xby-awslabs-cdk

DeepSeek Harness (DSH) 的插件：CDK最佳实践服务

AWS CDK MCP Server是一个提供AWS Cloud Development Kit (CDK)最佳实践、基础设施即代码模式和CDK Nag安全合规性的工具，适用于开发者在构建AWS应用程序时获取指导和建议。

功能

• set_xby_apikey — 在聊天中设置 API 密钥（自动持久化，重启有效）
• CDKGeneralGuidance — Use this tool to get prescriptive CDK advice for building applications on AWS.

Args: ctx: MCP context

• ExplainCDKNagRule — Explain a specific CDK Nag rule with AWS Well-Architected guidance.

CDK Nag is a crucial tool for ensuring your CDK applications follow AWS security best practices.

Basic implementation:

import { App } from 'aws-cdk-lib';
import { AwsSolutionsChecks } from 'cdk-nag';

const app = new App();
// Create your stack
const stack = new MyStack(app, 'MyStack');
// Apply CDK Nag
AwsSolutionsChecks.check(app);

Optional integration patterns:

1. Using environment variables:

if (process.env.ENABLE_CDK_NAG === 'true') {
  AwsSolutionsChecks.check(app);
}

2. Using CDK context parameters:

3. Environment-specific application:
```typescript
const environment = app.node.tryGetContext('environment') || 'development';
if (['production', 'staging'].includes(environment)) {
  AwsSolutionsChecks.check(stack);
}

For more information on specific rule packs:

• Use resource cdk-nag://rules/{rule_pack} to get all rules for a specific pack
• Use resource cdk-nag://warnings/{rule_pack} to get warnings for a specific pack
• Use resource cdk-nag://errors/{rule_pack} to get errors for a specific pack

Args: ctx: MCP context rule_id: The CDK Nag rule ID (e.g., 'AwsSolutions-IAM4')

Returns: Dictionary with detailed explanation and remediation steps

• CheckCDKNagSuppressions — DEPRECATED: This tool is deprecated. Please use the AWS IaC MCP Server instead.

Check if CDK code contains Nag suppressions that require human review.

Scans TypeScript/JavaScript code for NagSuppressions usage to ensure security suppressions receive proper human oversight and justification.

Args: ctx: MCP context code: CDK code to analyze (TypeScript/JavaScript) file_path: Path to a file containing CDK code to analyze

Returns: Analysis results with suppression details and security guidance

• GenerateBedrockAgentSchema — DEPRECATED: This tool is deprecated. Please use the AWS IaC MCP Server instead.

Generate OpenAPI schema for Bedrock Agent Action Groups from a file.

This tool converts a Lambda file with BedrockAgentResolver into a Bedrock-compatible OpenAPI schema. It uses a progressive approach to handle common issues:

1. Direct import of the Lambda file
2. Simplified version with problematic imports commented out
3. Fallback script generation if needed

Args: ctx: MCP context lambda_code_path: Path to Python file containing BedrockAgentResolver app output_path: Where to save the generated schema

Returns: Dictionary with schema generation results, including status, path to generated schema, and diagnostic information if errors occurred

• GetAwsSolutionsConstructPattern — Search and discover AWS Solutions Constructs patterns.

AWS Solutions Constructs are vetted architecture patterns that combine multiple AWS services to solve common use cases following AWS Well-Architected best practices.

Key benefits:

• Accelerated Development: Implement common patterns without boilerplate code
• Best Practices Built-in: Security, reliability, and performance best practices
• Reduced Complexity: Simplified interfaces for multi-service architectures
• Well-Architected: Patterns follow AWS Well-Architected Framework principles

When to use Solutions Constructs:

• Implementing common architecture patterns (e.g., API + Lambda + DynamoDB)
• You want secure defaults and best practices applied automatically
• You need to quickly prototype or build production-ready infrastructure

This tool provides metadata about patterns. For complete documentation, use the resource URI returned in the 'documentation_uri' field.

Args: ctx: MCP context pattern_name: Optional name of the specific pattern (e.g., 'aws-lambda-dynamodb') services: Optional list of AWS services to search for patterns that use them (e.g., ['lambda', 'dynamodb'])

Returns: Dictionary with pattern metadata including description, services, and documentation URI

• SearchGenAICDKConstructs — Search for GenAI CDK constructs by name or type.

The search is flexible and will match any of your search terms (OR logic). It handles common variations like singular/plural forms and terms with/without spaces. Content is fetched dynamically from GitHub to ensure the most up-to-date documentation.

Examples:

• "bedrock agent" - Returns all agent-related constructs
• "knowledgebase vector" - Returns knowledge base constructs related to vector stores
• "agent actiongroups" - Returns action groups for agents
• "opensearch vector" - Returns OpenSearch vector constructs

The search supports subdirectory content (like knowledge bases and their sections) and will find matches across all available content.

Args: ctx: MCP context query: Search term(s) to find constructs by name or description construct_type: Optional filter by construct type ('bedrock', 'opensearchserverless', etc.)

Returns: Dictionary with matching constructs and resource URIs

• LambdaLayerDocumentationProvider — Provide documentation sources for Lambda layers.

This tool returns information about where to find documentation for Lambda layers and instructs the MCP Client to fetch and process this documentation.

Args: ctx: MCP context layer_type: Type of layer ("generic" or "python")

Returns: Dictionary with documentation source information

安装

方式一：从 GitHub 直接安装（推荐）

# 格式: dsh plugin --profile <profile> add github:<owner>/<repo>
dsh plugin --profile web add github:xby_skill/xby-awslabs-cdk

方式二：从本地目录安装（开发模式）

# 仅用于本地开发调试
dsh plugin --profile web add /absolute/path/to/xby-awslabs-cdk

方式三：通过 cordis.patch.yml 开发调试

dsh web --profile web --patch /absolute/path/to/dsh-ocr-plugin/cordis.patch.yml

配置

获取 API 密钥

前往 小笨羊官网 注册并获取 API 密钥。