aws/aws-cdk

Features

• Infrastructure as Code - Defines and provisions cloud infrastructure as version-controlled code to ensure repeatable and predictable deployments.
• Cloud Deployment Automation - Provisions and configures cloud resources using declarative templates for consistent, repeatable environment setup.
• Cloud Infrastructure Automation - Models cloud resources as code using familiar programming languages to automate provisioning and management.
• Cloud Infrastructure Deployment - Provides a framework for synthesizing code into declarative templates to automate the provisioning and updating of cloud infrastructure.
• Infrastructure Provisioning Tools - Allows modeling and deploying cloud resources using standard programming languages for repeatable infrastructure management.
• AWS Provisioners - Synthesizes code into cloud deployment templates to manage the lifecycle of cloud-based services and resources.
• Declarative Infrastructure Templates - Translates high-level object-oriented code into declarative templates for cloud resource provisioning.
• Drift Detection - Detects discrepancies between the actual configuration of deployed resources and the expected state defined in the original template.
• Infrastructure as Code Frameworks - Provides a library for defining and provisioning cloud infrastructure resources using familiar programming languages.
• Infrastructure Replication - Deploy identical resource configurations across multiple regions or accounts by reusing the same template to ensure consistency and repeatability.
• High Availability Architectures - Maintains active-active database clusters with synchronous replication and automatic failure recovery.
• Cloud Infrastructure Management - Provisions and scales cloud resources automatically to host and execute applications based on demand.
• Cloud Resource API Management - Provides programmatic interfaces for automating the full lifecycle of cloud infrastructure components.
• Cloud Management Interfaces - Configures and modifies cloud infrastructure components through a centralized control plane to maintain desired states.
• Cloud Provisioning - Enables the definition and deployment of complex cloud environments as single, automated units using templates.
• Dependency Graph Engines - Maintains a dependency tree of cloud components to ensure resources are provisioned and updated in the correct order.
• Deployment Orchestration - Converts programmatic definitions into atomic deployment units that manage the lifecycle of cloud stacks.
• Distributed Task Orchestrators - Coordinates complex sequences of tasks across distributed components for reliable execution.
• Scaling Policies - Configures dynamic scaling policies to adjust cloud resource capacity based on real-time utilization.
• Cloud Provisioning Templates - Models cloud infrastructure as declarative templates to automate the creation and management of complex environments.
• AI Agent Integrations - Connects AI coding agents to cloud services to enable infrastructure management, code deployment, and operational troubleshooting.
• High Availability Configurations - Maintains standby replicas across availability zones to ensure data redundancy and automatic failover.
• Horizontal Database Scaling - Adjusts compute and storage capacity dynamically to meet changing application demands without manual reconfiguration.
• Cloud Infrastructure Integrations - Synchronizes backend resource definitions with command-line tools to ensure consistency between code and cloud environments.
• Cloud Storage - Provisions and manages diverse cloud database and storage resources through programmatic infrastructure definitions.
• Auto Scaling Groups - Organizes infrastructure components into logical collections to apply consistent scaling policies.
• Cluster Management - Orchestrates and manages groups of compute resources and containerized tasks within distributed cloud environments.
• Configuration Management - Aggregate and manage configuration data from multiple external sources or internal stores to maintain consistency across all application workloads.
• Reusable Configuration Blocks - Packages infrastructure configurations into modular, reusable libraries to standardize deployment patterns across projects.
• Containerized Deployment Orchestration - Orchestrates containerized application deployments by managing task placement and resource requirements across clusters.
• Deployment Scaling - Scales infrastructure and application workloads automatically based on real-time demand.
• Multi-Region Cluster Deployers - Enables the creation of multi-Region database clusters to support low-latency access and disaster recovery.
• Distributed Task Schedulers - Orchestrates sequential and parallel tasks across distributed components with state tracking.
• Code-First Provisioning - Uses code-first patterns to provision serverless backend resources including data storage and authentication directly from application code.
