aws-cdk

This skill provides AWS CDK patterns for defining, validating, and deploying AWS infrastructure as code using TypeScript. It addresses the common problem of writing infrastructure that is repeatable, safe by default, and verifiable before it reaches a live AWS account, by codifying reusable constructs, sensible security defaults, and a validation-first delivery loop rather than ad-hoc CloudFormation authoring.

The skill walks through project initialization with `npx cdk init`, a core architecture example that instantiates stacks in an app entry point, and guidance on choosing between L1 (raw CloudFormation), L2 (curated with defaults and grant helpers), and L3 (multi-resource patterns like LambdaRestApi) constructs. It documents the CDK lifecycle commands (`cdk synth`, `cdk diff`, `cdk deploy`, `cdk destroy`, `cdk ls`, `cdk doctor`) and a recommended delivery loop: model the stack, run synth, run infrastructure tests, then review a diff for IAM broadening, resource replacement, and deletes on stateful resources before deploying. Bundled reference files cover core concepts, security hardening, testing strategies, VPC networking, and serverless patterns. Examples apply safe defaults such as S3 bucket encryption, versioning, blocked public access, and RETAIN removal policies.

It targets TypeScript developers, DevOps and platform engineers, and cloud architects building serverless or VPC-based AWS architectures who want environment-aware, multi-stack deployments with least-privilege IAM. Typical use cases include scaffolding a new CDK app, extracting repeated logic into custom constructs, and reviewing infrastructure changes before deploying to development or production accounts.