awslabs.cdk-mcp-server 0.0.31004__py3-none-any.whl → 0.0.71717__py3-none-any.whl

awslabs/cdk_mcp_server/core/server.py

@@ -49,7 +49,7 @@ mcp.resource('genai-cdk-constructs://{construct_type}')(resources.get_genai_cdk_
 mcp.tool(name='CDKGeneralGuidance')(tools.cdk_guidance)
 mcp.tool(name='ExplainCDKNagRule')(tools.explain_cdk_nag_rule)
 mcp.tool(name='CheckCDKNagSuppressions')(tools.check_cdk_nag_suppressions_tool)
-mcp.tool(name='GenerateBedrockAgentSchemaFromFile')(tools.bedrock_schema_generator_from_file)
+mcp.tool(name='GenerateBedrockAgentSchema')(tools.bedrock_schema_generator_from_file)
 mcp.tool(name='GetAwsSolutionsConstructPattern')(tools.get_aws_solutions_construct_pattern)
 mcp.tool(name='SearchGenAICDKConstructs')(tools.search_genai_cdk_constructs)
 

awslabs/cdk_mcp_server/core/tools.py

@@ -142,6 +142,65 @@ async def check_cdk_nag_suppressions_tool(
     return check_cdk_nag_suppressions(code=code, file_path=file_path)
 
 
+def save_fallback_script_to_file(
+    script_content: str, lambda_code_path: str, output_path: str
+) -> str:
+    """Save fallback script to a file instead of including it in the response.
+
+    Args:
+        script_content: The script content to save
+        lambda_code_path: Original Lambda file path (used for naming)
+        output_path: Schema output path (used for directory)
+
+    Returns:
+        Path to the saved script file
+    """
+    # Sanitize paths to prevent path traversal attacks
+    output_dir = os.path.dirname(os.path.abspath(output_path))
+
+    # Create scripts directory in the same directory as the output file
+    scripts_dir = os.path.join(output_dir, 'scripts')
+
+    try:
+        os.makedirs(scripts_dir, exist_ok=True)
+    except (OSError, IOError) as e:
+        logger.error(f'Failed to create scripts directory: {e}')
+        # Fall back to output directory if scripts dir creation fails
+        scripts_dir = output_dir
+
+    # Sanitize file name - remove any path components and ensure it's just a base name
+    lambda_file_name = os.path.basename(lambda_code_path)
+    # Remove extension and any potentially problematic characters
+    sanitized_name = os.path.splitext(lambda_file_name)[0]
+    sanitized_name = re.sub(r'[^a-zA-Z0-9_-]', '', sanitized_name)
+
+    # Generate script name
+    script_file_name = f'generate_schema_{sanitized_name}.py'
+    script_path = os.path.join(scripts_dir, script_file_name)
+
+    # Validate the resulting path is still within the expected directory
+    if not os.path.abspath(script_path).startswith(os.path.abspath(scripts_dir)):
+        logger.error(f'Path traversal attempt detected: {script_path}')
+        # Fall back to a safe default
+        script_path = os.path.join(scripts_dir, 'generate_schema.py')
+
+    try:
+        # Write the script to file with restricted permissions
+        # Open with restricted permissions from the start (only owner can read/write)
+        with open(os.open(script_path, os.O_CREAT | os.O_WRONLY, 0o600), 'w') as f:
+            f.write(script_content)
+
+        # Update to executable permissions (only for the owner)
+        os.chmod(script_path, 0o700)  # rwx------ permissions (owner only)
+
+        logger.info(f'Successfully created script at {script_path}')
+        return script_path
+
+    except (OSError, IOError) as e:
+        logger.error(f'Failed to save script: {e}')
+        return f'Error saving script: {str(e)}'
+
+
 async def bedrock_schema_generator_from_file(
     ctx: Context, lambda_code_path: str, output_path: str
 ) -> Dict[str, Any]:
@@ -171,6 +230,58 @@ async def bedrock_schema_generator_from_file(
         output_path=output_path,
     )
 
