AWS CDK Security & Cost AnalysisUse Cases by Team
CDK Insights works for teams of every size. Whether you are a solo developer scanning locally or an enterprise enforcing compliance across hundreds of stacks, there is a workflow that fits. Check our documentation for deep dives on CDK security patterns.
Built around how your team works
Security-Conscious Teams
CDK security scanning before misconfigurations reach production
Security teams use CDK Insights to strengthen CDK security across all projects in their organization. With 100+ built-in rules covering IAM, S3, RDS, VPC, and more, the static analysis engine catches common misconfigurations like overly permissive IAM policies, unencrypted storage, and publicly accessible resources. Every finding includes a severity classification and specific remediation guidance, so developers know exactly what to fix and why it matters. Because analysis runs locally by default, your infrastructure code never leaves your machine.
Enterprise Compliance
Audit trails, team management, and shared configurations
Enterprise organizations need more than ad-hoc scanning. CDK Insights provides team management so you can onboard your entire engineering org, assign subscription licenses to individual seats, and track scan activity across teams. The enterprise dashboard shows finding trends over time, helping you demonstrate compliance improvements during audits. Shared configurations let you standardize rule sets and severity thresholds across projects, so every team follows the same standards without manual coordination.
Startups & Small Teams
Ship secure infrastructure from day one
Small teams move fast, and CDK Insights is built to keep up. Static analysis is free forever — no account required, just `npm install cdk-insights`. Sign up for a free account to add 500 AI credits per month on top. As your team grows, upgrade to Pro for 5,000 AI credits/month or Team for collaboration features. The GitHub Action takes five minutes to set up and runs on every PR, so security checks happen automatically without slowing down your workflow or requiring a dedicated security engineer.
DevOps Teams
Pipeline integration and automated quality gates
DevOps engineers integrate CDK Insights into their CI/CD pipelines to create automated quality gates for infrastructure changes. As a CDK tool built for pipeline workflows, the GitHub Action posts analysis summaries directly on pull requests, so reviewers see infrastructure findings alongside code diffs. Configure fail-on thresholds to block merges when critical or high-severity issues are found. SARIF output feeds into GitHub Code Scanning for centralized vulnerability tracking. For teams using other CI systems, the CLI supports JSON output that works with any pipeline tool. See all available integrations on the integrations page.
Start scanning your CDK stacks today
CDK Insights works with any CDK project. Static analysis is free, no account needed. Just run the command and see your results.
npx cdk-insights scan