AWS CDK MCP Server

MCP server for AWS Cloud Development Kit (CDK) best practices, infrastructure as code patterns, and security compliance with CDK Nag.

Features

CDK General Guidance

Prescriptive patterns with AWS Solutions Constructs and GenAI CDK libraries
Structured decision flow for choosing appropriate implementation approaches
Security automation through CDK Nag integration and Lambda Powertools

CDK Nag Integration

Work with CDK Nag rules for security and compliance
Explain specific CDK Nag rules with AWS Well-Architected guidance
Check if CDK code contains Nag suppressions that require human review

AWS Solutions Constructs

Search and discover AWS Solutions Constructs patterns
Find recommended patterns for common architecture needs
Get detailed documentation on Solutions Constructs

Generative AI CDK Constructs

Search for GenAI CDK constructs by name or type
Discover specialized constructs for AI/ML workloads
Get implementation guidance for generative AI applications

Lambda Layer Documentation Provider

Access comprehensive documentation for AWS Lambda layers
Get code examples for generic Lambda layers and Python-specific layers
Retrieve directory structure information and implementation best practices
Seamless integration with AWS Documentation MCP Server for detailed documentation

Amazon Bedrock Agent Schema Generation

Use this tool when creating Bedrock Agents with Action Groups that use Lambda functions
Streamline the creation of Bedrock Agent schemas
Convert code files to compatible OpenAPI specifications

Developer Notes

Requirements: Your Lambda function must use BedrockAgentResolver from AWS Lambda Powertools
Lambda Dependencies: If schema generation fails, a fallback script will be generated. If you see error messages about missing dependencies, install them and then run the script again.
Integration: Use the generated schema with bedrock.ApiSchema.fromLocalAsset() in your CDK code

CDK Implementation Workflow

This diagram provides a comprehensive view of the recommended CDK implementation workflow:

graph TD
    Start([Start]) --> A["CDKGeneralGuidance"]
    A --> Init["cdk init app"]

    Init --> B{Choose Approach}
    B -->|"Common Patterns"| C1["GetAwsSolutionsConstructPattern"]
    B -->|"GenAI Features"| C2["SearchGenAICDKConstructs"]
    B -->|"Custom Needs"| C3["Custom CDK Code"]

    C1 --> D1["Implement Solutions Construct"]
    C2 --> D2["Implement GenAI Constructs"]
    C3 --> D3["Implement Custom Resources"]

    %% Bedrock Agent with Action Groups specific flow
    D2 -->|"For Bedrock Agents<br/>with Action Groups"| BA["Create Lambda with<br/>BedrockAgentResolver"]

    %% Schema generation flow
    BA --> BS["GenerateBedrockAgentSchema"]
    BS -->|"Success"| JSON["openapi.json created"]
    BS -->|"Import Errors"| BSF["Tool generates<br/>generate_schema.py"]
    BSF -->|"Missing dependencies?"| InstallDeps["Install dependencies"]
    InstallDeps --> BSR["Run script manually:<br/>python generate_schema.py"]
    BSR --> JSON["openapi.json created"]

    %% Use schema in Agent CDK
    JSON --> AgentCDK["Use schema in<br/>Agent CDK code"]
    AgentCDK --> D2

    %% Conditional Lambda Powertools implementation
    D1 & D2 & D3 --> HasLambda{"Using Lambda<br/>Functions?"}
    HasLambda --> UseLayer{"Using Lambda<br/>Layers?"}
    UseLayer -->|"Yes"| LLDP["LambdaLayerDocumentationProvider"]

    HasLambda -->|"No"| SkipL["Skip"]

    %% Rest of workflow
    LLDP["LambdaLayerDocumentationProvider"] --> Synth["cdk synth"]
    SkipL --> Synth

    Synth --> Nag{"CDK Nag<br/>warnings?"}
    Nag -->|Yes| E["ExplainCDKNagRule"]
    Nag -->|No| Deploy["cdk deploy"]

    E --> Fix["Fix or Add Suppressions"]
    Fix --> CN["CheckCDKNagSuppressions"]
    CN --> Synth

    %% Styling with darker colors
    classDef default fill:#424242,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef cmd fill:#4a148c,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef tool fill:#01579b,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef note fill:#1b5e20,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef output fill:#006064,stroke:#ffffff,stroke-width:1px,color:#ffffff;
    classDef decision fill:#5d4037,stroke:#ffffff,stroke-width:1px,color:#ffffff;

    class Init,Synth,Deploy,BSR cmd;
    class A,C1,C2,BS,E,CN,LLDP tool;
    class JSON output;
    class HasLambda,UseLayer,Nag decision;

Available MCP Tools

CDKGeneralGuidance: Get prescriptive advice for building AWS applications with CDK
GetAwsSolutionsConstructPattern: Find vetted architecture patterns combining AWS services
SearchGenAICDKConstructs: Discover GenAI CDK constructs by name or features
GenerateBedrockAgentSchema: Create OpenAPI schemas for Bedrock Agent action groups
LambdaLayerDocumentationProvider: Access documentation for Lambda layers implementation
ExplainCDKNagRule: Get detailed guidance on CDK Nag security rules
CheckCDKNagSuppressions: Validate CDK Nag suppressions in your code

Available MCP Resources

CDK Nag Rules: Access rule packs via cdk-nag://rules/{rule_pack}
AWS Solutions Constructs: Access patterns via aws-solutions-constructs://{pattern_name}
GenAI CDK Constructs: Access documentation via genai-cdk-constructs://{construct_type}/{construct_name}
Lambda Powertools: Get guidance on Lambda Powertools via lambda-powertools://{topic}

Prerequisites

Install uv from Astral or the GitHub README
Install Python using uv python install 3.10
Install AWS CDK CLI using npm install -g aws-cdk (Note: The MCP server itself doesn't use the CDK CLI directly, but it guides users through CDK application development that requires the CLI)

Installation

Configure the MCP server in your MCP client configuration (e.g., for Amazon Q Developer CLI, edit ~/.aws/amazonq/mcp.json):

{
  "mcpServers": {
    "awslabs.cdk-mcp-server": {
      "command": "uvx",
      "args": ["awslabs.cdk-mcp-server@latest"],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

or docker after a successful docker build -t awslabs/cdk-mcp-server .:

  {
    "mcpServers": {
      "awslabs.cdk-mcp-server": {
        "command": "docker",
        "args": [
          "run",
          "--rm",
          "--interactive",
          "--env",
          "FASTMCP_LOG_LEVEL=ERROR",
          "awslabs/cdk-mcp-server:latest"
        ],
        "env": {},
        "disabled": false,
        "autoApprove": []
      }
    }
  }

Security Considerations

When using this MCP server, you should consider:

Reviewing all CDK Nag warnings and errors manually
Fixing security issues rather than suppressing them whenever possible
Documenting clear justifications for any necessary suppressions
Using the CheckCDKNagSuppressions tool to verify no unauthorized suppressions exist

Before applying CDK NAG Suppressions, you should consider conducting your own independent assessment to ensure that your use would comply with your own specific security and quality control practices and standards, as well as the local laws, rules, and regulations that govern you and your content.

AWS CDK Best Practices