If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page. Please do not create a public GitHub issue.

Projects scaffolded by the Nx Plugin for AWS include security controls out of the box, including infrastructure security scanning with Checkov, container image scanning with Trivy, credential scanning with git-secrets, IAM (SigV4) authentication by default, and encryption in transit and at rest for vended infrastructure.

See the Security guide for a complete overview.