@release-gateway/aws-cdk-constructs

AWS CDK Constructs

Library of Enterprise ready CDK constructs that are standards compliant with the CIS 1.4, NIST 800-53 Rev5 and adopting the best practices set out in AWS Well Architected Reliability and Security Pillars.

This library follows the AWS CDK L1, L2 paradigms and where possible applies the minimum configuration needed to satisfy the cloud standards.

Installation

Use the package manager npm to install this package:

npm install @release-gateway/aws-cdk-constructs

Usage

import { RGApp, RGStack, RGStackProps } from "@release-gateway/aws-cdk-constructs"

class MyStackStack extends RGStack {
  constructor(scope: RGApp, id: string, props: RGStackProps) {
    super(scope, id, props);
    // Define your stack...
  }
}

// Build and synthesize
const app = new RGApp();
new MyStack(app, "my-stack", {
  serviceName: "My Service Name",
  version: "1.0.0"
})
app.synth()

Constructs

Construct name	Base class	Description of changes
RGApp	App	Includes RGGuardValidator as policy validator
RGStack	Stack	Adds standard tags and creates shared KMS key for use by child resources
RGGuardValidator	CfnGuardValidator	Policy validator configured to enforce CIS 1.4, NIST800-Rev53, Well Architecte Reliabilty Pillar and Well Architected Security Pillar best practices
RGLogGroup	LogGroup	Applies kms log encryption, removal policy and sets retention to 1 week
RGNodejsFunction	NodejsFunction	Makes VPC mandatory, creates lambda log group with encryption, configures DLQ and sets removal policy
RGQueue	Queue	Sets KMS encryption, removal policy and configures DLQ
RGTable	TableV2	Sets KMS encryption,, removal policy
RGHttpApi	HttpApi	Sets encrypted access logging and throttling defaults
RGRestApi	RestApi	Sets encrypted access and execution logging, throttling defaults, regional endpoint type

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

License

MIT

Attribution

Logo Icons

• Rocket by Gregor Cresnar from Noun Project (CC BY 3.0)
• Checklist by Kartika Sholehatin from Noun Project (CC BY 3.0)
• Code by Adiyogi from Noun Project (CC BY 3.0)