JSPM

An AWS CDK custom construct for deploying Prowler to your AWS Account. Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS

Copy source files and node_modules without devDependencies to destination directory.

DKershner's preferred constructs for Projen SST Apps.

AWS CDK construct for automated cross-account ACM certificate validation using DNS

MicroApps framework, by PwrDrvr LLC, delivered as an AWS CDK construct that provides the DynamoDB, Router service, Deploy service, API Gateway, and CloudFront distribution.

CDK Constructs for integrating GitHub Actions and AWS.

A CDK construct to create a Transfer Family SFTP host backed by a KMS encrypted S3 bucket, and a SFTP user

DKershner's preferred constructs for Projen SST Apps using Nextjs.

Get awesome status badges for your cdk projects.

This construct library provides a way to keep your Java AWS Lambda functions warm.

Pattern for Cloud9 EC2 environment and SSM Document.

AWS CDK constructs for Directory Service Managed AD

A collection of AWS CDK constructs to manager your Stripe resources programmatically

AWS CDK L2 constructs for the AWS Network Firewall (AWS::NetworkFirewall)

CDK construct for Amazon FSx for Netapp ONTAP

aws-interface-endpoints

Opinionated CDK utility construct for managing project information & AWS account-specific configuration.

There is an inherent risk in maintaining and storing permanent credentials. In their lifetime, they are bound to be shared, compromised, and lost. When shared, it is often among a broader audience than initially intended. They can also be lost and found,

CDK construct library to create EC2 Spot Instances simply.

[](https://badge.fury.io/js/cdk-cloudwatch-alarm-chatbot) [](https://badge.fury.io/py/cdk-cloudwatch-alarm-c

A construct that deploys a CloudWatch cronjob that will trigger a Lambda that will fetch the yesterday usage of AWS and send it to a SNS as a spoofed ECR CloudWatch event that can be parsed by AWS Chatbot and send to Slack.

High level construct to manage zones in a central account. Sets permissions via AWS Org

An Amazon DynamoDB helper enabling full text search using Meilisearch

Set Log Retention and prune orphaned LogGroups on a schedule using Step Functions service integrations and intrinsic functions.

Add SvelteKit site to CDK stack

Schema for Module Fragment of type JFrog::Artifactory::EC2Instance::MODULE

An AWS CDK construct to create a CloudFront-powered HTTP endpoint delivering requestor's geolocation details.

The AWS Constructor to create a Blockchain Listener using AWS Fargate and Event Bridge

Release app for the MicroApps framework, by PwrDrvr LLC. Provides the ability to control which version of an app is launched.

AWS CDK Construct to create a serverless API based on file structure.

Schema for Module Fragment of type AWSQS::EC2::LinuxBastionQS::MODULE

This construct is based on Aidan Steele's blog https://awsteele.com/blog/2021/09/15/aws-federation-comes-to-github-actions.html. Use this constuct to provision an AWS IAM OIDC identity provider and an IAM role that can be assumed by github-actions.

Precise-to-the-second CDK construct to schedule events

Opinionated AWS CDK construct to define CloudFormation Stacks with sensible defaults

Applys a YAML manifest to the specified Kubernetes cluster

A resource that creates Amazon Elastic Kubernetes Service (Amazon EKS) clusters.

The Hugging Face LLM CDK Construct Library provides constructs to easily deploy a Hugging Face LLM model to Amazon SageMaker.

A simple construct to handle automated Cloudfront DNS alias migration with zero downtime

CDK constructs for safe code deployment

This CDK app takes a few optional parameters and creates a VPC with AWS Network Firewall. This includes the proper Edge Route Table routes and the proper VPC Endpoint of the GWLB. It also includes a default set of stateless rules to only allow 80/tcp, 4

AWS Network Firewall Accelerator

Repositories can have multiple webhooks installed. Each webhook should have a unique config. Multiple webhooks can share the same config as long as those webhooks do not have any events that overlap.

Datadog AWS Integration 2.4.0

Opinionated AWS CDK utility for explicitly naming resources.

DKershner's preferred constructs for Projen AWS CDK Construct Libraries.

A resource provider for Aqua Enterprise Enforcer.

Use Chromium with Plawright to create website screenshots in AWS Lambda

A resource provider for Aqua Enterprise Server.

An alternate contact attached to an Amazon Web Services account.

CloudWatch Auto Retention is a construct that creates a Lambda with a cronjob that checks whether CloudWatch loggroups are set to never-expire. If so, the construct sets it to one month.

Schema for Module Fragment of type AWSQS::Iridium::CloudConnectQS::MODULE

Ephemeral Stacks! A CDK Stack and Construct that will self-destruct after a specified time period.

