AWS CDK MCP Server

MCP server for AWS Cloud Development Kit (CDK) best practices, infrastructure as code patterns, and security compliance with CDK Nag.

Features

CDK General Guidance

Prescriptive patterns with AWS Solutions Constructs and GenAI CDK libraries
Structured decision flow for choosing appropriate implementation approaches
Security automation through CDK Nag integration and Lambda Powertools

CDK Nag Integration

Work with CDK Nag rules for security and compliance
Explain specific CDK Nag rules with AWS Well-Architected guidance
Check if CDK code contains Nag suppressions that require human review

AWS Solutions Constructs

Search and discover AWS Solutions Constructs patterns
Find recommended patterns for common architecture needs
Get detailed documentation on Solutions Constructs

Generative AI CDK Constructs

Search for GenAI CDK constructs by name or type
Discover specialized constructs for AI/ML workloads
Get implementation guidance for generative AI applications

Amazon Bedrock Agent Schema Generation

Generate OpenAPI schema for Bedrock Agent Action Groups
Streamline the creation of Bedrock Agent schemas
Convert code files to compatible OpenAPI specifications

Tools and Resources

CDK Nag Rules: Access rule packs via cdk-nag://rules/{rule_pack}
Lambda Powertools: Get guidance on Lambda Powertools via lambda-powertools://{topic}
AWS Solutions Constructs: Access patterns via aws-solutions-constructs://{pattern_name}
GenAI CDK Constructs: Access documentation via genai-cdk-constructs://{construct_type}/{construct_name}

Prerequisites

Install uv from Astral or the GitHub README
Install Python using uv python install 3.10

Installation

Here are some ways you can work with MCP across AWS, and we'll be adding support to more products including Amazon Q Developer CLI soon: (e.g. for Amazon Q Developer CLI MCP, ~/.aws/amazonq/mcp.json):

{
  "mcpServers": {
    "awslabs.cdk-mcp-server": {
      "command": "uvx",
      "args": ["awslabs.cdk-mcp-server@latest"],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

Security Considerations

When using this MCP server, you should consider:

Reviewing all CDK Nag warnings and errors manually
Fixing security issues rather than suppressing them whenever possible
Documenting clear justifications for any necessary suppressions
Using the CheckCDKNagSuppressions tool to verify no unauthorized suppressions exist

Before applying CDK NAG Suppressions, you should consider conducting your own independent assessment to ensure that your use would comply with your own specific security and quality control practices and standards, as well as the local laws, rules, and regulations that govern you and your content.

AWS CDK MCP Server