(docs) Description/How-to on how to evaluate DDK infrastructure for compliance standards

**Describe the solution you'd like**
Documentation should include a dedicated page on how to evaluate infrastructure created by the DDK for compliance standard (PCI, HIPAA, CIS, etc). 

Reccommendations may include:
- snyk
- prowler
- cdk nag compliance packs 


*P.S. Please Don't attach files. Add code snippets directly in the message body instead.*