• Virtualization Managers - Provides programmatic interfaces to provision and configure virtual compute, storage, and network resources.
• Software Development Kits - Offers software development kits that provide programmatic interfaces for managing the full lifecycle of cloud resources.
• Cloud Auditing Tools - Records and logs API activity within cloud accounts to provide a detailed audit trail of infrastructure changes.
• Compliance Policy Definitions - Expresses organizational security and compliance requirements using a declarative language to evaluate infrastructure.
• Access Control - Secures API interactions using standard identity policies and authentication protocols to control resource permissions within a cloud environment.
• Policy-Based Access Control - Controls granular permissions for cloud resources by attaching identity-based or resource-based policies to ensure authorized actions.
• Application Configuration - Stores and retrieves environment-specific settings and sensitive secrets from a centralized secure repository.
• Aspect-Oriented Programming Frameworks - Applies security and compliance rules to infrastructure definitions during the synthesis phase using aspect-oriented logic.
• Modular Package Systems - Provides a centralized registry for distributing and reusing pre-configured infrastructure building blocks.
• Agent Execution Runtimes - Executes autonomous agents in a secure, serverless environment with isolated sessions and multi-modal support.
• Backup and Recovery - Centralizes backup administration and data replication across organizational structures to ensure compliance.
• Cloud Database Provisioning - Manages the deployment and versioning of relational database instances with validated security and compatibility.
• Atomic Transactions - Performs coordinated, all-or-nothing updates across multiple tables to ensure data consistency.
• Bucket Management - Organizes data into storage buckets with configurable classes for access and cost optimization.
• Relational Databases - Provisions managed relational database engines with automated scaling, patching, and backup capabilities.
• Configuration Validation - Ensures configuration changes are syntactically and semantically correct before deployment.
• Batch Workload Execution - Executes large-scale computational tasks by automatically provisioning and managing infrastructure.
• Containerized Application Deployment - Automates the deployment of container images into managed environments that handle provisioning and scaling.
• Deployment Environment Management - Isolates infrastructure configurations into distinct, branch-aware deployment environments for staging and preview workflows.
• Capacity Planning - Adjusts compute capacity automatically to match application demand and maintain desired performance levels.
• High Availability Infrastructure - Deploys brokers in active or standby configurations across multiple availability zones with redundant storage to maintain message persistence.
• Instance Purchasing Optimization - Combines multiple instance types and purchase models like Spot and On-Demand to balance performance requirements with cost efficiency.
• Multi-Account Architectures - Supports provisioning and managing consistent sets of cloud resources across multiple accounts and regions from a single template.
• Virtual Machine Deployment - Deploys scalable virtual server instances using preconfigured templates and custom images.
• Web Application Deployment - Provisions and manages scalable web applications directly from source code or container images.
• Intermediate Representations - Uses a common graph-based model to represent infrastructure state before synthesizing it into platform-specific configurations.
• Audit Logging - Ingests and standardizes security and activity logs from software applications to facilitate centralized auditing.
• Identity and Access Management - Controls access to cloud resources by managing users, security credentials, and permissions for applications and individuals.
• Identity and Role Management - Maintains distinct user, group, and role identities for delegated administrative access.
• Credential Security and Utilities - Generates short-lived, limited-privilege access tokens for secure cloud resource interaction.
• Authentication Management - Implements identity verification through managed services and custom credential flows.
• Identity-Based Authentication - Verifies user and application identities to establish secure sessions for accessing cloud resources.
• Component Decoupling Patterns - Integrates independent systems using hosted queues to buffer messages and ensure reliable communication.
• Centralized Logging Systems - Aggregates logs from diverse infrastructure and application sources into a unified, scalable stream.
• Cross-Account Observability Aggregators - Aggregates metrics, logs, and traces from multiple accounts into a central location for unified monitoring.
• OpenTelemetry Exporters - Ingests telemetry data directly from open-standard instrumentation without requiring proprietary agents.