+    # If fallback script was generated, save it to a file instead of returning it in the response
+    if result.get('status') == 'error' and result.get('fallback_script'):
+        # Save the script to a file
+        script_path = save_fallback_script_to_file(
+            result['fallback_script'], lambda_code_path, output_path
+        )
+
+        # Get the output filename for use in examples
+        output_filename = os.path.basename(output_path)
+        output_dir = os.path.dirname(output_path)
+
+        # Update the result dictionary to include the script path instead of script content
+        result['fallback_script_path'] = script_path
+
+        # Remove the full script content to avoid verbose responses
+        del result['fallback_script']
+
+        # Enhanced client instructions with CDK integration example
+        result['client_instructions'] = {
+            'title': 'Schema Generation and Integration Guide',
+            'steps': [
+                f"1. Run the script at '{script_path}'",
+                f"2. The script will generate the schema file at '{output_path}'",
+                '3. In your CDK code, reference this exact schema file as shown below:',
+            ],
+            'command_suggestion': f'python {script_path}',
+            'cdk_integration_example': f"// Assuming your Lambda function is named '{os.path.basename(lambda_code_path).replace('.py', 'Lambda')}'\n"
+            f'const {os.path.basename(lambda_code_path).replace(".py", "ActionGroup")} = new bedrock.AgentActionGroup({{\n'
+            f'  name: "{os.path.basename(lambda_code_path).replace(".py", "ActionGroup")}",\n'
+            f'  description: "This action group is used for {os.path.basename(lambda_code_path).replace(".py", "")}",\n'
+            f'  executor: bedrock.ActionGroupExecutor.fromlambdaFunction({os.path.basename(lambda_code_path).replace(".py", "Lambda")}),\n'
+            f'  apiSchema: bedrock.ApiSchema.fromLocalAsset(\n'
+            f'    path.join(__dirname, "{os.path.relpath(output_dir, os.path.dirname(lambda_code_path))}", "{output_filename}")\n'
+            f'  )\n'
+            f'}});\n'
+            f'agent.addActionGroup({os.path.basename(lambda_code_path).replace(".py", "ActionGroup")});',
+            'important_notes': [
+                '✅ Use the exact openapi.json file generated by the script',
+                '✅ Adjust the path in fromLocalAsset() to point to where the schema was generated',
+                '❌ Do NOT regenerate or modify the schema manually',
+            ],
+        }
+
+        if 'instructions' in result:
+            result['instructions'] = result['instructions'].replace(
+                'save the fallback script to a file',
+                f'run the fallback script located at {script_path}',
+            )
+
+        # Update the solution message
+        result['solution'] = f'Use the fallback script at {script_path} to generate the schema'
+
     return result
 
 

awslabs/cdk_mcp_server/data/lambda_powertools_loader.py

@@ -34,14 +34,16 @@ def get_lambda_powertools_section(topic: str = '') -> str:
         topic = 'index'
 
     if topic.lower() in topic_map:
-        file_path = os.path.join(
-            os.path.dirname(__file__), 'static', 'lambda_powertools', f'{topic.lower()}.md'
-        )
+        # Fix the path to correctly point to the static directory (parent of 'data')
+        base_dir = os.path.dirname(
+            os.path.dirname(__file__)
+        )  # Go up from 'data' to get to the package root
+        file_path = os.path.join(base_dir, 'static', 'lambda_powertools', f'{topic.lower()}.md')
         try:
             with open(file_path, 'r') as f:
                 return f.read()
         except FileNotFoundError:
-            return f"Error: File for topic '{topic}' not found."
+            return f"Error: File for topic '{topic}' not found. (Looking in: {file_path})"
     else:
         # Topic not found
         topic_list = '\n'.join([f'- {t}: {desc}' for t, desc in topic_map.items() if t != 'index'])

awslabs/cdk_mcp_server/static/CDK_GENERAL_GUIDANCE.md

@@ -15,6 +15,7 @@ cdk init app --language python
 ```
 
 Proper initialization ensures:
+
 - Consistent project structure
 - Correct dependency setup
 - Appropriate tsconfig/package.json configuration
@@ -61,6 +62,7 @@ When implementing AWS infrastructure with CDK, consider these complementary appr
    - Perfect for agents, knowledge bases, vector stores, and other GenAI components
 
    **Installation:**
+
    ```typescript
    // TypeScript
    // Create or use an existing CDK application
@@ -103,67 +105,20 @@ When implementing AWS infrastructure with CDK, consider these complementary appr
 
 ## Amazon Bedrock Cross-Region Inference Profiles
 
-When working with Amazon Bedrock foundation models, many models (including Claude models, Meta Llama models, and Amazon's own Nova models) require the use of inference profiles rather than direct on-demand usage in specific regions. Failing to use inference profiles can result in errors like:
-
-```
-Invocation of model ID anthropic.claude-3-7-sonnet-20250219-v1:0 with on-demand throughput isn't supported.
-Retry your request with the ID or ARN of an inference profile that contains this model.
-```
-
-### Using Cross-Region Inference Profiles
-
-To properly configure Bedrock models with cross-region inference profiles:
+When working with Amazon Bedrock foundation models, many models (including Claude models, Meta Llama models, and Amazon's own Nova models) require the use of inference profiles rather than direct on-demand usage in specific regions.
 
