What is AWS CDK MCP Server?

AWS CDK MCP Server is a tool that provides guidance and best practices for building applications with the AWS Cloud Development Kit (CDK). It offers patterns, security compliance checks, and resources for implementing cloud solutions.

How to Use AWS CDK MCP Server?

1. Install Prerequisites: Install uv, Python, and the AWS CDK CLI.
2. Configure MCP Server: Add the server to your MCP client configuration.
3. Use MCP Tools: Access tools via the MCP interface to get CDK guidance, search for patterns, generate schemas, and check CDK Nag rules.
4. Implement Workflow: Follow the recommended CDK implementation workflow, including initialization, pattern selection, schema generation, and security checks.
5. Deploy: Use cdk deploy after addressing any CDK Nag warnings or errors.

Key Features of AWS CDK MCP Server

• CDK General Guidance: Prescriptive patterns and decision flows for CDK implementation.
• CDK Nag Integration: Explain and address security and compliance issues with CDK Nag rules.
• AWS Solutions Constructs: Search and discover vetted architecture patterns combining AWS services.
• Generative AI CDK Constructs: Find specialized constructs for AI/ML workloads.
• Lambda Layer Documentation: Access comprehensive documentation for AWS Lambda layers.
• Bedrock Agent Schema Generation: Create OpenAPI schemas for AWS Bedrock Agents.
• Workflow Automation: Provides a structured approach to CDK implementations, automates schema generation, and integrates with various AWS tools.

Use Cases of AWS CDK MCP Server

1. Cloud Infrastructure Management: Develop and deploy AWS CDK applications with best practices.
2. Security Compliance: Ensure applications comply with security and AWS Well-Architected guidelines.
3. Generative AI Development: Build and deploy AI/ML applications using specialized CDK constructs.
4. Serverless Architecture: Use AWS Solutions Constructs for common use cases.
5. Bedrock Agent Development: Streamline the creation of Bedrock Agent schemas for action groups.

FAQ from AWS CDK MCP Server

• What are AWS Solutions Constructs?

  AWS Solutions Constructs are pre-vetted patterns for common cloud use cases, combining AWS services to follow best practices.

• What is CDK Nag?

  CDK Nag is a set of security and compliance rules for AWS CDK applications, provided as a tool within the AWS CDK MCP Server.

• How do I review CDK Nag warnings?

  Use the ExplainCDKNagRule tool to get detailed guidance on each Nag rule and the CheckCDKNagSuppressions tool to ensure suppressions are justified and compliant.

• What prerequisites are required?

  uv, Python 3.10+ (installed via uv python install 3.10), and the AWS CDK CLI.

AWS CDK MCP Server

MCP server for AWS Cloud Development Kit (CDK) best practices, infrastructure as code patterns, and security compliance with CDK Nag.

Features

CDK General Guidance

• Prescriptive patterns with AWS Solutions Constructs and GenAI CDK libraries
• Structured decision flow for choosing appropriate implementation approaches
• Security automation through CDK Nag integration and Lambda Powertools

CDK Nag Integration

• Work with CDK Nag rules for security and compliance
• Explain specific CDK Nag rules with AWS Well-Architected guidance
• Check if CDK code contains Nag suppressions that require human review

AWS Solutions Constructs

• Search and discover AWS Solutions Constructs patterns
• Find recommended patterns for common architecture needs
• Get detailed documentation on Solutions Constructs

Generative AI CDK Constructs

• Search for GenAI CDK constructs by name or type
• Discover specialized constructs for AI/ML workloads
• Get implementation guidance for generative AI applications

Lambda Layer Documentation Provider

• Access comprehensive documentation for AWS Lambda layers
• Get code examples for generic Lambda layers and Python-specific layers
• Retrieve directory structure information and implementation best practices
• Seamless integration with AWS Documentation MCP Server for detailed documentation

Amazon Bedrock Agent Schema Generation

• Use this tool when creating Bedrock Agents with Action Groups that use Lambda functions
• Streamline the creation of Bedrock Agent schemas
• Convert code files to compatible OpenAPI specifications

Developer Notes

• Requirements: Your Lambda function must use BedrockAgentResolver from AWS Lambda Powertools
• Lambda Dependencies: If schema generation fails, a fallback script will be generated. If you see error messages about missing dependencies, install them and then run the script again.
• Integration: Use the generated schema with bedrock.ApiSchema.fromLocalAsset() in your CDK code

CDK Implementation Workflow

This diagram provides a comprehensive view of the recommended CDK implementation workflow:

graph TD
    Start([Start]) --> A["CDKGeneralGuidance"]
    A --> Init["cdk init app"]

    Init --> B{Choose Approach}
    B -->|"Common Patterns"| C1["GetAwsSolutionsConstructPattern"]
    B -->|"GenAI Features"| C2["SearchGenAICDKConstructs"]
    B -->|"Custom Needs"| C3["Custom CDK Code"]

