Skip to main content
terminal ● cdk-insights analyze
✓ 52 issues found
💡 134 Insights

Scroll down to learn more

Scroll Down Arrow

Write code.
Get insights.
Repeat.

CDK Insights is built to use AI and static analysis to audit your AWS CDK stacks, surface hidden issues, and suggest best practices — before they become problems

Check Mark Icon
Free forever static analysis
Star Icon
20+ AWS services supported
Shield Icon
No registration required

Effortless, Powerful Features

CDK Insights is packed with features that actually matter for CDK developers. No fluff, just powerful tools to make your infrastructure better.

Free Forever
Static Analysis

Free Forever Static Analysis

  • Checkmark Icon
    Security & compliance checks with CDK Nag
  • Checkmark Icon
    Linting and best practices
  • Checkmark Icon
    Fast feedback in terminal or CI
  • Checkmark Icon
    No credit card required
See QuickstartArrow Right Icon
🚧Coming Soon
Pro & AI
AI Analysis

AI-Powered Deep Analysis

  • Checkmark Icon
    Evaluates against AWS Well-Architected Framework
  • Checkmark Icon
    STRIDE threat modeling
  • Checkmark Icon
    Actionable, context-aware recommendations
  • Checkmark Icon
    JSON, Markdown, Table, or Summary output
Why Choose CDK Insights?Arrow Right Icon

How It Works

CDK Insights is simple to use. Just run a command, and it will analyze your CDK stacks to find potential issues and suggest improvements.

1

Install & Run

Get started instantly with our CLI tool. No registration required, no complex setup—just immediate analysis of your CDK stacks.

Terminal
$ npm install -g cdk-insights
$ cdk-insights analyze
🔍 Analyzing your infrastructure...
🚧Coming Soon
2

AI Analysis

Advanced AI scans your infrastructure across 20+ AWS services

AI Brain Analysis Icon
Check Mark Icon
20+
AWS Services
3

Security

Identify vulnerabilities and compliance issues

CRITICAL
S3 Public Access
MEDIUM
IAM Permissions
LOW
Encryption
8
Issues Found
💰

Cost Savings

Optimize resources and reduce AWS spend

↓
-35%
Average Savings
Lambda-$156/mo
RDS-$89/mo
📊

Export

Share findings with your team

📊
JSON Data
📝
Markdown Reports
📋
Table Output
🧠AI-Powered Analysis🚧Coming Soon

Beyond Static Analysis

I've integrated advanced AI using AWS Bedrock to deliver context-aware recommendations, intelligent code suggestions, and architectural insights that understand your specific infrastructure. Access your analysis history and manage licenses through my web dashboard.

📊

Static Analysis

Fast & Free Forever

Checkmark

Rule-based Security Checks

20+ AWS services covered

Checkmark

Cost Optimization

Find obvious savings opportunities

Checkmark

Instant Results

Analysis in seconds

🚧Coming Soon
🧠

AI Analysis

Powered by AWS Bedrock

Checkmark

Context-Aware Recommendations

Understands your specific infrastructure

Checkmark

Custom Code Suggestions

Tailored fixes with code examples

Checkmark

Architectural Pattern Recognition

Spots complex multi-resource issues

Checkmark

Natural Language Explanations

Clear explanations of issues and solutions

Checkmark

Web Dashboard Access

View analysis history and manage licenses

See AI Analysis in Action

Here's how AI goes beyond static analysis to provide intelligent, context-aware recommendations

⚠️

Static Analysis

Rule-based detection

⚠️ MEDIUM: Lambda function has high memory allocation

Memory usage may be excessive for this function

💡 Recommendation: Consider reducing memory allocation

🚧Coming Soon
🧠

AI Analysis

Context-aware insights

⚠️ MEDIUM: Lambda function has high memory allocation

Memory usage may be excessive for this function

🧠 AI Insight: Based on your function's 30s timeout and SQS message processing, 3008MB is likely over-provisioned. Most SQS processing functions work efficiently with 512-1024MB.

💡 Smart Suggestion: Reduce to 1024MB and monitor

memorySize: 1024

Powered by Advanced AI Models

CDK Insights leverages cutting-edge AI models via AWS Bedrock for intelligent infrastructure analysis

🦙

Llama 3.1 70B

Primary Analysis Engine

Meta's advanced large language model provides comprehensive infrastructure analysis with deep understanding of AWS services, security patterns, and optimization opportunities.

🎯

Claude 3 Sonnet

Complex Pattern Recognition

Anthropic's Claude excels at analyzing complex architectural patterns, providing nuanced recommendations for sophisticated infrastructure designs and multi-service integrations.

🔒

Privacy-First AI Analysis

Your code never leaves your environment

Checkmark

Redacted CloudFormation Only

Only anonymized infrastructure templates are analyzed

Checkmark

Source Code Stays Local

Your CDK source code never leaves your machine

Checkmark

Automatic Redaction

Sensitive data automatically removed before analysis

Checkmark

AWS Bedrock Security

Enterprise-grade security from AWS

Why CDK Insights?

CDK Insights was built to solve the problem of discovering infrastructure issues after deployment. Now you can catch problems before they reach production.

