import { PDKNag } from '@aws/pdk/pdk-nag'
import { AwsSolutionsChecks } from 'cdk-nag'

;(async () => {
  const app = PDKNag.app({
    failOnError: true,
    failOnWarning: true,
    nagPacks: [new AwsSolutionsChecks({ verbose: true, reports: true })],
  })

  ...

  app.synth()
})().catch((error) => {
  console.error(error)
  process.exit(1)
})

  {
    info: "The Athena workgroup does not encrypt query results.",
    explanation:
      "Encrypting query results stored in S3 helps secure data to meet compliance requirements for data-at-rest encryption.",
    level: NagMessageLevel.WARN,
    rule: rules.athena.AthenaWorkgroupEncryptedQueryResults,
  },

  {
    info: "The CodeBuild project has privileged mode enabled.",
    explanation:
      "Privileged grants elevated rights to the system, which introduces additional risk. Privileged mode should only be set to true only if the build project is used to build Docker images. Otherwise, a build that attempts to interact with the Docker daemon fails.",
    level: NagMessageLevel.WARN,
    rule: rules.codebuild.CodeBuildProjectPrivilegedModeDisabled,
  },