encoredev / encore

Infrastructure orchestration from local to your cloud

getsops / sops

Simple and flexible tool for managing secrets

agentshield-dev / agentshield

Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.

VersusControl / versus-incident

The self-hosted AI SRE agent. You don't have to monitor your systems alone. Versus Incident will keep track of your services, applications, and systems, detect new or unexpected problems, and provide your team with the evidence needed to investigate.

pulumi / pulumi

Pulumi - Infrastructure as Code in any programming language 🚀

infracost / infracost

Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!

kubernetes-sigs / external-dns

Configure external DNS servers dynamically from Kubernetes resources

treeverse / lakeFS

lakeFS - Data version control for your data lake | Git for data

huey1in / KiroX

Kiro 协议注册机 | AWS Builder ID 批量自动注册工具

hashicorp / terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.

gruntwork-io / terragrunt

Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/Terraform to scale.

external-secrets / external-secrets

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

nikoksr / notify

A dead simple Go library for sending notifications to various messaging services.

wal-g / wal-g

Archival and Restoration for databases in the Cloud

Finsys / hawser

The agent for Dockhand

google / go-cloud

The Go Cloud Development Kit (Go CDK): A library and tools for open cloud development in Go.

aws / karpenter-provider-aws

Karpenter is a Kubernetes Node Autoscaler built for flexibility, performance, and simplicity.

opencost / opencost

Cost monitoring for Kubernetes workloads and cloud costs

aws / aws-sdk-go-v2

AWS SDK for the Go programming language.

minio / minio-go

MinIO Go client SDK for S3 compatible object storage

firecracker-microvm / firecracker-containerd

firecracker-containerd enables containerd to manage containers as Firecracker microVMs

DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

prometheus-community / yet-another-cloudwatch-exporter

Prometheus exporter for AWS CloudWatch - Discovers services through AWS tags, gets CloudWatch metrics data and provides them as Prometheus metrics with AWS tags as labels

hookdeck / outpost

Open Source Outbound Webhooks and Event Destinations Infrastructure

johannesboyne / gofakes3

A simple fake AWS S3 object storage (used for local test-runs against AWS S3 APIs)

awslabs / ssosync

Populate AWS SSO directly with your G Suite users and groups using either a CLI or AWS Lambda

aws / amazon-cloudwatch-agent

CloudWatch Agent enables you to collect and export host-level metrics and logs on instances running Linux or Windows server.

gruntwork-io / terratest

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

eksctl-io / eksctl

The official CLI for Amazon EKS

diggerhq / digger

Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️

yunionio / cloudpods

An open-source cloud-native unified-cloud platform. 开源云原生融合云平台

awslabs / amazon-ecr-credential-helper

Automatically gets credentials for Amazon ECR on docker push/docker pull

awslabs / amazon-eks-ami

Packer configuration for building a custom EKS AMI

aws / amazon-ecs-agent

Amazon Elastic Container Service Agent

clastix / kamaji

Kamaji is the Hosted Control Plane Manager for Kubernetes.

kubernetes-sigs / aws-ebs-csi-driver

CSI driver for Amazon EBS https://aws.amazon.com/ebs/

keidarcy / e1s

E1S - Manage AWS ECS in Terminal(~k9s for ECS) 🐱

aws-observability / aws-otel-collector

AWS Distro for OpenTelemetry Collector (see ADOT Roadmap at https://github.com/orgs/aws-observability/projects/4)

synfinatic / aws-sso-cli

A powerful tool for using AWS Identity Center for the CLI and web console.

aws / secrets-store-csi-driver-provider-aws

The AWS provider for the Secrets Store CSI Driver allows you to fetch secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store, and mount them into Kubernetes pods.

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

nickelsec / bough

Claude Code, Codex and Pi write down everything you do. bough draws it and prices it: a day, the work inside it, every prompt, and what each piece cost. One Go binary, runs on your machine, sends nothing anywhere.

fluxcd / flagger

Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments)

kubernetes-sigs / aws-load-balancer-controller

A Kubernetes controller for Elastic Load Balancers

aws / aws-lambda-go

Libraries, samples and tools to help Go developers develop AWS Lambda functions.

snyk / driftctl

Detect, track and alert on infrastructure drift

ory / ladon

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

aws / amazon-vpc-cni-k8s

Networking plugin repository for pod networking in Kubernetes using Elastic Network Interfaces on AWS

kubernetes-sigs / aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

aws / eks-anywhere

Run Amazon EKS on your own infrastructure 🚀

nitrictech / nitric

Nitric is a multi-language framework for cloud applications with infrastructure from code.

aws / aws-node-termination-handler

Gracefully handle EC2 instance shutdown within Kubernetes

awslabs / eks-node-viewer

EKS Node Viewer

sivchari / kumo

A lightweight AWS service emulator written in Go

ekristen / aws-nuke

Remove all the resources from an AWS account

aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).

aws / aws-lambda-runtime-interface-emulator

—

kayac / ecspresso

ecspresso is a deployment tool for Amazon ECS

env0 / terratag

Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, and GCP resources

Admiral-Piett / goaws

AWS (SQS/SNS) Clone for Development testing