This repository contains scripts for AWS Developers, DevOps Engineers, and Cloud Architects. Tools focus on task automation and infrastructure management.
Tip
We eliminate AWS complexity so you ship faster, spend less, and stay compliant.
Our managed AWS service gives you three things: a production-grade Landing Zone with built-in compliance controls, proactive monitoring that stops cost waste and security drift, and senior AWS expertise that accelerates your team's delivery.
Book a free demo to see where you stand and how our service can improve your AWS foundation:
⚡ See the symptoms of a missing AWS foundation and how we solve them
AWS starts simple. As you scale, technical debt compounds. Production and staging environments blur together. Resources multiply without clear ownership. IAM policies accumulate exceptions. Security findings pile up in backlogs. The AWS bill climbs month after month.
These are all symptoms of a missing AWS foundation. Without it, your developers spend more time fixing problems than shipping features that drive business growth.
We solve this by providing that foundation and owning it entirely, so your team focuses on shipping, not firefighting.
1. We Provision a Secure Landing Zone That Accelerates Compliance
- Multi-account architecture with security controls and compliance guardrails from day one
- Achieve 100% on CIS AWS Foundation Benchmark and 96% on AWS Foundational Security Best Practices
- These benchmarks map directly to SOC 2, HIPAA, and PCI-DSS controls, cutting months from your compliance timeline
2. We Monitor Proactively to Stop Cost Waste and Security Drift
- Quarterly cost reviews identify unattached volumes, oversized instances, and orphaned resources. We clean up waste before it compounds, reducing your AWS spend by an average of 20-30%, with occasional outliers of 60+%.
- Continuous security monitoring across all accounts catches misconfigurations and policy violations immediately. You get alerts while issues are still fixable, not after they're breaches.
3. We Provide Senior AWS Expertise That Accelerates Delivery
- Your developers get access to production-ready IaC templates for common patterns: multi-az applications, event-driven architectures, secure data pipelines. What typically takes weeks of research and iteration ships in hours
- Get solutions architecture guidance on VPC design, IAM policies, disaster recovery, observability and more. Your team makes faster decisions because we've already solved these problems for enterprises at scale
"We achieved a perfect security score in days, not months." — Galen Simmons, CEO, Accolade (Y Combinator Startup)
Navigate to the relevant AWS service section. Click on the script name in the table below to open the content and usage instructions.
This collection includes Python and Bash scripts for managing various AWS services. The scripts are organized by service for easy navigation.
| Category | Script Name | Description |
|---|---|---|
| AppStream | appstream_delete_image.py | Unshares AppStream image, then deletes it |
| CloudFormation | cfn_delete_stackset.py | Deletes stackset and associated instances |
| CloudWatch | cw_count_log_groups.py | Counts the total number of CloudWatch log groups in an AWS account |
| CloudWatch | cw_delete_log_groups.py | Deletes log groups based on age |
| CloudWatch | cw_fetch_log_groups_with_creation_date.py | Fetches log groups with creation date |
| CloudWatch | cw_set_retention_policy.py | Sets retention policy for log groups |
| CodePipeline | cp_slack_notifications.py | Enables notifications on Slack |
| EC2 | ec2_delete_unattached_volumes.py | Deletes unattached EBS volumes |
| EC2 | ec2_delete_orphaned_snapshots.py | Deletes snapshots that are not associated with any volumes |
| EC2 | ec2_delete_old_amis.py | Deletes old AMIs and associated snapshots based on age |
| EC2 | ec2_delete_ssh_access_security_groups.py | Deletes SSH (port 22) inbound rules from all security groups |
| EC2 | ec2_delete_unused_amis.py | Deletes unused AMIs (Amazon Machine Images) in an AWS account |
| EC2 | ec2_delete_unused_eips.py | Deletes unused Elastic IPs |
| EC2 | ec2_delete_unused_keypairs_all_regions.py | Deletes unused EC2 keypairs in all regions |
| EC2 | ec2_delete_unused_keypairs_single_region.py | Deletes unused EC2 keypairs in a single region |
| EC2 | ec2_delete_tagged_security_groups.py | Deletes tagged security groups |
| EC2 | ec2_find_unattached_volumes.py | Finds unattached EBS volumes |
| EC2 | ec2_asg_ssh.sh | SSH wrapper for Auto Scaling group instances |
| EC2 | ec2_list_available_eips.sh | Lists unassociated Elastic IPs |
| EC2 | ec2_request_spot_instances.sh | Requests spot instances |
| EC2 | ec2_resize_volume.sh | Resizes EBS volume |
