +2 -0
  23. package/dist/analysis/static/awsServices/Cognito/security/cognitoSecurityChecks.test.d.ts +1 -0
  24. package/dist/analysis/static/awsServices/EBS/volumes/ebsVolumesChecks.d.ts +1 -1
  25. package/dist/analysis/static/awsServices/ECR/immutableTags/ecrImmutableTagsChecks.d.ts +2 -0
  26. package/dist/analysis/static/awsServices/ECR/lifecycle/ecrLifecycleChecks.d.ts +2 -0
  27. package/dist/analysis/static/awsServices/ECR/scanning/ecrScanningChecks.d.ts +2 -0
  28. package/dist/analysis/static/awsServices/ECS/logging/ecsLoggingChecks.d.ts +2 -0
  29. package/dist/analysis/static/awsServices/ECS/logging/ecsLoggingChecks.test.d.ts +1 -0
  30. package/dist/analysis/static/awsServices/ECS/resources/ecsResourceChecks.d.ts +2 -0
  31. package/dist/analysis/static/awsServices/ECS/resources/ecsResourceChecks.test.d.ts +1 -0
  32. package/dist/analysis/static/awsServices/ECS/secrets/ecsSecretsChecks.d.ts +2 -0
  33. package/dist/analysis/static/awsServices/ECS/secrets/ecsSecretsChecks.test.d.ts +1 -0
  34. package/dist/analysis/static/awsServices/EKS/encryption/eksEncryptionChecks.d.ts +2 -0
  35. package/dist/analysis/static/awsServices/EKS/logging/eksLoggingChecks.d.ts +2 -0
  36. package/dist/analysis/static/awsServices/EKS/publicEndpoint/eksPublicEndpointChecks.d.ts +2 -0
  37. package/dist/analysis/static/awsServices/ELB/deletionProtection/elbDeletionProtectionChecks.d.ts +2 -0
  38. package/dist/analysis/static/awsServices/ELB/deletionProtection/elbDeletionProtectionChecks.test.d.ts +1 -0
  39. package/dist/analysis/static/awsServices/ELB/https/elbHttpsChecks.d.ts +2 -0
  40. package/dist/analysis/static/awsServices/ELB/https/elbHttpsChecks.test.d.ts +1 -0
  41. package/dist/analysis/static/awsServices/ELB/logging/elbLoggingChecks.d.ts +2 -0
  42. package/dist/analysis/static/awsServices/ELB/logging/elbLoggingChecks.test.d.ts +1 -0
  43. package/dist/analysis/static/awsServices/ELB/securityPolicy/elbSecurityPolicyChecks.d.ts +2 -0
  44. package/dist/analysis/static/awsServices/ELB/securityPolicy/elbSecurityPolicyChecks.test.d.ts +1 -0
  45. package/dist/analysis/static/awsServices/ElastiCache/auth/elastiCacheAuthChecks.d.ts +2 -0
  46. package/dist/analysis/static/awsServices/ElastiCache/encryption/elastiCacheEncryptionChecks.d.ts +2 -0
  47. package/dist/analysis/static/awsServices/ElastiCache/failover/elastiCacheFailoverChecks.d.ts +2 -0
  48. package/dist/analysis/static/awsServices/Glue/connections/glueConnectionChecks.d.ts +2 -0
  49. package/dist/analysis/static/awsServices/Glue/encryption/glueEncryptionChecks.d.ts +2 -0
  50. package/dist/analysis/static/awsServices/IAM/crossAccount/iamCrossAccountChecks.d.ts +2 -0
  51. package/dist/analysis/static/awsServices/IAM/crossAccount/iamCrossAccountChecks.test.d.ts +1 -0
  52. package/dist/analysis/static/awsServices/IAM/permissionBoundary/iamPermissionBoundaryChecks.d.ts +2 -0
  53. package/dist/analysis/static/awsServices/IAM/permissionBoundary/iamPermissionBoundaryChecks.test.d.ts +1 -0
  54. package/dist/analysis/static/awsServices/Kinesis/encryption/kinesisEncryptionChecks.d.ts +2 -0
  55. package/dist/analysis/static/awsServices/Kinesis/retention/kinesisRetentionChecks.d.ts +2 -0
  56. package/dist/analysis/static/awsServices/Lambda/concurrency/lambdaConcurrencyChecks.d.ts +2 -0
  57. package/dist/analysis/static/awsServices/Lambda/concurrency/lambdaConcurrencyChecks.test.d.ts +1 -0
  58. package/dist/analysis/static/awsServices/Lambda/dlq/lambdaDlqChecks.d.ts +2 -0
  59. package/dist/analysis/static/awsServices/Lambda/dlq/lambdaDlqChecks.test.d.ts +1 -0
  60. package/dist/analysis/static/awsServices/Lambda/vpcNat/lambdaVpcNatChecks.d.ts +2 -0
  61. package/dist/analysis/static/awsServices/Lambda/vpcNat/lambdaVpcNatChecks.test.d.ts +1 -0
  62. package/dist/analysis/static/awsServices/MSK/auth/mskAuthChecks.d.ts +2 -0
  63. package/dist/analysis/static/awsServices/MSK/encryption/mskEncryptionChecks.d.ts +2 -0
