cdk-nag 2.35.107__py3-none-any.whl → 2.36.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- cdk_nag/__init__.py +56 -0
- cdk_nag/_jsii/__init__.py +1 -1
- cdk_nag/_jsii/cdk-nag@2.36.0.jsii.tgz +0 -0
- {cdk_nag-2.35.107.dist-info → cdk_nag-2.36.0.dist-info}/METADATA +2 -1
- cdk_nag-2.36.0.dist-info/RECORD +10 -0
- cdk_nag/_jsii/cdk-nag@2.35.107.jsii.tgz +0 -0
- cdk_nag-2.35.107.dist-info/RECORD +0 -10
- {cdk_nag-2.35.107.dist-info → cdk_nag-2.36.0.dist-info}/LICENSE +0 -0
- {cdk_nag-2.35.107.dist-info → cdk_nag-2.36.0.dist-info}/NOTICE +0 -0
- {cdk_nag-2.35.107.dist-info → cdk_nag-2.36.0.dist-info}/WHEEL +0 -0
- {cdk_nag-2.35.107.dist-info → cdk_nag-2.36.0.dist-info}/top_level.txt +0 -0
cdk_nag/__init__.py
CHANGED
@@ -29,6 +29,7 @@ See [RULES](./RULES.md) for more information on all the available packs.
|
|
29
29
|
3. [NIST 800-53 rev 4](./RULES.md#nist-800-53-rev-4)
|
30
30
|
4. [NIST 800-53 rev 5](./RULES.md#nist-800-53-rev-5)
|
31
31
|
5. [PCI DSS 3.2.1](./RULES.md#pci-dss-321)
|
32
|
+
6. [Serverless](./RULES.md#serverless)
|
32
33
|
|
33
34
|
[RULES](./RULES.md) also includes a collection of [additional rules](./RULES.md#additional-rules) that are not currently included in any of the pre-built NagPacks, but are still available for inclusion in custom NagPacks.
|
34
35
|
|
@@ -3307,6 +3308,54 @@ class RegexAppliesTo:
|
|
3307
3308
|
)
|
3308
3309
|
|
3309
3310
|
|
3311
|
+
class ServerlessChecks(
|
3312
|
+
NagPack,
|
3313
|
+
metaclass=jsii.JSIIMeta,
|
3314
|
+
jsii_type="cdk-nag.ServerlessChecks",
|
3315
|
+
):
|
3316
|
+
'''Serverless Checks are a compilation of rules to validate infrastructure-as-code template against recommended practices.'''
|
3317
|
+
|
3318
|
+
def __init__(
|
3319
|
+
self,
|
3320
|
+
*,
|
3321
|
+
additional_loggers: typing.Optional[typing.Sequence[INagLogger]] = None,
|
3322
|
+
log_ignores: typing.Optional[builtins.bool] = None,
|
3323
|
+
report_formats: typing.Optional[typing.Sequence[NagReportFormat]] = None,
|
3324
|
+
reports: typing.Optional[builtins.bool] = None,
|
3325
|
+
suppression_ignore_condition: typing.Optional[INagSuppressionIgnore] = None,
|
3326
|
+
verbose: typing.Optional[builtins.bool] = None,
|
3327
|
+
) -> None:
|
3328
|
+
'''
|
3329
|
+
:param additional_loggers: Additional NagLoggers for logging rule validation outputs.
|
3330
|
+
:param log_ignores: Whether or not to log suppressed rule violations as informational messages (default: false).
|
3331
|
+
:param report_formats: If reports are enabled, the output formats of compliance reports in the App's output directory (default: only CSV).
|
3332
|
+
:param reports: Whether or not to generate compliance reports for applied Stacks in the App's output directory (default: true).
|
3333
|
+
:param suppression_ignore_condition: Conditionally prevent rules from being suppressed (default: no user provided condition).
|
3334
|
+
:param verbose: Whether or not to enable extended explanatory descriptions on warning, error, and logged ignore messages (default: false).
|
3335
|
+
'''
|
3336
|
+
props = NagPackProps(
|
3337
|
+
additional_loggers=additional_loggers,
|
3338
|
+
log_ignores=log_ignores,
|
3339
|
+
report_formats=report_formats,
|
3340
|
+
reports=reports,
|
3341
|
+
suppression_ignore_condition=suppression_ignore_condition,
|
3342
|
+
verbose=verbose,
|
3343
|
+
)
|
3344
|
+
|
3345
|
+
jsii.create(self.__class__, self, [props])
|
3346
|
+
|
3347
|
+
@jsii.member(jsii_name="visit")
|
3348
|
+
def visit(self, node: _constructs_77d1e7e8.IConstruct) -> None:
|
3349
|
+
'''All aspects can visit an IConstruct.
