{"id":51395042,"url":"https://github.com/alphacrack/aws-cdk-secure-constructs","last_synced_at":"2026-07-04T02:03:40.588Z","repository":{"id":362948679,"uuid":"1009857861","full_name":"alphacrack/aws-cdk-secure-constructs","owner":"alphacrack","description":"Secure-by-Design AWS CDK Layer 2 Constructs with well architected Hardening","archived":false,"fork":false,"pushed_at":"2026-06-06T16:40:03.000Z","size":1129,"stargazers_count":1,"open_issues_count":15,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-06T18:17:01.257Z","etag":null,"topics":["aws","aws-cdk","aws-security","cdk","cloud-security","devsecops","iac","infrastructure-as-code","security","typescript"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alphacrack.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":"ROADMAP.md","authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-06-27T20:51:50.000Z","updated_at":"2026-06-06T16:37:07.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/alphacrack/aws-cdk-secure-constructs","commit_stats":null,"previous_names":["alphacrack/aws-cdk-secure-constructs"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/alphacrack/aws-cdk-secure-constructs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alphacrack%2Faws-cdk-secure-constructs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alphacrack%2Faws-cdk-secure-constructs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alphacrack%2Faws-cdk-secure-constructs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alphacrack%2Faws-cdk-secure-constructs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alphacrack","download_url":"https://codeload.github.com/alphacrack/aws-cdk-secure-constructs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alphacrack%2Faws-cdk-secure-constructs/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35107470,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-04T02:00:05.987Z","response_time":113,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-cdk","aws-security","cdk","cloud-security","devsecops","iac","infrastructure-as-code","security","typescript"],"created_at":"2026-07-04T02:03:39.721Z","updated_at":"2026-07-04T02:03:40.570Z","avatar_url":"https://github.com/alphacrack.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AWS CDK Secure Constructs\n\nSecure-by-default AWS CDK constructs with [CDK property injection](https://docs.aws.amazon.com/cdk/v2/guide/blueprints.html) support.\n\n**Status:** Early stage. Only **S3 (`SecureBucket`)** is implemented today. Requires `aws-cdk-lib` \u003e= 2.196.0.\n\n## What it does\n\n- **Construct:** `SecureBucket` — CIS-critical settings (encryption, block public access, SSL, object ownership) are always enforced.\n- **Tiers:** `HIGH` / `MEDIUM` / `LOW` for operational settings (versioning, logging, removal policy).\n- **Injectors:** Property injectors including `TieredSecureBucketDefaults` (tighten-only).\n- **Compliance:** `S3BucketCompliance.report()` — enforced controls are verified by synthesis tests.\n\nProperty injectors set defaults; they do not block someone from using L1 `CfnBucket` directly.\n\n## Install\n\nFrom npm (after publish):\n\n```bash\nnpm install aws-cdk-secure-constructs\n```\n\nFrom this repo (local):\n\n```bash\nnpm install\nnpm run build\nnpm run test:local-build   # pack + install + cdk synth\n```\n\n## Usage\n\n```typescript\nimport { App, Stack } from 'aws-cdk-lib';\nimport { SecureBucket, SecurityLevel } from 'aws-cdk-secure-constructs';\n\nconst app = new App();\nconst stack = new Stack(app, 'MyStack');\n\nnew SecureBucket(stack, 'Data', {\n  securityLevel: SecurityLevel.HIGH,\n});\n```\n\nTiered injector (org-wide floor):\n\n```typescript\nimport { PropertyInjectors } from 'aws-cdk-lib';\nimport { Bucket } from 'aws-cdk-lib/aws-s3';\nimport { TieredSecureBucketDefaults, SecurityLevel } from 'aws-cdk-secure-constructs';\n\nPropertyInjectors.of(app).add(\n  new TieredSecureBucketDefaults({ securityLevel: SecurityLevel.MEDIUM })\n);\nnew Bucket(stack, 'RawBucket', { enforceSSL: false }); // CIS-critical fields still enforced\n```\n\nMore examples: [examples/](examples/), [examples/local-consumer/](examples/local-consumer/) (tests the published tarball).\n\n## Development\n\n```bash\nnpm install\nnpm run build      # jsii -\u003e lib/\nnpm test\nnpm run lint\nnpm run test:local-build\nnpm run release -- patch   # from clean main only; tags and triggers CI publish\n```\n\n## Docs\n\n- [API](docs/API.md)\n- [Security model](docs/SECURITY.md)\n- [Design guidelines](docs/DESIGN.md)\n- [Contributing](CONTRIBUTING.md)\n- [Roadmap](ROADMAP.md)\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falphacrack%2Faws-cdk-secure-constructs","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falphacrack%2Faws-cdk-secure-constructs","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falphacrack%2Faws-cdk-secure-constructs/lists"}