  64. package/dist/analysis/static/awsServices/MSK/logging/mskLoggingChecks.d.ts +2 -0
  65. package/dist/analysis/static/awsServices/OpenSearch/accessControl/openSearchAccessControlChecks.d.ts +2 -0
  66. package/dist/analysis/static/awsServices/OpenSearch/encryption/openSearchEncryptionChecks.d.ts +2 -0
  67. package/dist/analysis/static/awsServices/OpenSearch/logging/openSearchLoggingChecks.d.ts +2 -0
  68. package/dist/analysis/static/awsServices/RDS/backup/rdsBackupChecks.d.ts +2 -0
  69. package/dist/analysis/static/awsServices/RDS/backup/rdsBackupChecks.test.d.ts +1 -0
  70. package/dist/analysis/static/awsServices/RDS/deletion/rdsDeletionProtectionChecks.d.ts +2 -0
  71. package/dist/analysis/static/awsServices/RDS/deletion/rdsDeletionProtectionChecks.test.d.ts +1 -0
  72. package/dist/analysis/static/awsServices/RDS/public/rdsPublicChecks.d.ts +2 -0
  73. package/dist/analysis/static/awsServices/RDS/public/rdsPublicChecks.test.d.ts +1 -0
  74. package/dist/analysis/static/awsServices/Redshift/encryption/redshiftEncryptionChecks.d.ts +2 -0
  75. package/dist/analysis/static/awsServices/Redshift/logging/redshiftLoggingChecks.d.ts +2 -0
  76. package/dist/analysis/static/awsServices/Redshift/publicAccess/redshiftPublicAccessChecks.d.ts +2 -0
  77. package/dist/analysis/static/awsServices/Route53/dnssec/route53DnssecChecks.d.ts +2 -0
  78. package/dist/analysis/static/awsServices/Route53/healthChecks/route53HealthCheckChecks.d.ts +2 -0
  79. package/dist/analysis/static/awsServices/Route53/queryLogging/route53QueryLoggingChecks.d.ts +2 -0
  80. package/dist/analysis/static/awsServices/S3/lifecycle/s3LifecycleChecks.d.ts +2 -0
  81. package/dist/analysis/static/awsServices/S3/lifecycle/s3LifecycleChecks.test.d.ts +1 -0
  82. package/dist/analysis/static/awsServices/S3/replication/s3ReplicationChecks.d.ts +2 -0
  83. package/dist/analysis/static/awsServices/S3/replication/s3ReplicationChecks.test.d.ts +1 -0
  84. package/dist/analysis/static/awsServices/VPC/defaultSecurityGroup/vpcDefaultSecurityGroupChecks.d.ts +2 -0
  85. package/dist/analysis/static/awsServices/VPC/flowLogs/vpcFlowLogsChecks.d.ts +2 -0
  86. package/dist/analysis/static/awsServices/WAF/logging/wafLoggingChecks.d.ts +2 -0
  87. package/dist/analysis/static/awsServices/WAF/webAcl/wafWebAclChecks.d.ts +2 -0
  88. package/dist/analysis/static/staticAnalysis.d.ts +35 -1
  89. package/dist/aspects/CdkInsightsAspect.js +114 -34952
  90. package/dist/bedrock/index.d.ts +3 -7
  91. package/dist/bedrock/modelPrompts/anthropic.d.ts +33 -0
  92. package/dist/bedrock/modelPrompts/index.d.ts +11 -0
  93. package/dist/bedrock/modelPrompts/llama.d.ts +39 -0
  94. package/dist/bedrock/modelPrompts/mistral.d.ts +33 -0
  95. package/dist/bedrock/modelPrompts/nova.d.ts +43 -0
  96. package/dist/bedrock/modelPrompts/promptFactory.d.ts +43 -0
  97. package/dist/bedrock/modelPrompts/promptFactory.test.d.ts +1 -0
  98. package/dist/bedrock/models/index.d.ts +6 -0
  99. package/dist/bedrock/models/modelRegistry.d.ts +71 -0
  100. package/dist/bedrock/models/modelRegistry.test.d.ts +1 -0
  101. package/dist/bedrock/services/index.d.ts +6 -0
  102. package/dist/bedrock/services/modelFailover.d.ts +109 -0
  103. package/dist/bedrock/services/modelFailover.test.d.ts +1 -0
  104. package/dist/cli/types/cli.types.d.ts +1 -1
  105. package/dist/entry.js +486 -0
  106. package/dist/functions/factories/awsServices.d.ts +70 -8
  107. package/dist/helpers/generateGitHubActionsOutput/generateGitHubActionsOutput.d.ts +27 -0
  108. package/dist/helpers/generateSarifOutput/generateSarifOutput.d.ts +57 -0
  109. package/dist/helpers/serviceSelection/serviceSelection.d.ts +1 -1
  110. package/dist/index.js +286 -61851
  111. package/dist/rules/ruleRegistry.d.ts +18 -0
  112. package/dist/rules/ruleRegistry.test.d.ts +1 -0
  113. package/dist/shared/config/environment.d.ts +8 -8
