AWS Cdk

Troubleshooting: Synth Failures

Table of Contents

• Overview

• Cannot Find Module (Synth Time)

• Asset Errors

• App Required

• Annotation Errors

• Concurrent Lock

• Dependency Cycle

• No Stacks Matched

Overview

This reference covers errors that occur during cdk synth — before any CloudFormation deployment begins. These failures prevent the cloud assembly from being produced. Each section maps a specific error class to its root cause and fix.

Cannot Find Module (Synth Time)

cdk synth fails with Cannot find module (TS) or ModuleNotFoundError (Python) before producing a template. The error occurs at synth time, not deploy time.

For Cannot find module '@aws-cdk/aws-*' (v1→v2 migration) → see v1-to-v2-migration. For Cannot find module at Lambda runtime → see troubleshooting-deployment.

TypeScript — diagnostic flow

Step 1: Run npx tsc --noEmit.

• tsc fails → problem is in your TS project. Check: missing npm ci, wrong tsconfig.json paths/rootDir/typeRoots, duplicate aws-cdk-lib (npm ls aws-cdk-lib), stale node_modules (rm -rf node_modules && npm ci).

• tsc succeeds → problem is in how CDK runs your app. Go to Step 2.

Step 2: Check how cdk.json runs your app.

The app field in cdk.json determines the execution mode. The failure causes differ:

If cdk.json uses compiled JS (e.g., "app": "node bin/app.js"):

If cdk.json uses direct TS execution (e.g., "app": "npx tsx bin/app.ts"):

Python — diagnostic flow

Step 1: Check which Python is running — which python vs the interpreter in cdk.json.

Step 2: Test import — python -c "import aws_cdk; print(aws_cdk.__version__)".

Prevention

• You SHOULD use tsx instead of ts-node — native path alias support, faster

• You SHOULD run npm ci (TS) or pip install -r requirements.txt (Python) as the first CI step

• You SHOULD install aws-cdk CLI as a pinned dev dependency and invoke via npx cdk

Asset Errors

Asset errors occur when CDK cannot locate, bundle, or publish file or Docker image assets.

CannotFindAsset

The asset path does not exist at synth time.

Fix: You MUST use path.join(__dirname, ...) to build asset paths relative to the source file, not the working directory:

new lambda.Function(this, 'Fn', {
  code: lambda.Code.fromAsset(path.join(__dirname, '../lambda')),
  // ...
});

FailedToBundleAsset

The bundling command failed. Common cause: Docker is not running.

Fix: You MUST ensure Docker is running before synth. For Lambda bundling with esbuild, you SHOULD install esbuild locally to avoid the Docker fallback:

npm install --save-dev esbuild

AssetBuildFailed

esbuild or Docker build returned a non-zero exit code.

Fix: Run the bundling command manually outside CDK to see the full error output. Check for missing dependencies, syntax errors, or incompatible platform targets.

AssetPublishFailed

The asset was built successfully but upload to the bootstrap S3 bucket or ECR repository failed.

Fix: You MUST verify that the CDK publishing role has permission to write to the bootstrap bucket and ECR repository. Re-bootstrap if necessary:

cdk bootstrap aws://$ACCOUNT/$REGION

App Required

--app is required either in command-line, in cdk.json, or in ~/.cdk.json

The CDK CLI cannot find the app entry point.

Fix: You MUST add the app key to cdk.json:

{
  "app": "npx tsx bin/$APP_NAME.ts"
}

You SHOULD verify the path points to the file containing your new App() call.

Annotation Errors

An Aspect or construct called Annotations.of(node).addError(), which causes synth to fail. This covers:

• cdk-nag errors — security/compliance rule violations.

• Custom Aspect errors — organization-wide policy checks.

• Built-in CDK warnings promoted to errors by the --strict flag.

Diagnosis

You MUST fix the underlying issue flagged by the annotation. Read the error message to identify which construct and which rule triggered it.

Suppression (last resort)

You SHOULD only suppress annotations when the flagged pattern is intentional and justified. Suppression patterns for cdk-nag:

Per-resource:

NagSuppressions.addResourceSuppressions(myBucket, [
  { id: '$RULE_ID', reason: '$JUSTIFICATION' },
]);

Per-stack:

NagSuppressions.addStackSuppressions(myStack, [
  { id: '$RULE_ID', reason: '$JUSTIFICATION' },
]);

By path:

NagSuppressions.addResourceSuppressionsByPath(stack, '/$STACK/$CONSTRUCT_PATH', [
  { id: '$RULE_ID', reason: '$JUSTIFICATION' },
]);

You MUST NOT suppress annotations without providing a reason.

Concurrent Lock

Cannot lock cdk.out: file is locked by another process

A file lock on the cdk.out directory prevents synth. This happens when a previous synth crashed or when multiple synth processes target the same output directory.

Fix — single build

rm -rf cdk.out

Fix — parallel CI

You MUST use a unique output directory per build to avoid lock contention:

cdk synth --output ./cdk.out.$BUILD_ID

Dependency Cycle

Error: 'StackA' depends on 'StackB' depends on 'StackA'

A circular reference exists between two or more stacks.

Fixes

1. Extract shared resource into a third stack. The shared resource lives in its own stack, and both consumers depend on it (one-way).

2. Use SSM for late-binding. The producer writes a value to SSM Parameter Store; the consumer reads it at deploy time. This breaks the synth-time dependency:

   Copy

   // Producer stack
   new ssm.StringParameter(this, 'Param', {
     parameterName: '/$APP/$RESOURCE_ARN',
     stringValue: resource.resourceArn,
   });
   
   // Consumer stack
   const arn = ssm.StringParameter.valueForStringParameter(this, '/$APP/$RESOURCE_ARN');

3. Pass raw ARN strings instead of construct references when the full construct object is not needed.

Prevention

You SHOULD design stack dependencies as one-way: props flow from producer to consumer. You MUST NOT create reverse references from a producer back to its consumer.

No Stacks Matched

No stacks match the name(s) $STACK_NAME

CDK selects stacks by their logical ID (the second argument to the Stack constructor), not by the CloudFormation stack name.

Diagnosis

List all stack IDs in the app:

cdk list

Deploy options

# Exact logical ID
cdk deploy $STACK_ID

# Wildcard
cdk deploy "$PATTERN*"

# All stacks
cdk deploy --all

You MUST use the logical ID as shown by cdk list, not the CloudFormation stack name visible in the AWS console.