When building agents based on DeepSeek Harness (DSH), developers often face problems such as a lack of best-practice guidance for AWS Cloud Development Kit (CDK) code, cumbersome security compliance checks, and difficulty quickly finding architecture patterns. The xby-awslabs-cdk plugin helps developers build compliant and efficient AWS infrastructure by providing CDK Nag rule explanations, architecture pattern retrieval, and related features.

What This Is

This plugin is maintained by xby-skill and belongs to the “online tools” category. As an AWS CDK MCP Server, it aims to provide developers with CDK best practices, infrastructure-as-code patterns, and CDK Nag security compliance checks.

Core Features

The plugin provides the following main features:

  1. set_xby_apikey: Set the API key in chat; it is automatically persisted and remains valid after restart.
  2. CDKGeneralGuidance: Get normative CDK guidance for building AWS applications.
  3. ExplainCDKNagRule: Explain a specific CDK Nag rule, providing AWS Well-Architected guidance and remediation steps.
  4. CheckCDKNagSuppressions: Check Nag suppressions in CDK code to ensure security suppressions have been manually reviewed (Deprecated; consider using AWS IaC MCP Server).
  5. GenerateBedrockAgentSchema: Generate an OpenAPI schema for Bedrock Agent Action Groups from a file (Deprecated; consider using AWS IaC MCP Server).
  6. GetAwsSolutionsConstructPattern: Search and discover AWS Solutions Constructs patterns.
  7. SearchGenAICDKConstructs: Search and discover GenAI CDK Constructs.
  8. LambdaLayerDocumentationProvider: Provide documentation sources for Lambda layers.

Installation and Enablement

Install the plugin using the following command:

dsh plugin --profile web add github:xby_skill/xby-awslabs-cdk

The plugin license is MIT.

Typical Usage

1. Set the API Key

Set the API key in the conversation; the key is persisted automatically and remains valid after restarting DSH.

2. Explain a CDK Nag Rule

When you encounter a specific CDK Nag error (for example, AwsSolutions-IAM4), you can directly ask the plugin for an explanation and remediation steps.

import { App } from 'aws-cdk-lib';
import { AwsSolutionsChecks } from 'cdk-nag';

const app = new App();
const stack = new MyStack(app, 'MyStack');
AwsSolutionsChecks.check(app);

3. Search Solution Patterns

Search AWS Solutions Constructs patterns to quickly implement common architectures (for example, API + Lambda + DynamoDB).

4. Provide Lambda Layer Documentation

When developing a Lambda layer, request documentation source information to assist integration.

Use Cases and Notes

  • Prerequisites: Using this plugin requires an API key. Register at XiaoBenYang official site to obtain it.
  • Version Information: The current version is 1.0.0.
  • Feature Status: Some tools (CheckCDKNagSuppressions and GenerateBedrockAgentSchema) are marked as deprecated. Use alternatives provided by AWS IaC MCP Server.
  • Execution Privileges: The plugin runs with the permissions of the current DSH process. It is recommended to review the source code and license before installation.

Conclusion

By integrating CDK best practices and security checks, the plugin lowers the barrier to writing complex AWS infrastructure code. Developers can access plugin details via the following links: Catalog page and GitHub.