secure-cdk

Security abstraction for AWS CDK library. Create AWS resources with best security practices applied for you.

Description

The purpose of this package is to enforce best security practices for AWS services. It uses AWS CDK under the hood to create resources and won't without it.

You may find that some of the rules are too strict for your use cases, but you always have a possibility be explicitly overriding them. If you do that, you will get a warning that will remind you about the security violations.

Installation

npm i secure-cdk --save-dev

or

yarn add secure-cdk -D

Usage

S3 Bucket

By using SecureBucket class instead of the AWS's Bucket construct, you are getting the following properties set by default.

Property	Value	Description	AWS CDK Default
enforceSSL	true	Enforces SSL for requests.	false
publicReadAccess	false	Grants public read access to all objects in the bucket.	false
encryption	Encrypted (S3 managed)	The kind of server-side encryption to apply to this bucket.	Unencrypted

import { SecureBucket } from 'secure-cdk';

const mySiteBucket = new SecureBucket(this, 'myBucket', {
  bucketName: 'my-bucket-name',
  websiteIndexDocument: 'index.html'
});

CloudFront Distribution