AWS CDK Nag vs TFLint

AWS CDK Nag has no write-up on Specifiction yet; its figures are above.

TFLint is a local command-line linter for Terraform, with checks supplied by plugins. Its bundled language rules can flag deprecated syntax and unused declarations, while cloud-specific checks look for potential errors in AWS, Azure and GCP configurations, including invalid instance types. It can also enforce best practices and naming conventions. Extend it with plugins, create your own, or write policies in Rego. An optional `--fix` flag can correct issues automatically, and reports can be emitted in default, JSON, Checkstyle, JUnit, compact or SARIF formats. TFLint runs on Linux, macOS and Windows and is free, with no free trial. The project provides a GitHub Action and Docker image; installation options include Homebrew, WinGet and Go. Most files use MPL 2.0, some files in the Terraform package use BUSL 1.1, and release binaries are bound by both licenses. The project recommends verifying release checksums with GitHub CLI artifact attestations and identifies Cosign signatures as deprecated.