Terraform CDK - AWS Secure constructs

The Level 2 construct can be used to set up your AWS account with the reasonably secure configuration baseline. Internally it uses the Terraform CDK and the AWS Provider.

Features

• Account password policies
• Cloudtrail
• Guardduty
• EBS encrypt default
• VPC flow log
• Security Hub
• Enable Config rules above

Install

Just the constructs

npm install cdktf-aws-secure

Examples

import { Construct } from 'constructs';
import { Resource } from 'cdktf';
import { secure } from 'cdktf-aws-secure';

export class AwsSecure extends Resource {
    constructor(scope: Construct, name: string ) {
        super(scope, name);

        ////// Samples
        const policy = new secure.EnableAccountPasswordPolicy(this, 'DefaultAccountPwdPolicy', {})
        
        policy.addConfigRule() // and also add Config rule.

        // enable guardduty
        new secure.EnableGuardduty(this, 'EnableGuardduty', {});

        // enable cloudtrail
        new secure.EnableCloudTrail(this, 'EnableCloudTrail', {});

        // enable ebs encrypt default
        new secure.EnableEbsEncryption(this, 'EnableEbsEncryption', {});new secure.EnableGuardduty(this, 'EnableGuardduty');

        // enable vpc flow log
        new secure.EnableVpcFlowLog(this, 'EnableVpcFlowLog', {
            vpcId: 'vpc-0123456789'
        });

        // enable security hub
        new secure.EnableSecurityHub(this, 'EnableSecurityHub');
    }
}

Docs

See API Docs