This construct allows you to IaC your service quotas

An experimental extension that deletes all contents of the referenced bucket when the stack is deleted. Use with caution!

Fetches data from a kubernetes cluster using jsonpath expressions.

AWS CDK construct for creating AMIs using [HashiCorp Packer](https://developer.hashicorp.com/packer/docs).

Deploy a NextJS app using OpenNext packaging to serverless AWS using CDK

AWS CDK Construct Library for New Relic Dashboards. Generated by projen.

Opsgenie Team resource schema

Schema for Module Fragment of type AwsCommunity::S3::Bucket::MODULE

Lambda function for AWS Config custom rule

Wake-on-Lambda is a module centered around a lambda function that receives HTTP requests. In the event that the destination server is inactive, it initiates the server and subsequently redirects the user to the destination.

Passwordless authentication Study

This project repository provides CDK constructs to manage an Identity Provider for your GitHub Actions to securely manage your AWS resources.

Schema for Module Fragment of type Splunk::Enterprise::QuickStart::MODULE

Creates a time based resource with an offset from the provided time or now.

The Spot Elastigroup Resource allows you to create, update, manage, and delete Spot Elastigroups easily with CloudFormation

A higher level Construct for generating a CloudFront Distribution and related resources following Adobe EDS best practices.

CloudFormation equivalent of random_uuid

Manage a Fastly Splunk Log.

Schema for Module Fragment of type AWSQS::CheckPoint::CloudGuardQS::MODULE

A collection of constructs for deploying the Camunda Zeebe workflow engine and its associated components on AWS infrastructure

CloudFront invalidations are [very error prone](https://github.com/aws/aws-cdk/issues/15891#issuecomment-966456154), making it hard to invalidate distributions reliably. This construct aims to solve this problem by using a step function which is triggered

Enterprise ready CDK constructs that are CIS 1.4 and NIST800-53 Rev.5 standards compliant

This resource will manage the lifecycle of items in a DynamoDB table

Sleep a provided number of seconds between create, update, or delete operations.

The contruct will create * EKS Cluster * Fargate Profile * Build a local Docker image, and push to ECR * Deploy the image as application * Creates ALB using [AWS LoadBalancer Controller](https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/

Manage a Fastly service health check.

Schema for Module Fragment of type AWSQS::VPC::VPCQS::MODULE

This construct creates a truly globally available API where code executes at the edge. Because changes take a long time to propagate to all edge locations, there is a `devMode` flag which will instead deploy your API to a [HTTP API](https://docs.aws.amazo

Small construct to help manage split-horizon DNS configs in AWS Route53

Lambda function that reports Security Findings

The Collaborators resource allows you to add, invite, and remove collaborators from a repository.

Schema for Module Fragment of type Stackery::Open::Bastion::MODULE

This construct returns the currently active SES receipt RuleSet, or creates one. This enables you to add rules to it.

Schema for Module Fragment of type Logzio::awsCostAndUsage::cur::MODULE

Schema for Module Fragment of type JFrog::Artifactory::NewVpc::MODULE

This resource uses AWS Cloud Control API to perform a lookup of a resource of a given type (such as, `AWS::EC2::VPC`) in your AWS account and current region, based on a query you specify. If only one match is found, this resource returns the primary ID o

Add people to an organization. Will create an invite and user will only become a member once they accept this invite.

Scheduled NatGateway at the time you need it

Datadog Monitors Downtime 3.1.0

Schema for Module Fragment of type JFrog::Xray::EC2Instance::MODULE

Study Passwordless authentication on aws project

Schema for Module Fragment of type JFrog::Artifactory::Core::MODULE

A rulestack defines the NGFW's advanced access control (APP-ID, URL Filtering) and threat prevention behavior.

Manage an escalation policy in PagerDuty.

A resource provider for Aqua Enterprise KubeEnforcer.

The CDK Construct Library of Astro

Allows you to share values between stack across regions and accounts.

Provides a S3 bucket resource.

CRUD operations for New Relic Dashboards via the NerdGraph API

Opinionated wrapper around CDK L1 Construct WebAcl

Manage a Fastly service

Add a swagger endpoint to your EdgeAPI

A custom vocabulary that you can use to change the way Amazon Transcribe handles transcription of an audio file.

Manage a synthetic monitor (V1) in Dynatrace.

A cluster peer establishes a trusted network relationship between two FSx for ONTAP file systems, allowing them to securely communicate and replicate encrypted, authenticated data. It is used for disaster recovery across clusters in different regions, pro

Provides a Cloudflare record resource.

Manage a Service Level Objective in Dynatrace.

A Firewall resource offers Palo Alto Networks next-generation firewall capabilities with built-in resiliency, scalability, and life-cycle management.

Manage a team on Rollbar.