• Infrastructure Preview Tools - Generates summaries of proposed infrastructure changes to evaluate impacts before applying updates.
• Serverless Frameworks - Models and deploys serverless compute, storage, and authentication services directly from application code.
• Agentic Workflow Orchestration - Manages agent loops, tool execution, and memory through unified orchestration.
• AI Agent Capabilities - Deploys intelligent agents with tool-use and conversation persistence alongside semantic document retrieval systems.
• Analytical Query Engines - Runs SQL-based analytical jobs across combined datasets while enforcing strict access controls.
• API Response Caching - Stores frequently accessed data in high-speed in-memory storage to reduce latency and minimize backend load for repetitive requests.
• Cluster Node Management - Allows granular configuration of cache node types, scaling modes, and availability zone placement.
• Persistence & Durability - Persists cache data in distributed transactional logs to ensure recovery and data durability.
• Distributed SQL Databases - Deploys highly available, distributed SQL database clusters that scale automatically across regions.
• External Data Integrations - Connects to external data sources to perform analysis without moving data from its original location.
• Messaging Throughput Scaling - Scales messaging throughput automatically to handle fluctuating volumes without manual infrastructure intervention.
• In-Memory Caches - Stores frequently accessed data in memory to reduce response times from milliseconds to microseconds without requiring manual cache management.
• Log Aggregator Query Metrics - Extracts numerical metrics from log patterns to track operational trends without requiring application code changes.
• Object Versioning - Preserves multiple variants of an object to enable recovery from unintended deletions or application failures.
• Administrative Automation APIs - Provides software development kits and APIs to manage database resources and automate infrastructure programmatically.
• Reusable Components - Provides a modular component registry for distributing and reusing pre-configured infrastructure building blocks.
• Task Schedulers - Executes asynchronous jobs and recurring tasks using event-driven compute triggers.
• Rolling Update Controllers - Performs rolling updates or canary deployments to replace instances while maintaining service availability.
• Content Delivery Accelerators - Distributes static and dynamic web content through a global network of edge locations to reduce latency and improve data transfer speeds.
• Static Website Hosting - Deploys static sites and server-side rendered applications to managed hosting environments.
• Canary Deployment Controllers - Rolls out API updates incrementally to a subset of traffic to safely test changes before full deployment.
• Image Caching - Pulls and maintains local copies of images from external registries to improve pull performance and ensure availability.
• Multi-Zone Resource Distribution - Spreads compute resources across multiple availability zones to improve application resiliency and protect against localized failures.
• Zonal Failover - Redirects application traffic away from specific availability zones to mitigate infrastructure failures and maintain service availability.
• Regional Failover - Automates the redirection of application traffic from an impaired region to a healthy one to maintain service availability.
• DNS Management - Translates domain names into IP addresses and configures routing policies for public and private hosted zones.
• Message Delivery Guarantees - Ensures reliable message processing with configurable delivery guarantees like at-least-once or exactly-once.
• API Access Security - Protects application backends by enforcing authentication and authorization policies on incoming requests.
• Identity and Access Management - Enforces authentication and authorization through identity and access management policies to ensure only permitted users can perform operations.
• Application Lifecycle Management - Manages the operational lifecycle of containerized applications, from initial deployment to service maintenance.
• Fault-Tolerant Workflow Execution - Maintains application reliability by managing component failures and ensuring task execution.
• Dead Letter Queues - Redirects failed message processing attempts to secondary queues for isolation and analysis.
• Service & Infrastructure Monitoring - Tracks system health and performance using native cloud services to ensure operational stability.
• Audit Logs - Transmits application activity logs from various sources into a centralized audit trail for unified management.
• Compliance Evidence Collection - Gathers data from cloud and on-premises environments to verify compliance with industry standards and internal organizational requirements.
• Infrastructure Best Practice Checks - Retrieves status reports and triggers refreshes for automated infrastructure health and security checks to maintain operational best practices.
