Add cdk-nag suppressions in addition to cfn-nag

[joshwand]

There are dozens of core helpers that generate cfnRulesToSuppress, but that project has been abandoned, and there is now the officially-AWS-supported cdk-nag project.

All aws-solutions-constructs should comply with cdk-nag rules, or add appropriate cdk-nag suppressions.

Use Case

aws-solutions-constructs should follow security best practices.

• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[biffgaut]

We agree cfn-nag appears to be dormant, as the most recent release was 2 years ago. Rather than cdk-nag we have replaced it in our build pipeline with Cloudformation Guard with pretty good success. We've added suppression statements for this tool and this ruleset. Our internal tooling has altered the rules to enable cfn-nag suppressions to suppress CloudFormation Guard rules as well - so we may need to go back and confirm that all the suppressions work if someone is using the raw ruleset from github.