    C1 --> D1["Implement Solutions Construct"]
    C2 --> D2["Implement GenAI Constructs"]
    C3 --> D3["Implement Custom Resources"]

    %% Bedrock Agent with Action Groups specific flow
    D2 -->|"For Bedrock Agents

with Action Groups"| BA["Create Lambda with

BedrockAgentResolver"]

    %% Schema generation flow
    BA --> BS["GenerateBedrockAgentSchema"]
    BS -->|"Success"| JSON["openapi.json created"]
    BS -->|"Import Errors"| BSF["Tool generates

generate_schema.py"]
    BSF -->|"Missing dependencies?"| InstallDeps["Install dependencies"]
    InstallDeps --> BSR["Run script manually:

python generate_schema.py"]
    BSR --> JSON["openapi.json created"]

    %% Use schema in Agent CDK
    JSON --> AgentCDK["Use schema in

Agent CDK code"]
    AgentCDK --> D2

    %% Conditional Lambda Powertools implementation
    D1 & D2 & D3 --> HasLambda{"Using Lambda

Functions?"}
    HasLambda --> UseLayer{"Using Lambda

Layers?"}
    UseLayer -->|"Yes"| LLDP["LambdaLayerDocumentationProvider"]

    HasLambda -->|"No"| SkipL["Skip"]

    %% Rest of workflow
    LLDP["LambdaLayerDocumentationProvider"] --> Synth["cdk synth"]
    SkipL --> Synth

    Synth --> Nag{"CDK Nag

warnings?"}
    Nag -->|Yes| E["ExplainCDKNagRule"]
    Nag -->|No| Deploy["cdk deploy"]

    E --> Fix["Fix or Add Suppressions"]
    Fix --> CN["CheckCDKNagSuppressions"]
    CN --> Synth

    %% Styling with darker colors
    classDef default fill:#424242,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef cmd fill:#4a148c,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef tool fill:#01579b,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef note fill:#1b5e20,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef output fill:#006064,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef decision fill:#5d4037,stroke:#ffffff,stroke-width:1px,color:#ffffff;

    class Init,Synth,Deploy,BSR cmd;
    class A,C1,C2,BS,E,CN,LLDP tool;
    class JSON output;
    class HasLambda,UseLayer,Nag decision;

Available MCP Tools

• CDKGeneralGuidance: Get prescriptive advice for building AWS applications with CDK
• GetAwsSolutionsConstructPattern: Find vetted architecture patterns combining AWS services
• SearchGenAICDKConstructs: Discover GenAI CDK constructs by name or features
• GenerateBedrockAgentSchema: Create OpenAPI schemas for Bedrock Agent action groups
• LambdaLayerDocumentationProvider: Access documentation for Lambda layers implementation
• ExplainCDKNagRule: Get detailed guidance on CDK Nag security rules
• CheckCDKNagSuppressions: Validate CDK Nag suppressions in your code

Available MCP Resources

• CDK Nag Rules: Access rule packs via cdk-nag://rules/{rule_pack}
• AWS Solutions Constructs: Access patterns via aws-solutions-constructs://{pattern_name}
• GenAI CDK Constructs: Access documentation via genai-cdk-constructs://{construct_type}/{construct_name}
• Lambda Powertools: Get guidance on Lambda Powertools via lambda-powertools://{topic}

Prerequisites

1. Install uv from Astral or the GitHub README
2. Install Python using uv python install 3.10
3. Install AWS CDK CLI using npm install -g aws-cdk (Note: The MCP server itself doesn't use the CDK CLI directly, but it guides users through CDK application development that requires the CLI)

Installation

Configure the MCP server in your MCP client configuration (e.g., for Amazon Q Developer CLI, edit ~/.aws/amazonq/mcp.json):

{
  "mcpServers": {
    "awslabs.cdk-mcp-server": {
      "command": "uvx",
      "args": ["awslabs.cdk-mcp-server@latest"],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

or docker after a successful docker build -t awslabs/cdk-mcp-server .:

  {
    "mcpServers": {
      "awslabs.cdk-mcp-server": {
        "command": "docker",
        "args": [
          "run",
          "--rm",
          "--interactive",
          "--env",
          "FASTMCP_LOG_LEVEL=ERROR",
          "awslabs/cdk-mcp-server:latest"
        ],
        "env": {},
        "disabled": false,
        "autoApprove": []
      }
    }
  }

Security Considerations

When using this MCP server, you should consider:

• Reviewing all CDK Nag warnings and errors manually
• Fixing security issues rather than suppressing them whenever possible
• Documenting clear justifications for any necessary suppressions
• Using the CheckCDKNagSuppressions tool to verify no unauthorized suppressions exist

Before applying CDK NAG Suppressions, you should consider conducting your own independent assessment to ensure that your use would comply with your own specific security and quality control practices and standards, as well as the local laws, rules, and regulations that govern you and your content.