• Incident Response Workflows - Manages critical workload disruptions through automated incident response workflows and runbook execution.
• Telemetry Collection and Aggregation - Collects system-level metrics, logs, and traces from virtual machines and servers using centralized management agents.
• Content Caching Accelerators - Stores copies of files from defined origin servers at geographically dispersed edge locations to increase availability and reduce load.
• Template Logic - Executes built-in functions and macros to dynamically generate and transform infrastructure template content.
• Foundation Models - Supports the creation, fine-tuning, and evaluation of generative models for specific tasks.
• Text Generation APIs - Provides interfaces for interacting with large language models to produce text, chat, or code completions.
• Billing and Subscription Management - Aggregates invoices and usage data across multiple accounts to simplify billing and maximize discounts.
• Pricing Rule Engines - Defines markups, discounts, or flat charges to modify standard rates for specific billing groups.
• Objective Definitions - Establishes performance targets to track long-term reliability and health trends for critical services.
• Usage Metering & Billing - Consolidates service usage costs into existing cloud invoices through integrated metering.
• Change Data Capture Streams - Captures item-level modifications in real time to trigger downstream event-driven processes.
• Data Modeling and Schemas - Defines data schemas visually to generate backend infrastructure and database configurations.
• Large Data Offloading - Offloads large message payloads to external object storage to maintain queue efficiency and stay within size limits.
• Data Ingestion Pipelines - Configures automated workflows to ingest, process, and extract insights from data sources.
• Database Extenders - Integrates additional modules to provide specialized features like geospatial processing and advanced indexing.
• Database Schema Migrations - Automates the translation and migration of database schemas between different engine formats.
• Database Operations - Automates routine database maintenance tasks including backups, patching, and recovery.
• Human Intelligence Task Distribution - Creates structured projects that define the instructions and data requirements for human workers to complete specific tasks.
• Resource Scaling Strategies - Implements techniques for increasing computing capacity through horizontal scaling to maintain performance under request load.
• PostgreSQL Integrations - Supports standard database drivers, tools, and SQL features to allow seamless migration and connectivity for existing application architectures.
• Metric Alarm Triggers - Triggers automated notifications and responses when infrastructure metrics cross predefined stability thresholds.
• Third-Party Service Integrations - Connects applications to internal data sources and third-party systems to enable data exchange and workflow automation.
• Auto-scaling Strategies - Recommends optimized scaling configurations to balance performance and costs for cloud resources.
• Automated Deployment Pipelines - Integrates with code repositories to automate the continuous delivery and deployment of cloud infrastructure.
• Durable Task Orchestrators - Maintains durable state for long-running infrastructure tasks to ensure resilience against failures.
• Cloud Infrastructure Templates - Scans existing cloud environments to automatically generate configuration templates representing the current infrastructure state.
• Component Scaling - Automates the scaling of infrastructure components to maintain performance and cost efficiency at scale.
• Lifecycle Policies - Applies specific attributes to resources to control their lifecycle, update policies, and interactions within a deployment stack.
• Distributed Task Queues - Queues logical units of work for execution by independent worker processes.
• Event-Driven Workflow Triggers - Connects real-time messaging with external services and data sources to trigger actions or route events across distributed systems.
• Infrastructure Automation Scripts - Enables the creation of scripts to automate complex infrastructure management operations and workflows.
• Infrastructure Inventory - Provides automated discovery of on-premises servers and virtual machines to support infrastructure migration planning.
• Queue-Based Message Distribution - Distributes message queues across multiple availability zones using leader and follower nodes to ensure continuous delivery.
• Migration Importers - Integrates third-party discovery tools to centralize infrastructure details within a migration management platform.
• Remote Development Environments - Provisions and manages cloud-hosted development environments for remote coding and debugging.
• Cost Estimators - Defines spending thresholds and calculates projected costs for planned infrastructure workloads.
