wallix/awless
Awless
Awless is a command-line interface and infrastructure orchestrator for managing, deploying, and inspecting AWS cloud resources. It functions as a resource inspector, identity manager, and secure connection utility, providing a hierarchical set of commands to control cloud environments.
The tool distinguishes itself by syncing remote cloud state to local graphs, enabling offline infrastructure analysis, auditing, and resource relationship querying without active API calls. It further streamlines operations by mapping human-readable aliases to system identifiers and facilitating secure shell connections to remote instances via automated resolution of IP addresses and jump hosts.
Its broad capability surface covers the lifecycle of virtual servers, databases, serverless functions, and container resources. It handles networking through virtual private clouds and DNS management, manages identity and access via user and role policies, and orchestrates deployments using templates sourced from local files or remote URLs.
The system includes shell autocompletion generation for bash and zsh to assist in command discovery.
Features
- Cloud State Graphs - Syncs remote cloud state to local graphs to enable offline infrastructure analysis and faster querying.
- Command Line Interfaces - A terminal tool for managing, deploying and inspecting AWS cloud resources through a hierarchical set of commands.
- AWS Provisioners - Provides a comprehensive CLI for provisioning and controlling AWS virtual servers, databases, and networks.
- Cloud Resource Operation Interfaces - Provides an interactive command-line interface to perform creation, deletion, and modification operations on cloud resources.
- Resource Alias Mappings - Maps human-readable names to system IDs during execution to avoid using cryptic identifiers.
- Template-Based Deployments - Executes infrastructure templates from local files or URLs to deploy complex cloud environment stacks.
- Resource Graph Synchronizers - A utility for syncing remote cloud state to local graphs for offline analysis and resource relationship querying.
- Offline Configuration Analysis - Performs security evaluation, cost estimation, and resource sizing against locally cached cloud state.
- Cloud Infrastructure Deployment - Provisions cloud resources by executing sequences defined in local files, remote URLs, or command strings.
- Stack Lifecycle Management - Creates and updates infrastructure stacks and provides real-time monitoring of stack events.
- Cloud Infrastructure Management - Provides a hierarchical command-line interface for exploring and deploying AWS cloud infrastructure.
- Cloud Infrastructure Orchestration - A tool for provisioning cloud resources using local or remote templates and reverting infrastructure changes via execution IDs.
- Cloud Resource Discovery - Searching and filtering for cloud components across multiple regions to inspect detailed resource properties and relationships.
- Cloud Resource Inspection - Allows retrieval of detailed information about specific cloud resources using identifiers or names.
- Configuration Profile Switching - Manages multiple account and region configurations via a persistent state mechanism to switch cloud environments.
- Cloud Resource Inventory - Displays multi-region cloud components with filters for resource properties and tags.
- Infrastructure Templates - Creates and updates cloud resources using interactive templates sourced from local files or remote URLs.
- Local Infrastructure State Caching - Syncs remote cloud state to local graphs for offline analysis, auditing, and resource relationship querying.
- Template-Driven Provisioning - Executes infrastructure deployments by processing variable-driven configuration files from local paths or remote URLs.
- Virtualization Managers - Controls the full lifecycle of virtual servers, including creation, restarts, and initialization.
- Authenticated SSH Connections - Establishes secure shell connections to remote instances using jump hosts, private IPs, and encrypted keys.
- Multi-hop Forwarding - Establishes secure shell connections by routing traffic through automated jump host sequences.
- Identity Policy Management - AWS Cloud tool creates and attaches policies to identities to control resource access permissions.
- Identity and Role Management - AWS Cloud tool creates and manages users, groups, and roles including the generation of access keys.
- Identity and Access Management - Manages users, groups, roles, and permission policies along with multi-factor authentication devices.
- Human-Readable Identifiers - Maps human-readable aliases to cryptic system identifiers to simplify resource management.
- Interactive Input Prompts - Fills missing required deployment parameters using predefined defaults or interactive command-line prompts.
- Database Instance Lifecycle Management - Manages the operational states of database instances and subnet groups, including replica creation.
- Bucket Management - Provides administrative controls for creating and updating storage buckets, objects, and public website configurations.
- User-Data Boot Scripts - Supports provisioning cloud instances by injecting local or remote scripts into the userdata boot field.
- Cloud Image Search - Provides tools to search and filter AWS machine images by owner, distribution, and hardware architecture.
- Virtual Private Clouds - Creates and deletes virtual private clouds, subnets, and gateways to define network boundaries.
- Block Storage Services - Creates, deletes, and attaches or detaches persistent cloud block storage volumes and snapshots.
- Resource Listing and Filtering - AWS Cloud tool searches through resources using fuzzy matching or key-value filters to reduce API noise.
- Container Management Tools - Lists and controls container clusters, services, and tasks, including starting and stopping execution.
- Container Registry Management - Manages container repositories through creation, deletion, and registry authentication.
- Infrastructure Change Reversion - Supports targeted undoing of infrastructure changes by referencing unique execution IDs from historical logs.
- Lifecycle Management - Provides capabilities to create and update network and application load balancers, including listeners and target groups.
- Serverless Function Management - Enables programmatic control over the lifecycle of serverless functions, including creation and deletion.
- Deployment Variable Prompts - Resolves missing deployment variables through interactive user prompts or predefined defaults during execution.
- Change Reversion - Reverts specific cloud modifications by referencing unique execution IDs from historical action logs.
- Distribution-Based Provisioning - Launches virtual machines using distribution names to avoid manual region or image lookups.
- Cloud Infrastructure Security Auditors - AWS Cloud tool analyzes security group ports and resolves pricing data for resources across different regions.
- Cloud Instance Connection Workflows - Establishing secure shell connections to remote instances by automatically resolving IP addresses, usernames, and security keys.
- Resource Variable Referencing - Stores identifiers of newly created resources in variables for reuse in subsequent deployment steps.
- Infrastructure Cost and Sizing Analyzers - AWS Cloud tool runs inspector utilities against local resource graphs to estimate costs or calculate storage sizing.
- Applications - Small and powerful CLI for managing AWS resources.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
