CDK-Nag allows you to check your infrastructure before it's deployed, preventing potential issues and saving time and money.
To use CDK-Nag, you need to install it and import and setup rules and packs in your CDK project.
It is recommended to use the NagReportLogger provided with CDK-Nag or develop your own logger to output the issues in a structured format like JSON or CSV.
CDK-Nag provides rule packs for NIST 800-53 rev 4, NIST 800-53 rev 5, and PCI DSS 3.2.1, with the ability to create custom rules as well.