• Serverless Caches - Creates and manages highly available caching infrastructure automatically without manual capacity planning.
• Knowledge Bases - Provides AI agents with real-time access to documentation and service capabilities.
• Publish-Subscribe Messaging - Organizes messaging patterns using queues for point-to-point delivery or topics for publish-subscribe models with configurable delivery guarantees.
• Network Traffic Routing - Directs incoming network requests to specific web resources based on domain names and configured routing policies.
• Private DNS Resolution - Provides recursive name resolution for internal networks and private cloud environments using custom forwarding rules and endpoints.
• Real-time Event Streams - Publishes data changes to connected clients using serverless WebSockets for live synchronization.
• Group Metadata Management - Performs lifecycle operations on resource groups and applies tags to categorize infrastructure collections.
• API Access Control - Enforces security policies using multiple authentication methods and network-level controls to restrict API access.
• Infrastructure Change Logs - Maintains version history of resource configurations to audit modifications and support infrastructure lifecycle management.
• Cloud Service Authentication - Creates formal identity and billing relationships with cloud providers.
• Compliance & Audit Tools - Facilitates collaborative audit assessments by allowing experts to review evidence and update compliance task statuses.
• Container Security - Implements isolation, access controls, and security hardening for container instances and underlying infrastructure.
• SSL/TLS Certificate Management - Provisions and maintains digital certificates for websites and applications to enable secure encrypted connections.
• Network Access Control - Controls traffic to database instances by defining security groups that permit access only from specified IP ranges.
• Network Access Controls - Controls access to virtual servers using cryptographic key pairs and virtual firewalls to restrict network traffic.
• Sensitive Variable Redaction - Audits and masks sensitive information within log streams using configurable policies to ensure data privacy and compliance.
• User Account Management - Provides a visual interface to manage user accounts and group memberships.
• Vulnerability Scanning - Inspects container images for security flaws upon upload and provides detailed reports to ensure secure software deployment.
• Compliance Reporting - Generates structured audit reports summarizing compliance posture and resource configurations for auditors.
• Distributed Resource Schedulers - Adjusts compute capacity dynamically to minimize costs and eliminate constraints.
• Instance Management - Provides patterns for managing the lifecycle of cloud instances, including custom startup and shutdown logic.
• Serverless Integrations - Connects database events to compute or API services to build automated, event-driven workflows without managing infrastructure.
• Resource Tagging - Applies and manages key-value metadata across multiple resources to enable bulk organization and tracking.
• Activity Monitors - Collects and stores activity data from third-party partner applications into a centralized, immutable repository for unified auditing and compliance analysis.
• Resource Organization - Consolidates cloud resources into logical views using tags and infrastructure stacks for simplified management.
• Application Performance Monitoring - Detects key performance indicators and tracks service level objectives to identify availability issues.
• Database Performance Monitors - Tracks real-time performance metrics and resource utilization for cloud-based database and application services.
• Security Guardrails - Applies automated detection and control policies to ensure that cloud environments remain secure and compliant with established standards.
• Instance Health Monitors - Tracks the status of instances using built-in or custom checks and replaces impaired units to ensure continuous availability.
• Instance Configuration Managers - Specifies configuration details for new instances to ensure consistent deployment across auto-scaling groups.
• Logging and Telemetry - Ingests, stores, and analyzes log data using interactive queries and automated filters.
• Monitoring and Observability - Tracks instance health and performance metrics while providing tools to automate administrative tasks.
• Service Uptime Monitors - Executes lightweight scripts at regular intervals to verify the uptime and response latency of web endpoints.
• Metric and Performance Monitors - Collects and tracks performance data from various sources to provide visibility into the operational health and resource utilization.
• Scaling Targets - Defines cloud resources as targets for automatic scaling with capacity limits.
• Cloud API Request Execution - Translates agent requests into secure cloud API calls using existing IAM credentials and granular access controls.

Star history