cdk-patterns

Use this skill when

• Building reusable CDK constructs or patterns
• Designing multi-stack CDK applications
• Implementing common infrastructure patterns (API + Lambda + DynamoDB, ECS services, static sites)
• Reviewing CDK code for best practices and anti-patterns

Do not use this skill when

• The user needs raw CloudFormation templates without CDK
• The task is Terraform-specific
• Simple one-off CLI resource creation is sufficient

Instructions

1. Identify the infrastructure pattern needed (e.g., serverless API, container service, data pipeline).
2. Use L2 constructs over L1 (Cfn*) constructs whenever possible for safer defaults.
3. Apply the principle of least privilege for all IAM roles and policies.
4. Use

   RemovalPolicy

   and

   Tags

   appropriately for production readiness.
5. Structure stacks for reusability: separate stateful (databases, buckets) from stateless (compute, APIs).
6. Enable monitoring by default (CloudWatch alarms, X-Ray tracing).

Examples

Example 1: Serverless API Pattern

import { Construct } from "constructs";
import * as apigateway from "aws-cdk-lib/aws-apigateway";
import * as lambda from "aws-cdk-lib/aws-lambda";
import * as dynamodb from "aws-cdk-lib/aws-dynamodb";

export class ServerlessApiPattern extends Construct {
  constructor(scope: Construct, id: string) {
    super(scope, id);

    const table = new dynamodb.Table(this, "Table", {
      partitionKey: { name: "pk", type: dynamodb.AttributeType.STRING },
      billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
      removalPolicy: cdk.RemovalPolicy.RETAIN,
    });

    const handler = new lambda.Function(this, "Handler", {
      runtime: lambda.Runtime.NODEJS_20_X,
      handler: "index.handler",
      code: lambda.Code.fromAsset("lambda"),
      environment: { TABLE_NAME: table.tableName },
      tracing: lambda.Tracing.ACTIVE,
    });

    table.grantReadWriteData(handler);

    new apigateway.LambdaRestApi(this, "Api", { handler });
  }
}

Best Practices

• ✅ Do: Use

  cdk.Tags.of(this).add()

  for consistent tagging
• ✅ Do: Separate stateful and stateless resources into different stacks
• ✅ Do: Use

  cdk diff

  before every deploy
• ❌ Don't: Use L1 (

  Cfn*

  ) constructs when L2 alternatives exist
• ❌ Don't: Hardcode account IDs or regions — use

  cdk.Aws.ACCOUNT_ID

Troubleshooting