-#### TypeScript
+### Key Considerations
 
-```typescript
-import { bedrock } from '@cdklabs/generative-ai-cdk-constructs';
-
-// Create a cross-region inference profile for Claude
-const claudeInferenceProfile = bedrock.CrossRegionInferenceProfile.fromConfig({
-  // Choose the appropriate region:
-  // US (default) - bedrock.CrossRegionInferenceProfileRegion.US
-  // EU - bedrock.CrossRegionInferenceProfileRegion.EU
-  // APAC - bedrock.CrossRegionInferenceProfileRegion.APAC
-  geoRegion: bedrock.CrossRegionInferenceProfileRegion.US,
-  model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_7_SONNET_V1_0
-});
+- **Required for Many Models**: Foundation models like Claude 3 often require inference profiles
+- **Regional Configuration**: Profiles are configured for specific geographic regions (US, EU, APAC)
+- **Error Prevention**: Prevents errors like "Invocation with on-demand throughput isn't supported"
+- **Implementation**: Use the `CrossRegionInferenceProfile` class from the GenAI CDK constructs
 
-// Use the inference profile with your agent or other Bedrock resources
-const agent = new bedrock.Agent(this, 'MyAgent', {
-  // Use the inference profile instead of directly using the foundation model
-  foundationModel: claudeInferenceProfile,
-  // Other agent configuration...
-});
-```
-
-#### Python
-
-```python
-from cdklabs.generative_ai_cdk_constructs import bedrock
-
-# Create a cross-region inference profile for Claude
-claude_inference_profile = bedrock.CrossRegionInferenceProfile.from_config(
-    # Choose the appropriate region:
-    # US (default) - bedrock.CrossRegionInferenceProfileRegion.US
-    # EU - bedrock.CrossRegionInferenceProfileRegion.EU
-    # APAC - bedrock.CrossRegionInferenceProfileRegion.APAC
-    geo_region=bedrock.CrossRegionInferenceProfileRegion.US,
-    model=bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_7_SONNET_V1_0
-)
-
-# Use the inference profile with your agent or other Bedrock resources
-agent = bedrock.Agent(self, "MyAgent",
-    # Use the inference profile instead of directly using the foundation model
-    foundation_model=claude_inference_profile,
-    # Other agent configuration...
-)
-```
+For detailed implementation examples, see the `genai-cdk-constructs://bedrock/profiles` resource.
 
 ### Regional Considerations
 
 - **Model Availability**: Not all foundation models are available in all regions
-- **Inference Profile Requirements**: Some models require inference profiles in specific regions
 - **Performance**: Choose the region closest to your users for optimal latency
 - **Compliance**: Consider data residency requirements when selecting regions
 
@@ -174,12 +129,14 @@ Always check the [Amazon Bedrock documentation](https://docs.aws.amazon.com/bedr
 AWS Solutions Constructs are vetted architecture patterns that combine multiple AWS services to solve common use cases following AWS Well-Architected best practices.
 
 **Key benefits:**
+
 - Accelerated Development: Implement common patterns without boilerplate code
 - Best Practices Built-in: Security, reliability, and performance best practices
 - Reduced Complexity: Simplified interfaces for multi-service architectures
 - Well-Architected: Patterns follow AWS Well-Architected Framework principles
 
 **When to use Solutions Constructs:**
+
 - Implementing common architecture patterns (e.g., API + Lambda + DynamoDB)
 - You want secure defaults and best practices applied automatically
 - You need to quickly prototype or build production-ready infrastructure
@@ -188,24 +145,115 @@ To discover available patterns, use the `GetAwsSolutionsConstructPattern` tool.
 
 ## Security with CDK Nag
 
-CDK Nag is a crucial tool for ensuring your CDK applications follow AWS security best practices. **Always apply CDK Nag to all your stacks by default.**
+CDK Nag ensures your CDK applications follow AWS security best practices. **Always apply CDK Nag to all stacks.**
+
+**When to use CDK Nag tools:**
+- **ExplainCDKNagRule**: When encountering warnings that need remediation
+- **CheckCDKNagSuppressions**: During code reviews to verify suppression justifications
 
-Key security practices to remember:
-- Follow the principle of least privilege for IAM
-- Secure S3 buckets with encryption, access controls, and policies
+Key security practices:
+- Follow least privilege for IAM
+- Secure S3 buckets with encryption and access controls
 - Implement secure authentication with Cognito
 - Secure API Gateway endpoints with proper authorization
 
-For detailed guidance, use the `CDKNagGuidance` tool.
-
 ## Operational Excellence with Lambda Powertools
 
-Always implement Lambda Powertools for:
-- Structured Logging
-- Tracing
-- Metrics
+**Always implement Lambda Powertools** for structured logging, tracing, and metrics. For detailed guidance, use the `lambda-powertools://cdk` resource.
+
+## Tool Selection Guide
+
+Match CDK tasks to appropriate tools:
+
+| Task | Tool | Common Mistakes |
+|------|------|-----------------|
+| Generate Bedrock Agent schema | GenerateBedrockAgentSchema | ❌ Missing schema generation or not running script to create openapi.json |
+| Understand CDK Nag rules | ExplainCDKNagRule | ❌ Ignoring security warnings without understanding remediation steps |
+| Find architecture patterns | GetAwsSolutionsConstructPattern | ❌ Building common patterns from scratch instead of using vetted constructs |
+| Implement GenAI features | SearchGenAICDKConstructs | ❌ Building GenAI components without specialized constructs |
+| Add Lambda observability | lambda-powertools://cdk | ❌ Missing Layer creation, structured logging and monitoring |
+| Audit CDK Nag suppressions | CheckCDKNagSuppressions | ❌ Insufficient documentation for security suppressions |
+
+## Lambda Powertools Implementation
 