  114. package/dist/types/analysis.types.d.ts +344 -125
  115. package/dist/types/rules.types.d.ts +15 -0
  116. package/package.json +1 -3
  117. package/dist/cli/entry.js +0 -96683
  118. package/dist/helpers/acquireToken/acquireToken.d.ts +0 -2
  119. package/dist/helpers/acquireToken/acquireToken.types.d.ts +0 -10
  120. package/dist/helpers/generatePatch/generatePatch.d.ts +0 -6
  121. package/dist/helpers/getSourceFiles/getSourceFiles.d.ts +0 -4
  122. package/dist/helpers/result/result.d.ts +0 -26
  123. package/dist/shared/featureGating-simple.d.ts +0 -4
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkACMValidation: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkAppSyncAuth: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkAppSyncLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkAppSyncWaf: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkBackupPlans: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkBackupVault: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudFrontHttpsOnly: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudFrontLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudFrontTls: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudFrontWafAssociation: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudWatchAlarms: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudWatchEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCloudWatchLogRetention: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCognitoMfa: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCognitoPasswordPolicy: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkCognitoAdvancedSecurity: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -1,2 +1,2 @@
1
1
  import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
- export declare const checkEBSUnusedVolumes: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
2
+ export declare const checkEBSVolumes: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECRImmutableTags: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECRLifecycle: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECRScanning: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECSLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECSResources: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkECSSecrets: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkEKSEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkEKSLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkEKSPublicEndpoint: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkELBDeletionProtection: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkELBHttpsListeners: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkELBLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkELBSecurityPolicy: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkElastiCacheAuth: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkElastiCacheEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkElastiCacheFailover: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkGlueConnections: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkGlueEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkIamCrossAccountTrust: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkIamPermissionBoundary: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkKinesisEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkKinesisRetention: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkLambdaReservedConcurrency: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkLambdaDeadLetterQueue: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkLambdaVpcNatWarning: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkMSKAuth: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkMSKEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkMSKLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkOpenSearchAccessControl: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkOpenSearchEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkOpenSearchLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRdsBackupRetention: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRdsDeletionProtection: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRdsPublicAccess: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRedshiftEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRedshiftLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRedshiftPublicAccess: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRoute53Dnssec: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRoute53HealthChecks: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkRoute53QueryLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkS3LifecyclePolicy: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkS3Replication: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkVPCDefaultSecurityGroup: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkVPCFlowLogs: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkWafLogging: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -0,0 +1,2 @@
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../../types/analysis.types';
2
+ export declare const checkWafWebAcl: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;
@@ -1,5 +1,39 @@
1
- import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, ServiceName } from '../../types/analysis.types';
1
+ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, ServiceName, Severity } from '../../types/analysis.types';
2
2
  import type { ConstructMetadata } from './solutionConstructs/loadConstructMetadata';
3
+ export type AnalysisStatistics = {
4
+ totalResources: number;
5
+ analyzedResources: number;
6
+ totalFindings: number;
7
+ findingsBySeverity: Record<Severity, number>;
8
+ findingsByService: Record<string, number>;
9
+ analysisTimeMs: number;
10
+ servicesAnalyzed: string[];
11
+ };
3
12
  export declare const loadCloudFormationTemplate: (templatePath: string) => CloudFormationStack;
13
+ export type StaticAnalysisOptions = {
14
+ /** Services to analyze (defaults to all) */
15
+ selectedServices?: ServiceName[];
16
+ /** Solutions construct registry for pattern detection */
17
+ solutionsRegistry?: Record<string, ConstructMetadata>;
18
+ /** Whether to deduplicate findings (default: true) */
19
+ deduplicateFindings?: boolean;
20
+ /** Whether to include statistics in result (default: false) */
21
+ includeStatistics?: boolean;
22
+ };
23
+ export type StaticAnalysisResultWithStats = {
24
+ findings: AnalysisResults;
25
+ statistics: AnalysisStatistics;
26
+ };
4
27
  export declare const runStaticAnalysis: (cloudformationTemplate: CloudFormationStack, createFinding: CreateFindingFunction, selectedServices?: ServiceName[], solutionsRegistry?: Record<string, ConstructMetadata>) => AnalysisResults;
28
+ export declare const runStaticAnalysisWithOptions: (cloudformationTemplate: CloudFormationStack, createFinding: CreateFindingFunction, options?: StaticAnalysisOptions) => StaticAnalysisResultWithStats;
29
+ export type BatchAnalysisResult = {
30
+ results: Record<string, AnalysisResults>;
31
+ aggregateStatistics: AnalysisStatistics;
32
+ perStackStatistics: Record<string, AnalysisStatistics>;
33
+ };
5
34
  export declare const runBatchStaticAnalysis: (cloudformationTemplates: Record<string, CloudFormationStack>, createFinding: CreateFindingFunction, selectedServices?: ServiceName[], solutionsRegistry?: Record<string, ConstructMetadata>) => Record<string, AnalysisResults>;
35
+ export declare const runBatchStaticAnalysisWithOptions: (cloudformationTemplates: Record<string, CloudFormationStack>, createFinding: CreateFindingFunction, options?: StaticAnalysisOptions) => BatchAnalysisResult;
36
+ /**
37
+ * Get a summary string from analysis statistics
38
+ */
39
+ export declare const formatStatisticsSummary: (stats: AnalysisStatistics) => string;