CDK-Insights Icon

CDK Insights

Purpose-built for CDK

CDK-Specific Check

CDK-Specific Analysis

Understands CDK constructs, patterns, and best practices — not just CloudFormation

Free Forever Check

Free Forever Static Analysis

No trials, no limits on basic analysis — comprehensive static checking always free

No Registration Check

No Registration Required

Start analyzing immediately — no accounts, no signups, no barriers

Privacy-First Check

Privacy-First Design

Free tier: 100% local analysis. AI tier: sends only redacted CloudFormation templates, never source code

AI-Powered Check

Optional AI Enhancement

Upgrade to AI-powered analysis for deeper insights and contextual recommendations

Traditional Tools Icon

Traditional Tools

Generic CloudFormation analysis

Generic Analysis Cross

Generic CloudFormation Analysis

Treats your CDK code like raw CloudFormation — misses CDK-specific patterns

Pay-Walled Cross

Pay-Walled or Trial Limited

Basic analysis often requires payment or limited trial periods

Account Required Cross

Account Registration Required

Sign up barriers and account creation before you can try anything

Data Upload Cross

Data Upload Required

Upload your infrastructure code to external services for analysis

No AI Cross

Limited AI Integration

Basic rule-based analysis without intelligent context-aware recommendations

The CDK Insights Difference

Purpose-built for CDK developers who want deep, actionable insights without compromising privacy

Instant Setup Icon

Instant Setup

One command gets you started:
npx cdk-insights analyze

CDK-Native Icon

CDK-Native

Understands your CDK constructs, L2/L3 patterns, and TypeScript code structure

Smart Analysis Icon

Smart Analysis

Context-aware AI that understands your specific infrastructure patterns and requirements

Experience the difference. Try CDK Insights today and see why CDK developers choose us.

Local-First.
Privacy-Guaranteed.

My free tier runs 100% on your machine. No data leaves your environment. AI tier sends only redacted CloudFormation templates for advanced analysis.

Your Machine Icon

Your Machine

CDK Insights runs directly on your local machine. Your code never leaves your environment.

Analysis Flow Arrow Vertical
Analysis Engine Icon

Local Analysis

Powerful static analysis engine processes your CDK code locally using CDK-Nag and custom rules.

No Network Icon

No Network

Works completely offline. No internet connection required.

No Uploads Icon

No Uploads

Your code stays on your machine. Nothing gets uploaded anywhere.

No Tracking Icon

No Tracking

We don't track usage, collect analytics, or monitor your activity.

No Accounts Icon

No Accounts

No registration, no sign-ups, no personal information required.

How Local Analysis Works

Behind the scenes, CDK Insights leverages proven open-source tools to deliver comprehensive analysis

CDK-Nag Icon

CDK-Nag Integration

Built on AWS's own CDK-Nag for security and compliance checking

Static Analysis Icon

Static Code Analysis

Comprehensive TypeScript AST parsing and pattern matching

CloudFormation Icon

CloudFormation Synthesis

Analyzes synthesized CloudFormation templates for infrastructure insights

Best Practices Icon

Best Practice Rules

Curated rules for AWS Well-Architected Framework compliance

Export Icon

Multiple Export Formats

JSON, Markdown, Table, and Summary export options for integration

Fast Analysis Icon

Fast Analysis

Optimized for speed — most projects analyzed in under 10 seconds

Ready for Privacy-First Analysis?

Experience the security of local analysis. No servers, no uploads, no compromises.

Privacy-First.
Security-Built.

Your code should stay yours. That's why CDK Insights is designed to run locally first, with AI features that only process what you choose to share.

Local Analysis Icon

Local Analysis

Free tier runs 100% locally on your machine. No code leaves your environment. Static analysis with CDK-Nag happens entirely offline.

AI tier sends only redacted CloudFormation templates to our backend for AI analysis - never your source code.

Zero data transmission
Data Redaction Icon

Smart Redaction

AI analysis automatically redacts sensitive data like account IDs, secrets, and personal information from CloudFormation templates before sending to our backend. Your source code never leaves your machine.

Automatic privacy protection
Transient Processing Icon

No Storage

CloudFormation templates are processed transiently and never stored on our servers. AI analysis happens in-memory and results are returned immediately. Data is automatically deleted after processing.

Immediate deletion

Additional Security Measures

End-to-End Encryption Check

End-to-End Encryption

All data in transit protected with TLS 1.3 encryption

Zero-Knowledge Architecture Check

Minimal Data Collection

We only collect the minimum data necessary for analysis and recommendations

Secure Payment Processing Check

Secure Payment Processing

Payments handled by Stripe — we never store card details

Regular Security Audits Check

Security Monitoring

Built-in monitoring and security best practices

GDPR & SOC 2 Compliant Check

Privacy Standards

Designed with privacy-first principles and minimal data collection

Open Source Components Check

Open Source Components

Transparent, auditable security practices you can verify

Ready to analyze your CDK stacks with complete privacy? Start with our free tier — no registration required.

Built for Trust.
Designed for Reliability.