-For detailed guidance, use the `LambdaPowertoolsGuidance` tool.
+> **CRITICAL:** All Lambda functions should implement Lambda Powertools for proper observability.
+
+**Key requirements:**
+- Use language-specific constructs (PythonFunction, NodejsFunction)
+- Include Powertools dependencies with appropriate extras
+- Configure required environment variables
+- Create Lambda layers when needed
+
+**Example Lambda layer for Python:**
+```typescript
+const lambdaPowertoolsLayer = new PythonLayerVersion(this, "LambdaPowertoolsLayer", {
+  entry: path.join("src", "layers", "aws_lambda_powertools"),
+  compatibleRuntimes: [Runtime.PYTHON_3_13],
+  description: "Lambda Powertools for Python",
+});
+```
+
+For complete implementation details and examples for all languages, see the [lambda-powertools://cdk](lambda-powertools://cdk) resource.
+
+## CDK Implementation Workflow
+
+```mermaid
+graph TD
+    Start([Start]) --> Init["cdk init app"]
+    
+    Init --> B{Choose Approach}
+    B -->|"Common Patterns"| C1["GetAwsSolutionsConstructPattern"]
+    B -->|"GenAI Features"| C2["SearchGenAICDKConstructs"]
+    B -->|"Custom Needs"| C3["Custom CDK Code"]
+    
+    C1 --> D1["Implement Solutions Construct"]
+    C2 --> D2["Implement GenAI Constructs"]
+    C3 --> D3["Implement Custom Resources"]
+    
+    %% Bedrock Agent with Action Groups specific flow
+    D2 -->|"For Bedrock Agents<br/>with Action Groups"| BA["Create Lambda with<br/>BedrockAgentResolver"]
+    
+    %% Schema generation flow
+    BA --> BS["GenerateBedrockAgentSchema"]
+    BS -->|"Success"| JSON["openapi.json created"]
+    BS -->|"Import Errors"| BSF["Tool generates<br/>generate_schema.py"]
+    BSF --> BSR["Run script manually:<br/>python generate_schema.py"]
+    BSR --> JSON["openapi.json created"]
+    
+    %% Use schema in Agent CDK
+    JSON --> AgentCDK["Use schema in<br/>Agent CDK code"]
+    AgentCDK --> D2
+    
+    %% Conditional Lambda Powertools implementation
+    D1 & D2 & D3 --> HasLambda{"Using Lambda<br/>Functions?"}
+    HasLambda -->|"Yes"| L["Add Lambda Powertools<br/>and create Layer"]
+    HasLambda -->|"No"| SkipL["Skip Lambda<br/>Powertools"]
+    
+    %% Rest of workflow
+    L --> Synth["cdk synth"]
+    SkipL --> Synth
+    
+    Synth --> Nag{"CDK Nag<br/>warnings?"}
+    Nag -->|Yes| E["ExplainCDKNagRule"]
+    Nag -->|No| Deploy["cdk deploy"]
+    
+    E --> Fix["Fix or Add Suppressions"]
+    Fix --> CN["CheckCDKNagSuppressions"]
+    CN --> Synth
+    
+    %% Styling with darker colors
+    classDef default fill:#424242,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef cmd fill:#4a148c,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef tool fill:#01579b,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef note fill:#1b5e20,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef output fill:#006064,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef decision fill:#5d4037,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    
+    class Init,Synth,Deploy,BSR cmd;
+    class C1,C2,BS,E,CN tool;
+    class JSON output;
+    class HasLambda,Nag decision;
+```
 
 ## Available MCP Tools
 
@@ -214,7 +262,7 @@ This MCP server provides several tools to help you implement AWS CDK best practi
 1. **CDKGeneralGuidance**: This document - general CDK best practices
 2. **ExplainCDKNagRule**: Explain a specific CDK Nag rule with AWS Well-Architected guidance
 3. **CheckCDKNagSuppressions**: Check if CDK code contains Nag suppressions that require human review
-4. **GenerateBedrockAgentSchemaFromFile**: Generate OpenAPI schema for Bedrock Agent Action Groups from Lambda functions
+4. **GenerateBedrockAgentSchema**: Generate OpenAPI schema for Bedrock Agent Action Groups from Lambda functions
 5. **GetAwsSolutionsConstructPattern**: Search and discover AWS Solutions Constructs patterns
 6. **SearchGenAICDKConstructs**: Search for GenAI CDK constructs by name or type
 

awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/actiongroups.md

@@ -32,7 +32,7 @@ For Action Groups, use the built-in OpenAPI schema generation tool provided by t
 // Using MCP client
 const result = await use_mcp_tool({
   server_name: "awslabs.cdk-mcp-server",
-  tool_name: "GenerateBedrockAgentSchemaFromFile",
+  tool_name: "GenerateBedrockAgentSchema",
   arguments: {
     lambda_code_path: "path/to/your/lambda.py",
     output_path: "path/to/output/openapi.json"

