Changelog
What we have been shipping. Each release brings better analysis, more integrations, and stronger security coverage for your AWS CDK stacks.
Team Management & License Assignment
Full team management support for organizations. Create teams, invite members by email, and assign subscription licenses to individual seats. Admins can manage their team from the dashboard without contacting support.
- Create and delete teams from the dashboard
- Invite team members by email with automatic onboarding
- Assign and revoke subscription licenses per seat
- Team admin role with permission controls
- Improved license validation across CLI and API
Enterprise Insights Dashboard
A new dashboard for enterprise subscribers that provides a consolidated view of scan history, finding trends, and team activity. Track how your infrastructure posture improves over time.
- Scan history with trend charts
- Finding breakdown by severity and AWS service
- Team activity feed showing recent scans
- Export dashboard data as CSV
- Dark and light mode support for all charts
Subscription Analytics
Subscription-level analytics for tracking usage across your organization. View scan counts, AI recommendation usage, and seat utilization alongside billing details.
- Usage analytics tied to subscription rather than team
- AI recommendation token usage tracking
- Seat utilization metrics for team plans
- Billing history and invoice access
- Usage alerts when approaching plan limits
AI-Powered Recommendations
AI analysis goes beyond rule-based checks to provide contextual recommendations for your specific CDK stacks. The AI considers your resource configuration, relationships between constructs, and common patterns to suggest targeted improvements.
- Contextual AI recommendations for each finding
- Stack-aware analysis that considers resource relationships
- Suggested CDK code fixes with explanations
- Confidence scoring for each recommendation
- Opt-in only, with code processed transiently and never stored
GitHub Action Integration
The official CDK Insights GitHub Action brings automated analysis to your pull request workflow. Get analysis results as PR comments, upload SARIF to the GitHub Security tab, and set quality gates to block merges when critical issues are found.
- Official GitHub Action published to the marketplace
- PR comment summaries with severity breakdown
- SARIF output with automatic upload to GitHub Code Scanning
- Configurable fail-on severity thresholds
- Report artifacts (JSON, SARIF, Markdown) attached to workflow runs
- Support for monorepo setups with working-directory input
280+ Security Rules
Expanded the static analysis rule set to over 280 rules covering 25+ AWS services. New rules for RDS, ElastiCache, ECS, Step Functions, and EventBridge. Each rule includes severity classification, detailed descriptions, and remediation guidance.
- Rule set expanded from 180 to 280+ rules
- New coverage for RDS, ElastiCache, ECS, Step Functions, EventBridge
- Improved severity classification aligned with AWS Well-Architected
- Rule filtering by service, severity, and rule ID
- HTML output format for shareable standalone reports
- Performance improvements for large stacks (50%+ faster synthesis scanning)
Want to try the latest features? CDK Insights is free to install and static analysis is included at no cost.