| ECS | ecs_delete_inactive_task_definitions.py | Deletes inactive ECS task definitions |
| ECS | ecs_publish_ecr_image.sh | Publishes Docker image to ECR |
| EFS | efs_delete_tagged_filesystems.py | Deletes tagged EFS and mount targets |
| IAM | iam_delete_user.py | Deletes IAM users |
| IAM | iam_identity_center_create_users.py | Create IAM Identity Center (SSO) users |
| IAM | iam_rotate_access_keys.py | Rotates IAM user keys |
| IAM | iam_assume_role.sh | Assumes IAM role |
| Organizations | org_assign_sso_access_by_ou.py | Assigns SSO access for accounts in an OU |
| Organizations | org_import_users_to_sso.py | Imports users/groups to AWS SSO |
| Organizations | org_list_accounts_by_ou.py | Lists accounts in an OU |
| Organizations | org_list_sso_assignments.py | Lists SSO assignments for accounts |
| Organizations | org_remove_sso_access_by_ou.py | Removes SSO access for accounts in an OU |
| S3 | s3_create_tar.py | Creates tar files |
| S3 | s3_delete_empty_buckets.py | Deletes empty S3 buckets |
| S3 | s3_list_old_files.py | Lists old files in S3 |
| S3 | s3_search_bucket_and_delete.py | Deletes S3 bucket and its contents |
| S3 | s3_search_bucket_and_download.py | Finds S3 bucket and download all its content |
| S3 | s3_search_file.py | Searches for files in S3 bucket |
| S3 | s3_search_key.py | Searches for a key in S3 bucket |
| S3 | s3_search_multiple_keys.py | Searches for multiple keys in S3 bucket |
| S3 | s3_search_subdirectory.py | Searches subdirectories in S3 |
| SageMaker | sm_cleanup_spaces.py | Interactive tool to list and delete SageMaker Studio spaces |
| SageMaker | sm_delete_user_profile.py | Deletes SageMaker user profiles and their dependencies |
| SSM | ssm_delete_parameters.sh | Deletes SSM parameters |
| SSM | ssm_import_parameters.sh | Imports SSM parameters |
| General | delete_unused_security_groups.py | Deletes unused security groups |
| General | aws_cli_aliases.sh | AWS CLI command aliases |
| General | tag_secrets_manager_secrets.py | Tags Secrets Manager secrets |
| General | set-alternate-contact.py | Sets alternate contacts for all accounts in an organization |
| General | multi_account_command_executor.py | Runs commands across multiple AWS accounts |
This section lists tools that enhance AWS usage across console, CLI, and APIs.
- AutoSpotting - Open-source spot market automation tool for easy adoption at scale.
- Awesome ECS - Curated list of ECS guides and resources.
- AWS Copilot CLI - CLI for building and operating containerized applications on ECS and Fargate.
- ECS Compose-X - Tool to generate CFN templates from docker-compose files with added AWS resource definitions.
- AWS IAM Actions - Comprehensive IAM action listing and policy generator.
- IAM Floyd - Fluent interface for IAM policy statement generation.
- AWS CDK Starterkit - Rapid AWS CDK app deployment via GitHub actions.
- AWS CloudFormation Starterkit - Rapid AWS CloudFormation stack deployment via GitHub actions.
- Awesome CDK - Curated list of AWS CDK resources.
- Awesome CloudFormation - Curated CloudFormation resources.
- Awesome Terraform - Curated Terraform resources.
- Former2 - Template generator from existing AWS resources.
- Open CDK Guide - Opinionated AWS CDK best practices guide.
- VSCode IAM Actions Snippets - Adds autocompletion in VS Code for AWS IAM policy actions.
- VSCode IAM Service Principal Snippets - Adds autocompletion in VS Code for AWS service principals.
- VSCode CDK Snippets - VS Code extension for CDK construct snippets.
- VSCode CloudFormation Snippets - VS Code extension for CloudFormation resource snippets.
- VSCode SAM Snippets - VS Code extension for CloudFormation resource snippets.
- AWS Lambda Power Tuning - Step Functions-based Lambda optimization tool.
- Serverless Cost Calculator Comparison - Cost comparison tool for serverless functions across cloud providers.
- Serverless Cost Calculator - AWS Lambda cost estimation tool.
- s3s3mirror - High-performance S3 bucket mirroring utility.
- Leapp - Cross-platform AWS programmatic access manager.
- Prowler - Open-source security assessment and auditing tool.
- AWS Security Tools - Curated list of AWS security tools.
- aws-gate - Enhanced AWS SSM Session Manager CLI.
- aws-ssm-ec2-proxy-command - SSH to EC2 via SSM without open ports.
- ssm-supercharged - SSM integration with OpenSSH, EC2 Instance Connect, and sshuttle.
- Cloud Custodian - Cloud governance platform for AWS.
- Service Screener - Tool to evaluate your AWS service configurations based on AWS and community best practices.
- Steampipe - SQL-like querying for AWS resources.
- AWS Nuke - AWS account resource removal tool.
This project exists thanks to all the people who contribute.
See how you can contribute to this repository.