awslabs/cdk_mcp_server/static/lambda_powertools/bedrock.md

@@ -53,7 +53,7 @@ To generate a Bedrock-compatible OpenAPI schema:
 # Generate schema from a file
 result = await use_mcp_tool(
     server_name="awslabs.cdk-mcp-server",
-    tool_name="GenerateBedrockAgentSchemaFromFile",
+    tool_name="GenerateBedrockAgentSchema",
     arguments={
         "lambda_code_path": "/path/to/your/agent_actions.py",
         "output_path": "/path/to/output/schema.json"

awslabs_cdk_mcp_server-0.0.71717.dist-info/METADATA

@@ -0,0 +1,151 @@
+Metadata-Version: 2.4
+Name: awslabs.cdk-mcp-server
+Version: 0.0.71717
+Summary: An AWS CDK MCP server that provides guidance on AWS Cloud Development Kit best practices, infrastructure as code patterns, and security compliance with CDK Nag. This server offers tools to validate infrastructure designs, explain CDK Nag rules, analyze suppressions, generate Bedrock Agent schemas, and discover Solutions Constructs patterns.
+Requires-Python: >=3.10
+Requires-Dist: aws-lambda-powertools>=2.30.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: mcp[cli]>=1.6.0
+Requires-Dist: pydantic>=2.10.6
+Description-Content-Type: text/markdown
+
+# AWS CDK MCP Server
+
+MCP server for AWS Cloud Development Kit (CDK) best practices, infrastructure as code patterns, and security compliance with CDK Nag.
+
+## Features
+
+### CDK General Guidance
+
+- Prescriptive patterns with AWS Solutions Constructs and GenAI CDK libraries
+- Structured decision flow for choosing appropriate implementation approaches
+- Security automation through CDK Nag integration and Lambda Powertools
+
+### CDK Nag Integration
+
+- Work with CDK Nag rules for security and compliance
+- Explain specific CDK Nag rules with AWS Well-Architected guidance
+- Check if CDK code contains Nag suppressions that require human review
+
+### AWS Solutions Constructs
+
+- Search and discover AWS Solutions Constructs patterns
+- Find recommended patterns for common architecture needs
+- Get detailed documentation on Solutions Constructs
+
+### Generative AI CDK Constructs
+
+- Search for GenAI CDK constructs by name or type
+- Discover specialized constructs for AI/ML workloads
+- Get implementation guidance for generative AI applications
+
+### Amazon Bedrock Agent Schema Generation
+
+- Generate OpenAPI schema for Bedrock Agent Action Groups
+- Streamline the creation of Bedrock Agent schemas
+- Convert code files to compatible OpenAPI specifications
+
+## CDK Implementation Workflow
+
+This diagram provides a comprehensive view of the recommended CDK implementation workflow:
+
+```mermaid
+graph TD
+    Start([Start]) --> Init["cdk init app"]
+    
+    Init --> B{Choose Approach}
+    B -->|"Common Patterns"| C1["GetAwsSolutionsConstructPattern"]
+    B -->|"GenAI Features"| C2["SearchGenAICDKConstructs"]
+    B -->|"Custom Needs"| C3["Custom CDK Code"]
+    
+    C1 --> D1["Implement Solutions Construct"]
+    C2 --> D2["Implement GenAI Constructs"]
+    C3 --> D3["Implement Custom Resources"]
+    
+    %% Bedrock Agent with Action Groups specific flow
+    D2 -->|"For Bedrock Agents<br/>with Action Groups"| BA["Create Lambda with<br/>BedrockAgentResolver"]
+    
+    %% Schema generation flow
+    BA --> BS["GenerateBedrockAgentSchema"]
+    BS -->|"Success"| JSON["openapi.json created"]
+    BS -->|"Import Errors"| BSF["Tool generates<br/>generate_schema.py"]
+    BSF --> BSR["Run script manually:<br/>python generate_schema.py"]
+    BSR --> JSON["openapi.json created"]
+    
+    %% Use schema in Agent CDK
+    JSON --> AgentCDK["Use schema in<br/>Agent CDK code"]
+    AgentCDK --> D2
+    
+    %% Conditional Lambda Powertools implementation
+    D1 & D2 & D3 --> HasLambda{"Using Lambda<br/>Functions?"}
+    HasLambda -->|"Yes"| L["Add Lambda Powertools<br/>and create Layer"]
+    HasLambda -->|"No"| SkipL["Skip Lambda<br/>Powertools"]
+    
+    %% Rest of workflow
+    L --> Synth["cdk synth"]
+    SkipL --> Synth
+    
+    Synth --> Nag{"CDK Nag<br/>warnings?"}
+    Nag -->|Yes| E["ExplainCDKNagRule"]
+    Nag -->|No| Deploy["cdk deploy"]
+    
+    E --> Fix["Fix or Add Suppressions"]
+    Fix --> CN["CheckCDKNagSuppressions"]
+    CN --> Synth
+    
+    %% Styling with darker colors
+    classDef default fill:#424242,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef cmd fill:#4a148c,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef tool fill:#01579b,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef note fill:#1b5e20,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef output fill:#006064,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    classDef decision fill:#5d4037,stroke:#ffffff,stroke-width:1px,color:#ffffff;
+    
+    class Init,Synth,Deploy,BSR cmd;
+    class C1,C2,BS,E,CN tool;
+    class JSON output;
+    class HasLambda,Nag decision;
+```
+
+## Tools and Resources
+
+- **CDK Nag Rules**: Access rule packs via `cdk-nag://rules/{rule_pack}`
+- **Lambda Powertools**: Get guidance on Lambda Powertools via `lambda-powertools://{topic}`
+- **AWS Solutions Constructs**: Access patterns via `aws-solutions-constructs://{pattern_name}`
+- **GenAI CDK Constructs**: Access documentation via `genai-cdk-constructs://{construct_type}/{construct_name}`
+
+## Prerequisites
+
+1. Install `uv` from [Astral](https://docs.astral.sh/uv/getting-started/installation/) or the [GitHub README](https://github.com/astral-sh/uv#installation)
+2. Install Python using `uv python install 3.10`
+
+## Installation
+
+Here are some ways you can work with MCP across AWS, and we'll be adding support to more products including Amazon Q Developer CLI soon: (e.g. for Amazon Q Developer CLI MCP, `~/.aws/amazonq/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "awslabs.cdk-mcp-server": {
+      "command": "uvx",
+      "args": ["awslabs.cdk-mcp-server@latest"],
+      "env": {
+        "FASTMCP_LOG_LEVEL": "ERROR"
+      },
+      "disabled": false,
+      "autoApprove": []
+    }
+  }
+}
+```
+
+## Security Considerations
+
+When using this MCP server, you should consider:
+
+- Reviewing all CDK Nag warnings and errors manually
+- Fixing security issues rather than suppressing them whenever possible
+- Documenting clear justifications for any necessary suppressions
+- Using the CheckCDKNagSuppressions tool to verify no unauthorized suppressions exist
+
+Before applying CDK NAG Suppressions, you should consider conducting your own independent assessment to ensure that your use would comply with your own specific security and quality control practices and standards, as well as the local laws, rules, and regulations that govern you and your content.

