cdk rule compliance checking via cdk nag integration
Integrates with AWS CDK Nag to analyze Infrastructure-as-Code constructs against prescriptive security and best-practice rules, returning violations with suppression metadata. The MCP server wraps CDK Nag's rule engine to expose compliance checks through a standardized tool interface, enabling LLM agents to validate CDK stacks without direct CLI invocation and to understand rule suppression contexts.
Unique: Exposes CDK Nag rule evaluation through MCP's tool-calling interface, allowing LLM agents to reason about compliance violations and suppressions without spawning CLI processes; integrates suppression metadata to help agents understand why rules are disabled and whether they're properly justified.
vs alternatives: Provides programmatic, agent-friendly access to CDK Nag rules with suppression context, whereas direct CDK Nag CLI usage requires parsing text output and lacks structured suppression reasoning.
prescriptive cdk architecture guidance generation
Leverages AWS Solutions Constructs patterns and CDK best practices to generate architectural recommendations for infrastructure code. The server analyzes CDK constructs and synthesized CloudFormation to suggest higher-level construct patterns, security hardening, and cost optimization strategies, returning guidance as structured recommendations that LLM agents can reason about and apply.
Unique: Integrates AWS Solutions Constructs pattern library directly into MCP tool interface, enabling LLM agents to discover and reason about higher-level construct patterns without manual documentation lookup; provides structured, actionable recommendations tied to specific construct patterns and security/cost implications.
vs alternatives: Offers programmatic access to Solutions Constructs guidance with structured output suitable for agent reasoning, whereas manual documentation review or generic CDK tutorials lack pattern-specific, context-aware recommendations.
aws solutions constructs pattern discovery and schema generation
Indexes and exposes the AWS Solutions Constructs library patterns through MCP, enabling agents to discover available constructs, their properties, and generated Bedrock Agent schemas. The server maintains a queryable catalog of construct patterns (e.g., api-lambda, s3-lambda) with metadata about use cases, security defaults, and configuration options, and can generate structured schemas for use in Bedrock Agent tool definitions.
Unique: Maintains a queryable, MCP-exposed catalog of AWS Solutions Constructs patterns with automatic Bedrock Agent schema generation, allowing agents to discover and reason about construct patterns without manual documentation parsing or schema hand-coding.
vs alternatives: Provides programmatic, agent-friendly pattern discovery with auto-generated Bedrock schemas, whereas consulting AWS documentation or construct source code requires manual schema creation and lacks structured discoverability.
cdk suppression validation and documentation enforcement
Analyzes CDK Nag rule suppressions to verify they are properly documented and justified, enforcing organizational policies around suppression usage. The server inspects suppression metadata (reason, justification, expiration) and can flag suppressions that lack documentation, are expired, or violate suppression policies, enabling governance of infrastructure code quality.
Unique: Implements configurable suppression validation policies that can be enforced through MCP, enabling organizations to govern suppression usage programmatically rather than through manual code review; integrates with CDK Nag metadata to track suppression justifications and expiration.
vs alternatives: Provides automated, policy-driven suppression validation through MCP, whereas manual code review or generic linting tools lack suppression-specific governance and cannot enforce organizational policies.
cdk construct introspection and property extraction
Exposes CDK construct internals through MCP by parsing synthesized CloudFormation and construct metadata to extract properties, dependencies, and configuration details. The server can introspect any CDK construct (L1, L2, or L3) to return its synthesized resources, property values, and relationships, enabling agents to understand and reason about infrastructure topology without direct code analysis.
Unique: Provides MCP-exposed introspection of CDK constructs by parsing synthesized CloudFormation and construct metadata, allowing agents to understand infrastructure topology and configuration without parsing TypeScript/Python code or invoking CDK CLI directly.
vs alternatives: Enables programmatic construct introspection through MCP with structured output suitable for agent reasoning, whereas manual code review or CDK CLI commands (cdk synth) require parsing and lack agent-friendly structure.
multi-language cdk code generation with construct patterns
Generates CDK infrastructure code in TypeScript or Python using AWS Solutions Constructs patterns and best practices, guided by natural language descriptions or architectural specifications. The server synthesizes construct instantiation code with proper configuration, security defaults, and error handling, producing production-ready code snippets that agents can suggest or directly apply to CDK projects.
Unique: Generates CDK code in multiple languages (TypeScript/Python) using Solutions Constructs patterns with embedded security defaults and best practices, producing agent-friendly code suggestions that can be directly integrated into CDK projects without manual refinement.
vs alternatives: Provides pattern-aware, multi-language CDK code generation through MCP, whereas generic code generation tools or manual construct documentation require developers to hand-code boilerplate and security configurations.
cdk stack dependency analysis and visualization
Analyzes CDK stack definitions to extract and visualize dependencies between constructs, stacks, and external resources, returning structured dependency graphs and cross-stack references. The server parses CDK code or synthesized CloudFormation to identify import/export relationships, parameter passing, and resource dependencies, enabling agents to understand infrastructure topology and detect circular dependencies or missing references.
Unique: Provides MCP-exposed static analysis of CDK stack dependencies with structured graph output, enabling agents to reason about infrastructure topology and detect issues without manual code review or CloudFormation parsing.
vs alternatives: Offers programmatic dependency analysis through MCP with structured output suitable for agent reasoning and visualization, whereas manual code review or AWS console inspection lacks automated detection and structured output.
cdk context value management and resolution
Manages and resolves CDK context values (availability zones, AMI IDs, VPC information) through MCP, enabling agents to query context, set context values, and understand context dependencies. The server interfaces with CDK's context system to retrieve cached values, query AWS for dynamic values, and manage context.json files, allowing agents to ensure context is properly resolved before synthesis.
Unique: Exposes CDK context management through MCP, allowing agents to query, set, and resolve context values programmatically without direct file system or AWS API calls; integrates with CDK's context caching and dynamic resolution mechanisms.
vs alternatives: Provides programmatic context management through MCP, whereas manual context.json editing or CDK CLI commands require file system access and lack agent-friendly interfaces.
+2 more capabilities