Schema for Module Fragment of type logzio::autoDeploymentLogzio::CloudWatch::MODULE

Manage a custom Tls Certificate upload

Provides a DigitalOcean Droplet resource. This can be used to create,

An example resource schema demonstrating some basic constructs and validation rules.

A resource provider for managing helm. Version: 1.2.1

Schema for Module Fragment of type AwsCommunity::CloudFront::S3Website::MODULE

Creates a Secret and replicates it across the given regions. Requires a [ReplicatedKey](../replicated-key/readme.md) be passed in.

Manages people's membership to GitHub teams

This construct sets up everything necessary to receive email. The emails get stored in a dynamodb table, queryable by recipient. This is designed to be used in end-to-end tests, with the [@reapit-cdk/email-receiver-client](../../libs/email-receiver-client

Manage a Fastly service dictionary.

Schema for Module Fragment of type Symphonia::OpenSource::CloudFormationArtifactsBucket::MODULE

Deploys Trend Micro Cloud One Container Security into EKS clusters using helm.

Manage a Fastly service backend.

Opsgenie User

This construct returns the given Cognito UserPool's UserPoolDomain, or creates one. This resolves an issue with [AWS::Cognito::UserPoolDomain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooldomain.html), since

Exposes a Slack Events API Request URL that validates and sends all received events to an AWS Event Bus

Manage a Fastly service dictionary item.

Manage a team in Github

Manage a team membership for a user or project on Rollbar.

Schema for Module Fragment of type JFrog::Artifactory::ExistingVpc::MODULE

Uses the Aurora Data API to execute SQL and enforce a schema within a database cluster. Currently only supports Aurora Postgres.

Sysdig Agent EKS cluster deployment.

A market order is a request to buy or sell a security at the currently available market price. The order to buy a security will be submitted on resource creation and the security will be sold (or the unfilled order cancelled) on resource deletion. Support

Snyk integrates with Amazon EKS, enabling you to import and test your running workloads and identify vulnerabilities in their associated images and configurations that might make those workloads less secure. Once imported, Snyk continues to monitor those

A [service](https://v2.developer.pagerduty.com/v2/page/api-reference#!/Services/get_services) represents something you monitor (like a web service, email service, or database service). It is a container for related incidents that associates them with esca

This resource allows you to create and manage repositories within your

Manages a User within Azure Active Directory.

A resource provider for Aqua Enterprise Scanner.

Provides an [EC2 key pair](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-key-pairs.html) resource. A key pair is used to control login access to EC2 instances.

Allows for the creation and modification of a Snowflake Database. https://docs.snowflake.com/en/user-guide/databases.html

A Cloudflare resource for managing load-balancing across pools

AWS CDK constructs for ZeroScaler.io

Creates a new bucket in Google cloud storage service (GCS).

CloudFormation equivalent of ad_user

Creates a product in the organisations service

Manage a BigID S3 data source

This Resource Type will create necessary resources in your AWS account to forward cloudwatch logs to FireEye Helix. Visit FireEye Cloud Integration Portal for more info and to generate a pre-populated CloudFormation Template

CloudFormation equivalent of random_string

Schema for Module Fragment of type logzio::awsSecurityHub::collector::MODULE

Manage a git tag on GitHub

Opsgenie Integration Resource definition

Manage a Fastly service.

Manage a on-call schedule in PagerDuty

Manage a dashboard in Dynatrace.

Manages an Application within Azure Active Directory.

Schema for Module Fragment of type Logzio::MyService::MyName::MODULE

Schema for Module Fragment of type Logzio::KinesisShipper::KinesisShipper::MODULE

Schema for Module Fragment of type JFrog::Vpc::MultiAz::MODULE

Schema for Module Fragment of type JFrog::Linux::Bastion::MODULE

CloudFormation equivalent of ad_computer

Manage a Fastly service domain.

Provides a S3 bucket object resource.

Service Account as defined in Confluent Cloud IAM v2 API.

Manage a response play in PagerDuty

A simple AWS VPC Firewall with one stateless rule and one stateful rule to meet the AWS Config Network Firewall Conformance.

This construct returns a wildcard certificate valid for subdomains of the given domain names, creating and validating on if it doesn't exist. It supports cross-account DNS validation, you can pass in arns of roles from other accounts and it'll assume them

A construct for working with RDS SQL servers. TEMP FORKED FROM mbonig/rds-tools

Manage a repository in GitHub.

A resource to manage a pool of origin servers

Provides helpers to transform an OpenAPI specification generated by Smithy into an AWS SpecRestApi CDK construct

[](https://badge.fury.io/js/cdk-aws-ec2-efs) [](https://badge.fury.io/py/cdk-aws-ec2-efs)

Passwordless authentication Study

Manage a membership of a user into a team in PagerDuty.

