AI-Powered Analysis
Static analysis catches known patterns. AI catches everything else — context-aware security risks, cost optimisation opportunities, and architecture improvements that rules alone can't find.
What is AI-Powered Analysis?
CDK Insights AI goes beyond traditional static analysis by using machine learning to understand your infrastructure context and provide intelligent recommendations. Unlike rule-based analysis, AI considers:
- Resource Relationships - How components interact with each other
- Usage Patterns - How your infrastructure is actually used
- Industry Best Practices - Proven patterns from thousands of deployments
- Contextual Risk - Real-world impact assessment
This results in more accurate, relevant, and actionable recommendations that help you build better infrastructure.
AI Analysis Capabilities
Security Analysis
AI-powered security vulnerability detection and remediation
Key Features
- Context-aware security recommendations
- CloudFormation configuration analysis
- Compliance framework alignment
- Risk assessment and prioritization
Example Recommendations
- →Suggests least-privilege IAM policies based on configuration
- →Identifies potential data exposure risks in S3 configurations
- →Recommends encryption strategies for sensitive workloads
Cost Optimization
Intelligent cost reduction suggestions based on resource configuration
Key Features
- Resource configuration analysis
- Right-sizing recommendations
- Storage optimization suggestions
- Cost reduction opportunities
Example Recommendations
- →Recommends Lambda memory optimization based on configuration
- →Suggests RDS instance right-sizing and storage optimizations
- →Identifies potentially over-provisioned resources
Performance Enhancement
AI-driven performance optimization recommendations
Key Features
- Performance bottleneck identification
- Architecture pattern suggestions
- Scaling strategy recommendations
- Latency optimization tips
Example Recommendations
- →Suggests caching strategies for frequently accessed data
- →Recommends database connection pooling optimizations
- →Identifies API Gateway throttling opportunities
AI vs Static Analysis
| Aspect | Static Analysis | AI Analysis |
|---|---|---|
| Issue Detection | 100+ rules, pattern matching | Context-aware intelligent analysis |
| Recommendations | Best practice guidance with fixes | Personalised, architecture-aware recommendations |
| Categorisation | Severity-based (Critical/High/Medium/Low) | Severity + Well-Architected Framework pillar mapping |
| Fix Guidance | Best practice guidance | Context-aware remediation with code examples |
| Complexity | Individual resource analysis | Multi-resource relationship analysis |
Advanced AI Features
Contextual Analysis
AI understands the relationships between resources and their intended use
Benefit:
More accurate and relevant recommendations
Example: Recognizes that a Lambda function with high memory is intentionally configured for data processing workloads
Pattern Recognition
Identifies common anti-patterns and suggests proven alternatives
Benefit:
Prevents common mistakes before they become problems
Example: Detects tight coupling between services and suggests event-driven architecture patterns
Risk Assessment
Evaluates the actual risk level of security and configuration issues
Benefit:
Prioritizes issues based on real-world impact
Example: Identifies that a public S3 bucket containing only static assets has lower risk than one with sensitive data
Expert Analysis
AI categorises findings by AWS Well-Architected Framework pillars
Benefit:
Industry-standard best practices in every recommendation
Example: Maps findings to Security, Cost Optimisation, Reliability, Performance, and Operational Excellence pillars
AI Features by Tier
Free Tier
Comprehensive static analysis
Limitations:
- 105 rules across 35+ AWS services
- JSON, Table & Markdown output
- Multi-stack analysis, CLI access
Pro Tier
Full AI-powered analysis
AI Benefits:
- AI-powered security analysis via Bedrock
- Well-Architected Framework pillar categorisation
- Context-aware fix recommendations
- Dashboard, PDF reports & GitHub integration
Getting Started with AI Analysis
Upgrade to Pro
AI analysis is available in the Pro tier. Upgrade your license to access intelligent recommendations.
Set Your License Key
Configure your Pro license key to enable AI features:
export CDK_INSIGHTS_LICENSE_KEY=your_pro_license_keyRun Analysis
AI analysis runs automatically when you scan your CDK application:
npx cdk-insights scanSee What Static Analysis Misses
Pro adds AI-powered deep analysis, Well-Architected pillar mapping, and context-aware fix recommendations — from £9.99/mo. Start with a free trial.