{awslabs_cdk_mcp_server-0.0.31004.dist-info → awslabs_cdk_mcp_server-0.0.71717.dist-info}/RECORD

@@ -4,40 +4,21 @@ awslabs/cdk_mcp_server/server.py,sha256=KKNPh9zTvUy6uCAzeR2djtJqFCzDkkihUb-9dP_j
 awslabs/cdk_mcp_server/core/__init__.py,sha256=wMYtq0d53XTzMmilxj-crP-I445ijE_8A7MH6wL1Fm8,47
 awslabs/cdk_mcp_server/core/resources.py,sha256=nduzytgmiAb3C-RuqcexWgEl_APUYymTQDmZhkAl-NQ,9593
 awslabs/cdk_mcp_server/core/search_utils.py,sha256=Nz8ftv4w9O_1fvCwIJL36GoBMOtHP9XZnTnVhUxVUko,5585
-awslabs/cdk_mcp_server/core/server.py,sha256=1Zc_n4whZJq9q2_eVrmvqnmNaTKL4ftwbiVHmPJ3JAs,2594
-awslabs/cdk_mcp_server/core/tools.py,sha256=dw_RJ-IvfWsaicj6bp_UvyGjtd2hLicXL4RC5doaVk4,11644
+awslabs/cdk_mcp_server/core/server.py,sha256=64pM6HcJvGOS3J9AmIx27smpdkHDaBUDjFY-XK3WPwQ,2586
+awslabs/cdk_mcp_server/core/tools.py,sha256=jDkUB2mS9HEAV2C6e9nMikBTtIphPbqC3uzKyhlONPo,16991
 awslabs/cdk_mcp_server/data/__init__.py,sha256=ksA1se4fyvTIb4K7lND-C66ouriFtjyZU96Q88nl6w4,47
 awslabs/cdk_mcp_server/data/cdk_nag_parser.py,sha256=k3OzuVyoYUivowt_mEO0cp1YwTOgzTmVyg_0mcanDt8,10900
 awslabs/cdk_mcp_server/data/construct_descriptions.py,sha256=br5gOa5M8Nhv3HrHqrHGXCwQRTu4ZeMAo85bEhzCuMM,2605
 awslabs/cdk_mcp_server/data/genai_cdk_loader.py,sha256=Q_-tnYu9VNe9lbAxN6qfvBQWYJJjYXht63ko9x-IH-Y,15507
-awslabs/cdk_mcp_server/data/lambda_powertools_loader.py,sha256=sQfZrmA2hZdd1NSK0hCb5l4kl7jlQ3xhxs28KgEB4Dw,1630
+awslabs/cdk_mcp_server/data/lambda_powertools_loader.py,sha256=XfhWST0-f050nBB4zPMVFahgE1m21PXdhD9WaYAz2yg,1834
 awslabs/cdk_mcp_server/data/schema_generator.py,sha256=vQaZiasOyVam0NNmtzo6D6hy7ynsndRR2I56OBwQlag,27879
 awslabs/cdk_mcp_server/data/solutions_constructs_parser.py,sha256=SL3ZjvCSALmiQlHEMsoDbnbtKxFAPl-mTurciCgj3G8,27656
-awslabs/cdk_mcp_server/static/CDK_GENERAL_GUIDANCE.md,sha256=bZJRzb-14lVOIceQnUTvzb4_QoPg2g3O4NgPavXYiz0,9919
+awslabs/cdk_mcp_server/static/CDK_GENERAL_GUIDANCE.md,sha256=aFUZvhfELhS7UEffFIzJM-tRS8a7Aj13X9O7FnGN0UI,12245
 awslabs/cdk_mcp_server/static/CDK_NAG_GUIDANCE.md,sha256=zJtHJp9ruaaJ-xa68k9kDrPmEaXpiWCZZf7JIy8NK0w,5839
 awslabs/cdk_mcp_server/static/__init__.py,sha256=JJ9ptA-cG8muKCoJgjPKUoCc2q2ks8gBJNbjJTHZS3o,194
-awslabs/cdk_mcp_server/static/bedrock/bedrockguardrails.md,sha256=CX00B7XgDpLbVxvf6B-a13O4NERAJMiaPPeTuKK-8Sw,7386
-awslabs/cdk_mcp_server/static/bedrock/profiles.md,sha256=xxPnEkZ0tJAFKomMuAPLm3EtlQFku6MR2nPu4VoyppE,7195
-awslabs/cdk_mcp_server/static/bedrock/agent/actiongroups.md,sha256=qm6UCCfKurtvNO52g1a6H1N9iBZx-KTCf4SbCK2QQXw,4865
-awslabs/cdk_mcp_server/static/bedrock/agent/alias.md,sha256=eyTmjmHyQbuR5CbFpp2qrEcEqw2l9pMupWERRVksVNw,1293