Creates a static time stamp.

A flexible AWS CDK construct for scheduled RDS MySQL backups to S3.

A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a Region or across an organization in AWS Organizations.

Manage a user in PagerDuty.

Manage a synthetic location (V1) in Dynatrace.

Manage a team in PagerDuty.

Allows privileges to be granted on a warehouse to a role. https://docs.snowflake.com/en/sql-reference/sql/grant-privilege.html

Application Autoscaling Scheduled Action.

CRUD operations for New Relic Alerts Policies via the NerdGraph API

Allows privileges to be granted on a role to a user. https://docs.snowflake.com/en/sql-reference/sql/grant-privilege.html

Creates a tag against a code ref in GitLab

Schema for Module Fragment of type ORG::TEST::SAMPLE::MODULE

Manage an access token for a Rollbar project.

Manage a Databricks Cluster

An AWS CDK custom construct for deploying Prowler to your AWS Account. Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS

A Monitor policy to configure monitoring of endpoint health

Allows privileges to be granted on a database to a role. https://docs.snowflake.com/en/sql-reference/sql/grant-privilege.html

Schema for Module Fragment of type FreyrAIM::Spider::EC2Instance::MODULE

Allows for the creation and modification of a Snowflake Role. https://docs.snowflake.com/en/user-guide/security-access-control-overview.html#roles

Manage a team access to a repository in GitHub.

Manage Jobs running on a cluster

Allows for the creation and modification of a Snowflake User. https://docs.snowflake.com/en/user-guide/admin-user-management.html

Creates a Project Access Token in GitLab

[](https://constructs.dev/packages/@otocolobus/aws-cdk-serverbluegreendeploymentgroup)

CRUDL operations for New Relic Dashboards via the NerdGraph API

AWS Synthetics Canary alternative built for minimal cost

This CDK Aspect will generate a diagram of your CDK application's architecture.

Adds a group as a member of a GitLab project

CRUD operations for New Relic Workloads via the NerdGraph API

Manage the Tls Private Key upload

Schema for Module Fragment of type FreyrAIM::Spider::PostgreSQL::MODULE

Manage a notification rule for Rollbar.

Manage a project on Rollbar.

Manage a BigID DynamoDB data source.

AWS CDK Custom CodePipeline Source Action for GitLab

Manage Groups assigned to an Application

An example resource that creates an Azure Storage account along with a Blob container.

Manage a Fastly service active version.

Schema for Module Fragment of type FreyrAIM::Spider::ECS::MODULE

Schema for Module Fragment of type FreyrAIM::Spider::CloudFront::MODULE

Manage the activation of a Tls Domain

Manage the organization secret

Creates a project in GitLab

OpenFABR Cloud Development Framework

Adds a user as a member of a GitLab project

Adds a group as a member of another GitLab group

Creates a group in GitLab

Creates a KMS key and replicates it to the desired regions. Useful when replicating secrets across regions.

Schema for Module Fragment of type zmk::IAM::LambdaBasicRole::MODULE

Manages an Okta Policy

Custom construct for AWS CDK that provides an easy way to integrate reCAPTCHA-based authorization with Amazon API Gateway.

Schema for Module Fragment of type Unxpose::IAM::Integration::MODULE

A LUN is a block storage object within a volume. It provides storage for applications that require block-level access and appears as a virtual disk to the connected host. It is formatted with a file system or used as raw storage, enabling precise control

Schema for Module Fragment of type FreyrAIM::Spider::LoadBalancer::MODULE

Manage a Fastly service version.

Manage the repository secret

Adds Okta users to groups

This construct library allows you to create budget alerts for your AWS account.

Adds a user as a member of a GitLab group

Manages an Okta Group

<div align="center">

Generates an API key to access a SvectorDB serverless vector database, sign up at https://svectordb.com to get started

Manage a Service in PagerDuty.

Creates a serverless vector database with SvectorDB, sign up at https://svectordb.com to get started

Construct to build a redirect with an S3 bucket and a CloudFront distribution.

CDK Construct for the Crush Test project

Manage an Application in Okta.

CRUD operations for New Relic Tags via the NerdGraph API

CDK lib to manage migrations

Schema for Module Fragment of type KARTE::EventBridge::DocumentDB::MODULE

Schema for Module Fragment of type FreyrAIM::ImpactApi::ApiHandle::MODULE

Schema for Module Fragment of type FreyrAIM::Spider::S3Bucket::MODULE

A snapshot creates a read-only copy of a volume or LUN at a specific time. It allows users to restore files or volumes if data is deleted, corrupted, or changed. Snapshots efficiently store only the changes made after the snapshot, making them ideal for d

Schema for Module Fragment of type FreyrAIM::ImpactApi::ApiGateway::MODULE