cdk-insights 1.23.0 → 1.25.0

package/dist/analysis/static/awsServices/APIGateway/auth/apiGatewayAuthChecks.d.ts

@@ -0,0 +1,2 @@
+import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, RuleContext } from '../../../../../types/analysis.types';
+export declare const checkApiGatewayMethodAuth: (template: CloudFormationStack, createFinding: CreateFindingFunction, ruleContext?: RuleContext) => AnalysisResults;

package/dist/analysis/static/awsServices/APIGateway/auth/apiGatewayAuthChecks.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/analysis/static/awsServices/DynamoDB/encryption/dynamoDBEncryptionChecks.d.ts

@@ -0,0 +1,2 @@
+import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, RuleContext } from '../../../../../types/analysis.types';
+export declare const checkDynamoDbEncryption: (template: CloudFormationStack, createFinding: CreateFindingFunction, ruleContext?: RuleContext) => AnalysisResults;

package/dist/analysis/static/awsServices/DynamoDB/encryption/dynamoDBEncryptionChecks.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/analysis/static/awsServices/EventBridge/policy/eventBusPolicyChecks.d.ts

@@ -0,0 +1,2 @@
+import type { AnalysisResults, CloudFormationStack, CreateFindingFunction, RuleContext } from '../../../../../types/analysis.types';
+export declare const checkEventBusPolicy: (template: CloudFormationStack, createFinding: CreateFindingFunction, ruleContext?: RuleContext) => AnalysisResults;

package/dist/analysis/static/awsServices/EventBridge/policy/eventBusPolicyChecks.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/commands/fix.d.ts

@@ -0,0 +1,9 @@
+import type { CommandModule } from 'yargs';
+interface FixCommandArgs {
+    rule?: string;
+    dryRun?: boolean;
+    apply?: boolean;
+    all?: boolean;
+}
+export declare const fixCommand: CommandModule<Record<string, unknown>, FixCommandArgs>;
+export {};

package/dist/cli/types/cli.types.d.ts

@@ -24,6 +24,12 @@ export interface AnalyzeCommandArgs {
     warnSensitive?: boolean;
     prComment?: boolean;
     model?: string;
+    /** Filter findings to only show those new since the saved baseline. */
+    diff?: boolean;
+    /** Save current findings as the new baseline (suppresses fail-on-critical). */
+    writeBaseline?: boolean;
+    /** Override path to baseline file (default `.cdk-insights-baseline.json`). */
+    baseline?: string;
     cache?: {
         enabled?: boolean;
         ttl?: number;
@@ -115,6 +121,19 @@ export interface UserConfig {
          */
         batchSize?: number;
     };
+    /**
+     * Anonymous, aggregate-only telemetry. Default is OFF — nothing leaves
+     * the machine unless the user opts in. When `enabled: true`, the CLI
+     * sends three event types to the backend (`baseline_written`,
+     * `diff_run`, `fix_run`) carrying severity counts, rule-id histograms,
+     * and timing. Resource names, construct paths, file paths, and code
+     * are never included. The license ID is sha256-hashed before
+     * transmission so even the operator of the backend can't tie events
+     * back to a specific customer without the original key.
+     */
+    telemetry?: {
+        enabled?: boolean;
+    };
     [key: string]: unknown;
 }
 export interface AnalysisSuccess {