|
3350
|
+
|
3351
|
+
:param node: -
|
3352
|
+
'''
|
3353
|
+
if __debug__:
|
3354
|
+
type_hints = typing.get_type_hints(_typecheckingstub__45822d91dde0925f0c42dd49aa5abb9d5fd6391e1a4d49074f95718261fd8ff8)
|
3355
|
+
check_type(argname="argument node", value=node, expected_type=type_hints["node"])
|
3356
|
+
return typing.cast(None, jsii.invoke(self, "visit", [node]))
|
3357
|
+
|
3358
|
+
|
3310
3359
|
@jsii.implements(INagSuppressionIgnore)
|
3311
3360
|
class SuppressionIgnoreAlways(
|
3312
3361
|
metaclass=jsii.JSIIMeta,
|
@@ -4122,6 +4171,7 @@ __all__ = [
|
|
4122
4171
|
"NagSuppressions",
|
4123
4172
|
"PCIDSS321Checks",
|
4124
4173
|
"RegexAppliesTo",
|
4174
|
+
"ServerlessChecks",
|
4125
4175
|
"SuppressionIgnoreAlways",
|
4126
4176
|
"SuppressionIgnoreAnd",
|
4127
4177
|
"SuppressionIgnoreErrors",
|
@@ -4446,6 +4496,12 @@ def _typecheckingstub__b8453471acfa85ba5ddf5a90e23aaf4fd9026a9d972c7f9445fcd249f
|
|
4446
4496
|
"""Type checking stubs"""
|
4447
4497
|
pass
|
4448
4498
|
|
4499
|
+
def _typecheckingstub__45822d91dde0925f0c42dd49aa5abb9d5fd6391e1a4d49074f95718261fd8ff8(
|
4500
|
+
node: _constructs_77d1e7e8.IConstruct,
|
4501
|
+
) -> None:
|
4502
|
+
"""Type checking stubs"""
|
4503
|
+
pass
|
4504
|
+
|
4449
4505
|
def _typecheckingstub__aa33f04446bcf1cb8a24a2c7daab296b89d9593c017b8c38f99d9a0d452fa725(
|
4450
4506
|
trigger_message: builtins.str,
|
4451
4507
|
) -> None:
|
cdk_nag/_jsii/__init__.py
CHANGED
Binary file
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Metadata-Version: 2.1
|
2
2
|
Name: cdk-nag
|
3
|
-
Version: 2.
|
3
|
+
Version: 2.36.0
|
4
4
|
Summary: Check CDK v2 applications for best practices using a combination on available rule packs.
|
5
5
|
Home-page: https://github.com/cdklabs/cdk-nag.git
|
6
6
|
Author: Arun Donti<donti@amazon.com>
|
@@ -56,6 +56,7 @@ See [RULES](./RULES.md) for more information on all the available packs.
|
|
56
56
|
3. [NIST 800-53 rev 4](./RULES.md#nist-800-53-rev-4)
|
57
57
|
4. [NIST 800-53 rev 5](./RULES.md#nist-800-53-rev-5)
|
58
58
|
5. [PCI DSS 3.2.1](./RULES.md#pci-dss-321)
|
59
|
+
6. [Serverless](./RULES.md#serverless)
|
59
60
|
|
60
61
|
[RULES](./RULES.md) also includes a collection of [additional rules](./RULES.md#additional-rules) that are not currently included in any of the pre-built NagPacks, but are still available for inclusion in custom NagPacks.
|
61
62
|
|
@@ -0,0 +1,10 @@
|
|
1
|
+
cdk_nag/__init__.py,sha256=EbzX06NzaClPgUccSZ2OlZWPpgSLq7pfXRUoeahYFCM,175404
|
2
|
+
cdk_nag/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
|
3
|
+
cdk_nag/_jsii/__init__.py,sha256=WlTDQfzmp5dUtis0Bo8DG86by896ydYmXMhStt1dkdo,1427
|
4
|
+
cdk_nag/_jsii/cdk-nag@2.36.0.jsii.tgz,sha256=Cbf4cty7OrHiQrLy5Pk5bAFzCuk8eX8zKj--B8TvnQ4,721576
|
5
|
+
cdk_nag-2.36.0.dist-info/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
|
6
|
+
cdk_nag-2.36.0.dist-info/METADATA,sha256=1d3sktYXEXXpHPteTJTRKS2LpaIKQm-CjjuntG2kfNc,23380
|
7
|
+
cdk_nag-2.36.0.dist-info/NOTICE,sha256=iY5F0xzQe4KtUQk3HOYeKSkIN2Xty0Y_tmkXNX4mzdw,105
|
8
|
+
cdk_nag-2.36.0.dist-info/WHEEL,sha256=iAkIy5fosb7FzIOwONchHf19Qu7_1wCWyFNR5gu9nU0,91
|
9
|
+
cdk_nag-2.36.0.dist-info/top_level.txt,sha256=uA4ZNR24n8x6ieIX39y6e7sTFkC--8tF78mNKV88Ce0,8
|
10
|
+
cdk_nag-2.36.0.dist-info/RECORD,,
|
Binary file
|
@@ -1,10 +0,0 @@
|
|
1
|
-
cdk_nag/__init__.py,sha256=V4JCxTMO-YLZznstx7LrGsdpTr0Z8MyKZNsZB9scpG0,172775
|
2
|
-
cdk_nag/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
|
3
|
-
cdk_nag/_jsii/__init__.py,sha256=7yBYljB0yjbbI39VhxAfI0F5b1Ya5mbyTE7DLIaptH4,1431
|
4
|
-
cdk_nag/_jsii/cdk-nag@2.35.107.jsii.tgz,sha256=qGpFhotoDnuzmPg2CMuXpt-F-C_s9HRe7HjiW0Qzu4k,694650
|
5
|
-
cdk_nag-2.35.107.dist-info/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
|
6
|
-
cdk_nag-2.35.107.dist-info/METADATA,sha256=0WPOkW2Na85NOxMKc7RQYi-aulSIqjFzm6K80-XR-Mk,23343
|
7
|
-
cdk_nag-2.35.107.dist-info/NOTICE,sha256=iY5F0xzQe4KtUQk3HOYeKSkIN2Xty0Y_tmkXNX4mzdw,105
|
8
|
-
cdk_nag-2.35.107.dist-info/WHEEL,sha256=iAkIy5fosb7FzIOwONchHf19Qu7_1wCWyFNR5gu9nU0,91
|
9
|
-
cdk_nag-2.35.107.dist-info/top_level.txt,sha256=uA4ZNR24n8x6ieIX39y6e7sTFkC--8tF78mNKV88Ce0,8
|
10
|
-
cdk_nag-2.35.107.dist-info/RECORD,,
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|