AWS CDK flags 命令查看当前配置

命令

查看哪些flag没配置或和推荐值不一致

$ cdk flags --unstable=flags
Unconfigured feature flags
┌──────────────────────────────────────────────────────────────────────────────────────────────┬─────────────┬─────────┬───────────┐
│ Feature Flag                                                                                 │ Recommended │ User    │ Effective │
├──────────────────────────────────────────────────────────────────────────────────────────────┼─────────────┼─────────┼───────────┤
│ Module: aws-cdk-lib                                                                          │             │         │           │
│   @aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver                          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId                                │ true        │ <unset> │ false     │
│   @aws-cdk/aws-apigateway:disableCloudWatchRole                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-apigateway:requestValidatorUniqueId                                           │ true        │ <unset> │ false     │
│   @aws-cdk/aws-appsync:appSyncGraphQLAPIScopeLambdaPermission                                │ true        │ <unset> │ false     │
│   @aws-cdk/aws-appsync:useArnForSourceApiAssociationIdentifier                               │ true        │ <unset> │ false     │
│   @aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig                       │ true        │ <unset> │ false     │
│   @aws-cdk/aws-batch:defaultToAL2023                                                         │ true        │ <unset> │ false     │
│   @aws-cdk/aws-cloudfront:defaultFunctionRuntimeV2_0                                         │ true        │ <unset> │ false     │
│   @aws-cdk/aws-cloudwatch-actions:changeLambdaPermissionLogicalIdForLambdaAction             │ true        │ <unset> │ false     │
│   @aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup                                    │ true        │ <unset> │ false     │
│   @aws-cdk/aws-codepipeline-actions:useNewDefaultBranchForCodeCommitSource                   │ true        │ <unset> │ false     │
│   @aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName                        │ true        │ <unset> │ false     │
│   @aws-cdk/aws-codepipeline:crossAccountKeysDefaultValueToFalse                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-codepipeline:defaultPipelineTypeToV2                                          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-dynamodb:resourcePolicyPerReplica                                             │ true        │ <unset> │ false     │
│   @aws-cdk/aws-dynamodb:retainTableReplica                                                   │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:bastionHostUseAmazonLinux2023ByDefault                                    │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:ebsDefaultGp3Volume                                                       │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:ec2SumTImeoutEnabled                                                      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:launchTemplateDefaultUserData                                             │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:requirePrivateSubnetsForEgressOnlyInternetGateway                         │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:restrictDefaultSecurityGroup                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ec2:uniqueImdsv2TemplateName                                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs-patterns:secGroupsDisablesImplicitOpenListener                            │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs-patterns:uniqueTargetGroupId                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs:arnFormatIncludesClusterName                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker                      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs:reduceEc2FargateCloudWatchPermissions                                     │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs:removeDefaultDeploymentAlarm                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-ecs:removeEmptyLoadBalancers                                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-efs:denyAnonymousAccess                                                       │ true        │ <unset> │ false     │
│   @aws-cdk/aws-efs:mountTargetOrderInsensitiveLogicalId                                      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-eks:defaultToAL2023                                                           │ true        │ <unset> │ false     │
│   @aws-cdk/aws-eks:nodegroupNameAttribute                                                    │ true        │ <unset> │ false     │
│   @aws-cdk/aws-eks:useNativeOidcProvider                                                     │ true        │ <unset> │ false     │
│   @aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault │ true        │ <unset> │ false     │
│   @aws-cdk/aws-elasticloadbalancingv2:networkLoadBalancerWithSecurityGroupByDefault          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-elasticloadbalancingv2:usePostQuantumTlsPolicy                                │ true        │ <unset> │ false     │
│   @aws-cdk/aws-events:eventsTargetQueueSameAccount                                           │ true        │ <unset> │ false     │
│   @aws-cdk/aws-events:requireEventBusPolicySid                                               │ true        │ <unset> │ false     │
│   @aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName                                    │ true        │ <unset> │ false     │