-awslabs/cdk_mcp_server/static/bedrock/agent/collaboration.md,sha256=nNu30F5ydUbb7HtboUWNhp0hOnQMw8q8shCUjMDwT_A,3616
-awslabs/cdk_mcp_server/static/bedrock/agent/creation.md,sha256=BzpVJkRs_q1ZkW8LnIEh7--57OnNmHHdPCygfGJAks0,6216
-awslabs/cdk_mcp_server/static/bedrock/agent/custom_orchestration.md,sha256=ylMTq3PT3vHnrul_boLuQIGQFuk_Y0evdImp_pLY7rY,2983
-awslabs/cdk_mcp_server/static/bedrock/agent/overview.md,sha256=4FLhC3CC01W9Gpw4S0Z6yWPnM86p2nJ_dxQ1yU4Xsxw,2921
-awslabs/cdk_mcp_server/static/bedrock/agent/prompt_override.md,sha256=ypmKxlO5WIYqUh2gYDzo1Mwzso_HwSkzrMHeDU473C8,2520
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/chunking.md,sha256=TpLXPJso6c4MhWUepX0WsX3FE6FOIsFBPcE28B-3iKM,3203
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/datasources.md,sha256=iHQ086zHzkqHoKLi7pmyMxf0oH02UVHf_GAid6EMdeE,7147
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/kendra.md,sha256=sYbhIAaGjuJ2lifP0xvDXacDEVFC24Gl9giAI6RF9bo,2786
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/overview.md,sha256=AGLS6146UufRTC80EAyAviBhAtb7hFcbMz3tWFviPOc,5167
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/parsing.md,sha256=AQ6TTO5HxKqhtVdv1bM6GjHyDgOICaNi5NtDT9Dxp10,1155
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/transformation.md,sha256=I5Lkn0giUr5n0lTxqjtUsoHNkom6AJtxEnvlarH_54Y,813
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/vector/aurora.md,sha256=CjiJDoaui2H4-nu99Sem4rK_8pQGB_ciI5So5pKWMSQ,5766
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/vector/creation.md,sha256=jXxrwnor7_YUJc9sYCHjrQnCnHQrVItPI7YttcX-mX8,4491
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/vector/opensearch.md,sha256=mM8nILHaFaLfHUaIl7c8Eh0NFx8Z5H4yu5LbC-DmnSU,1368
-awslabs/cdk_mcp_server/static/bedrock/knowledgebases/vector/pinecone.md,sha256=OnKjSXB6CHBxnXJFGbsIRqpLyA6_S2AiHOJslxQVaOw,2053
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/bedrockguardrails.md,sha256=CX00B7XgDpLbVxvf6B-a13O4NERAJMiaPPeTuKK-8Sw,7386
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/profiles.md,sha256=xxPnEkZ0tJAFKomMuAPLm3EtlQFku6MR2nPu4VoyppE,7195
-awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/actiongroups.md,sha256=qm6UCCfKurtvNO52g1a6H1N9iBZx-KTCf4SbCK2QQXw,4865
+awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/actiongroups.md,sha256=m40RkxPkX3BI4PHEBQHHPOAAK0rgdPkLVi37F3JcLZQ,4857
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/alias.md,sha256=eyTmjmHyQbuR5CbFpp2qrEcEqw2l9pMupWERRVksVNw,1293
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/collaboration.md,sha256=nNu30F5ydUbb7HtboUWNhp0hOnQMw8q8shCUjMDwT_A,3616
