AWS prescriptive-guidance documentation change
Summary
Removed cfn-nag recommendation and updated naming conventions
Security assessment
While removing a security tool recommendation (cfn-nag) could impact security practices, there's no evidence of addressing a specific vulnerability. The change updates documentation without explicit security context.
Diff
diff --git a/prescriptive-guidance/latest/best-practices-cdk-typescript-iac/doc-history.md b/prescriptive-guidance/latest/best-practices-cdk-typescript-iac/doc-history.md index 2950412f4..ee60e1141 100644 --- a//prescriptive-guidance/latest/best-practices-cdk-typescript-iac/doc-history.md +++ b//prescriptive-guidance/latest/best-practices-cdk-typescript-iac/doc-history.md @@ -10,0 +11 @@ Change| Description| Date +Updated best practices| We removed the recommendation to use cfn-nag in the [Common development tools](https://docs.aws.amazon.com/prescriptive-guidance/latest/best-practices-cdk-typescript-iac/security-formatting-best-practices.html#common-dev-tools) section. In the [Define standard naming conventions](https://docs.aws.amazon.com/prescriptive-guidance/latest/best-practices-cdk-typescript-iac/typescript-best-practices.html#naming-conventions) section, we added standard naming conventions for global constants and added naming examples.| October 23, 2025