│   @aws-cdk/aws-iam:minimizePolicies                                                          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-iam:oidcRejectUnauthorizedConnections                                         │ true        │ <unset> │ false     │
│   @aws-cdk/aws-kms:aliasNameRef                                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-kms:applyImportedAliasPermissionsToPrincipal                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope                                       │ true        │ <unset> │ false     │
│   @aws-cdk/aws-lambda-nodejs:sdkV3ExcludeSmithyPackages                                      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion                                         │ true        │ <unset> │ false     │
│   @aws-cdk/aws-lambda:recognizeLayerVersion                                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-lambda:useCdkManagedLogGroup                                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby                          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters        │ true        │ <unset> │ false     │
│   @aws-cdk/aws-rds:databaseProxyUniqueResourceName                                           │ true        │ <unset> │ false     │
│   @aws-cdk/aws-rds:preventRenderingDeprecatedCredentials                                     │ true        │ <unset> │ false     │
│   @aws-cdk/aws-rds:setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId           │ true        │ <unset> │ false     │
│   @aws-cdk/aws-redshift:columnId                                                             │ true        │ <unset> │ false     │
│   @aws-cdk/aws-route53-patterns:useDistribution                                              │ true        │ <unset> │ false     │
│   @aws-cdk/aws-route53-patters:useCertificate                                                │ true        │ <unset> │ false     │
│   @aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource                 │ true        │ <unset> │ false     │
│   @aws-cdk/aws-s3:createDefaultLoggingPolicy                                                 │ true        │ <unset> │ false     │
│   @aws-cdk/aws-s3:publicAccessBlockedByDefault                                               │ true        │ <unset> │ false     │
│   @aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy                                            │ true        │ <unset> │ false     │
│   @aws-cdk/aws-s3:setUniqueReplicationRoleName                                               │ true        │ <unset> │ false     │
│   @aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-signer:signingProfileNamePassedToCfn                                          │ true        │ <unset> │ false     │
│   @aws-cdk/aws-sns-subscriptions:restrictSqsDescryption                                      │ true        │ <unset> │ false     │
│   @aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2                                  │ true        │ <unset> │ false     │
│   @aws-cdk/aws-stepfunctions-tasks:fixRunEcsTaskPolicy                                       │ true        │ <unset> │ false     │
│   @aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2                                 │ true        │ <unset> │ false     │
│   @aws-cdk/core:annotationsInValidationReport                                                │ true        │ <unset> │ false     │
│   @aws-cdk/core:aspectPrioritiesMutating                                                     │ true        │ <unset> │ false     │
│   @aws-cdk/core:cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics                  │ true        │ <unset> │ false     │
│   @aws-cdk/core:checkSecretUsage                                                             │ true        │ <unset> │ false     │
│   @aws-cdk/core:defaultCrossStackReferences                                                  │ weak        │ <unset> │ strong    │
│   @aws-cdk/core:enableAdditionalMetadataCollection                                           │ true        │ <unset> │ false     │
│   @aws-cdk/core:enablePartitionLiterals                                                      │ true        │ <unset> │ false     │
│   @aws-cdk/core:explicitStackTags                                                            │ true        │ <unset> │ false     │
│   @aws-cdk/core:includePrefixInUniqueNameGeneration                                          │ true        │ <unset> │ false     │
│   @aws-cdk/core:target-partitions                                                            │ aws,aws-cn  │ <unset> │ false     │
│   @aws-cdk/core:validateAgainstDefaultRules                                                  │ true        │ <unset> │ false     │
│   @aws-cdk/core:validateSnapshotRemovalPolicy                                                │ true        │ <unset> │ false     │
│   @aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions                           │ true        │ <unset> │ false     │
└──────────────────────────────────────────────────────────────────────────────────────────────┴─────────────┴─────────┴───────────┘

Available options:
  cdk flags --interactive     # Interactive menu to manage flags
  cdk flags --all             # Show all flags (including configured ones)
  cdk flags --set --all --recommended    # Set all flags to recommended values
  cdk flags --set --all --default       # Set all flags to default values
  cdk flags --set --unconfigured --recommended  # Set unconfigured flags to recommended
  cdk flags --set <flag-name> --value <true|false>  # Set specific flag
  cdk flags --safe            # Safely set flags that don't change templates

设置命令

全部设为推荐值，会写入cdk.json

cdk flags --unstable=flags --set --recommended --all