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/agent/creation.md,sha256=BzpVJkRs_q1ZkW8LnIEh7--57OnNmHHdPCygfGJAks0,6216
@@ -56,7 +37,7 @@ awslabs/cdk_mcp_server/static/genai_cdk/bedrock/knowledgebases/vector/opensearch
 awslabs/cdk_mcp_server/static/genai_cdk/bedrock/knowledgebases/vector/pinecone.md,sha256=OnKjSXB6CHBxnXJFGbsIRqpLyA6_S2AiHOJslxQVaOw,2053
 awslabs/cdk_mcp_server/static/genai_cdk/opensearch-vectorindex/overview.md,sha256=0aSuBwX4ubI5WqwEfrnX1MH2UJlJOzdXZQ003fRIrGM,4121
 awslabs/cdk_mcp_server/static/genai_cdk/opensearchserverless/overview.md,sha256=aUO1BRana_xqUPENP3GQyOSCAvV9mI-ZWls7x0g8ruA,746
-awslabs/cdk_mcp_server/static/lambda_powertools/bedrock.md,sha256=Fu54j6sKHdNCUl8FnrIN02kXoTZzdS1g91lURG0ORA4,4292
+awslabs/cdk_mcp_server/static/lambda_powertools/bedrock.md,sha256=iqmnsoOQlXHOwsvF9U5quIclIBQvv4mEf2TGFnZI_SA,4284
 awslabs/cdk_mcp_server/static/lambda_powertools/cdk.md,sha256=XBj-31YcphHb1BjCYz4nRpAfPuVJVRmDYI2K7e6Ti8E,3826
 awslabs/cdk_mcp_server/static/lambda_powertools/dependencies.md,sha256=nZ2Fv54rG1rUmD_YHkM9h5VNvB81-Hk8Qx3ZNQSFZLY,1520
 awslabs/cdk_mcp_server/static/lambda_powertools/index.md,sha256=yivjInZAZ3tENKGrrAv7geICzUvKUTskWuaNj9nuPbI,1819
@@ -64,9 +45,7 @@ awslabs/cdk_mcp_server/static/lambda_powertools/insights.md,sha256=t-lgyx2AstqXu
 awslabs/cdk_mcp_server/static/lambda_powertools/logging.md,sha256=6CSgD8QB3Bs4s_x4RnbKwZoWvG6aG4etCnmDH6HU9XY,1797
 awslabs/cdk_mcp_server/static/lambda_powertools/metrics.md,sha256=XpQHtNSQRKN3GUqQWkk1lTfQSRC0LmW6VoX1dlwEvnQ,3182
 awslabs/cdk_mcp_server/static/lambda_powertools/tracing.md,sha256=Q3dSCvgktb9sUsuuQ5ONU2Qdb1OTwbNOYpK--MDzBNw,2539
-awslabs/cdk_mcp_server/static/opensearch-vectorindex/overview.md,sha256=0aSuBwX4ubI5WqwEfrnX1MH2UJlJOzdXZQ003fRIrGM,4121
-awslabs/cdk_mcp_server/static/opensearchserverless/overview.md,sha256=aUO1BRana_xqUPENP3GQyOSCAvV9mI-ZWls7x0g8ruA,746
-awslabs_cdk_mcp_server-0.0.31004.dist-info/METADATA,sha256=HkaHCbgnYTWxRslpcr2GjyS5UIQnGaLQHGN5Z3TIHnE,3591
-awslabs_cdk_mcp_server-0.0.31004.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-awslabs_cdk_mcp_server-0.0.31004.dist-info/entry_points.txt,sha256=LertzmID_mUU1YYZPySAF1IY1zE7ySTvzFxiGyo3VjY,78
-awslabs_cdk_mcp_server-0.0.31004.dist-info/RECORD,,
+awslabs_cdk_mcp_server-0.0.71717.dist-info/METADATA,sha256=4CQDjLXNh-UYcjQUduSq8XetSx0rld1iwQPqyzq0Bw4,5979
+awslabs_cdk_mcp_server-0.0.71717.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+awslabs_cdk_mcp_server-0.0.71717.dist-info/entry_points.txt,sha256=LertzmID_mUU1YYZPySAF1IY1zE7ySTvzFxiGyo3VjY,78
+awslabs_cdk_mcp_server-0.0.71717.dist-info/RECORD,,