Your trust is everything. CDK Insights is built with security and reliability at its core, ensuring your infrastructure analysis is both safe and accurate.

Security First Icon

Security First

Privacy by design

Zero Trust Check

Zero Trust Architecture

We cannot access your data even if we wanted to

Encryption Check

End-to-End Encryption

All communications protected with TLS 1.3

Audit Check

Security Best Practices

Built with industry-standard security practices and principles

Open Source Check

Open Source Components

Built on open source technologies you can trust and verify

Reliability Icon

Reliability

Built to last

Uptime Check

High Availability

Built on AWS's reliable cloud infrastructure

Redundancy Check

Cloud Infrastructure

Leverages AWS's global infrastructure for reliability

Backup Check

Data Protection

Encrypted data processing with minimal data retention

Monitoring Check

System Monitoring

Built-in monitoring and error tracking

Transparency Icon

Transparency

Open and honest

Open Source Check

Open Source Components

Built on open-source foundations you can inspect and trust

Privacy Check

Privacy Policy

Clear documentation of our data handling practices

Documentation Check

Open Documentation

Comprehensive guides and documentation freely available

Changelog Check

Public Changelog

Detailed release notes and feature updates

Security & Privacy Principles

Built on industry best practices for security, privacy, and reliability

SOC 2 Icon

Security-First Design

Built with security as a core design principle

GDPR Icon

GDPR Compliant

Privacy-first design with minimal data collection

ISO 27001 Icon

Industry Standards

Follows established security best practices

AWS Security Icon

AWS Security

Built on AWS's secure cloud infrastructure

Trust Built on Action, Not Words

Every design decision prioritizes your security and privacy. Experience the difference of infrastructure analysis built for the modern enterprise.

Outputs That Fit Your Workflow

CDK Insights is designed to fit into your existing workflow. Whether you prefer markdown reports, GitHub issues, or direct integration, you'll get insights in the format that works best for you.

cdk-insights analyze
markdown output
↕ scroll

**Executive Summary:**

We discovered **366 total issues** across **71 resources** (97.2% with issues).

**Top Priorities:**

🔴 14 Critical severity issues

🟠 52 High severity issues

MetricCount
Resources scanned71
Resources with issues69
Total issues found366
% of resources with issues97.2%

### WAF Pillar Impact

• **Operational Excellence**: 136

• **Security**: 140

• **Cost Optimization**: 66

• **Reliability**: 18

• **Performance Efficiency**: 6

• **Sustainability**: 0

### Next Steps

1. Triage 🔴 critical issues first

2. Fix 🟠 high‐impact items next

3. Schedule 🟡 medium‐priority tasks

4. Plan 🟢 low‐priority enhancements

Resource: InsecureIamRole41A4AD76

🔴🔴🔴 CRITICAL Severity Issue 🔴🔴🔴

  • • Issue: IAM policy allows full access to all resources.
  • • Recommendation: Restrict IAM policies to least privilege access.
  • • 📍 Source Location: cdk/stacks/TestCdkInsightsStack.ts:26:5
  • • Source Path: TestCdkInsightsStack/InsecureIamRole41A4AD76
  • • WAF Pillar: Security

🔴🔴🔴 CRITICAL Severity Issue 🔴🔴🔴

  • • Issue: The role has been granted the AWS managed policy AdministratorAccess, which provides full access to AWS services and resources.
  • • Recommendation: Review the permissions granted to the role and replace the AdministratorAccess policy with the minimum necessary permissions.
  • • 📍 Source Location: cdk/stacks/TestCdkInsightsStack.ts:26:5
  • • Source Path: TestCdkInsightsStack/InsecureIamRole41A4AD76
  • • WAF Pillar: Security

Relevant Code:

// Example of a more restrictive policy
const restrictedPolicy = new iam.Policy(this, 'RestrictedPolicy', {
  statements: [
    new iam.PolicyStatement({
      actions: ['s3:GetObject', 's3:PutObject'],
      effect: iam.Effect.ALLOW,
      resources: ['arn:aws:s3:::example-bucket/*']
    }),
  ],
});
// Assign the policy to the role
role.addManagedPolicy(restrictedPolicy);
JSON Format Icon

JSON Export

Machine-readable structured data perfect for automation and CI/CD pipelines.

--output json
Markdown Format Icon

Markdown Reports

Human-readable documentation perfect for GitHub issues and team sharing.

--output markdown
Table Format Icon

Table View

Clean tabular output with colored severity levels - the default format.

--output table
Summary Format Icon

Summary View

Concise overview showing just the essential metrics and highest priority issues.

--output summary
GitHub Integration Icon

GitHub Integration

Automatically create GitHub issues from findings

# Create GitHub issues from findings cdk-insights analyze --with-issue # Perfect for CI/CD workflows cdk-insights analyze --output json --with-issue

Requires GitHub CLI (gh) to be installed and authenticated

Configuration Icon

Smart Configuration

Save your preferences and customize analysis

# Set your preferred output format cdk-insights config set output markdown # Focus on specific services cdk-insights config set services IAM,S3,Lambda # View current settings cdk-insights config list

Configuration persists across all analyses