Skip to content

AWS Tools and Scripts

Nubenetes V2 Elite Portal

You are browsing the AI-Curated V2 Elite Edition. Looking for the exhaustive list of references? Check out the V1 Historical Archive.

Architectural Context

Detailed reference for AWS Tools and Scripts in the context of Cloud Providers (Hyperscalers).

Table of Contents

  1. Architectural Foundations
  2. Kubernetes Tools
  3. Artificial Intelligence
  4. Developer Agents
  5. Cloud Platform
  6. AWS Infrastructure
  7. Containers
  8. Developer Tooling
  9. Infrastructure
  10. DevOps
  11. Infrastructure as Code
  12. Boilerplates

Architectural Foundations

Kubernetes Tools

General Reference

Artificial Intelligence

Developer Agents

Amazon Q

  • (2026) Amazon CodeWhisperer [PYTHON CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Amazon Q Developer (formerly CodeWhisperer) is AWS's flagship generative AI-assisted programming agent. It generates real-time, context-aware code suggestions while performing security scanning and structural code upgrades. Live grounding demonstrates its evolution into a highly secure, enterprise-compliant workspace tool with advanced reference tracking mechanisms.

Cloud Platform

AWS Infrastructure

Automation

  • (2025) github.com/infrahouse/infrahouse-toolkit ⭐ 74 [PYTHON CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The Infrahouse Toolkit provides operational automation helpers specifically engineered to simplify AWS infrastructure deployment pipelines. It streamlines actions such as dynamic DNS configurations, instance lifecycle hooks, and local environment bootstrapping. Useful for platform teams standardizing custom deployment policies.
  • (2024) github.com/Levi-Michael/boto3-ec2-s3-management: A python tools base on' AWS boto3 for manage ec2 and s3 buckets ⭐ 2 [PYTHON CONTENT] [COMMUNITY-TOOL] — A lightweight Python-based tool leveraging Boto3 to programmatically manage EC2 instances and S3 bucket lifecycles. It provides system administrators with an alternative to the heavy AWS Management Console for quick resource termination, tag filtering, and volume audits. Its clean syntax serves as an educational base for custom infrastructure engineering scripts.

CICD Pipelines

  • (2026) Amazon CodeCatalyst [N/A CONTENT] [COMMUNITY-TOOL] — Amazon CodeCatalyst is an enterprise-grade cloud development service that streamlines software delivery on AWS. It integrates team collaboration, CI/CD, issue tracking, and cloud development environments (CDEs) under a unified SaaS framework. Crucial for software engineering directors establishing rapid, compliant application delivery loops.
  • (2023) New usage examples have been added to the CLI for CodePipeline API Reference [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — An official update to the AWS CLI CodePipeline reference docs, introducing detailed usage examples for programmatic execution of multi-stage pipelines. It simplifies scripting for custom deployment transitions and emergency pipeline approvals. A necessary reference for platform architects building custom release coordination gates.
  • (2021) dev.to: Continuous Integration and Deployment on AWS - and a wishlist for CI/CD Tools on AWS [N/A CONTENT] [COMMUNITY-TOOL] — A Dev.to article discussing CI/CD architectures within AWS environments, containing a developer wishlist for next-generation pipeline features. It compares CodePipeline, GitHub Actions, and custom runners, detailing trade-offs in execution speeds, artifact management, and IAM-gated controls. Perfect for team leads structuring secure platform automation.

CICD Security

  • (2025) saml-to/assume-aws-role-action ⭐ 182 [TYPESCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A dedicated GitHub Action designed to securely assume AWS IAM roles using OpenID Connect (OIDC) federation, eliminating the need to store long-lived static AWS credentials inside GitHub secrets. It dynamically exchanges short-lived JWT tokens to gain secure role access. This standard is strongly recommended in modern dev-sec-ops architectures to enforce the principle of least privilege.

CLI Tooling

  • (2026) Amazon CLI Documentation [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — The main landing and installation documentation portal for the AWS Command Line Interface. It acts as the definitive source for setting up the CLI across macOS, Linux, and Windows environments. Essential for establishing standard terminal configurations and programmatic environment variables across both developer workstations and CI/CD agents.
  • (2026) AWS CLI Command Reference [N/A CONTENT] [DOCUMENTATION] [COMMUNITY-TOOL] — The comprehensive command reference index for the AWS CLI, documenting syntax, options, and output JSON schemas for all AWS cloud services. It is the primary reference resource for writing deterministic bash and shell scripts for infrastructure automation. Updated dynamically in 2026 to reflect the newest cloud-native service models.
  • (2021) Announcing the end of support for Python 2.7 in the AWS SDK for Python and AWS CLI v1 [N/A CONTENT] [LEGACY] — An official AWS deprecation announcement marking the end of Python 2.7 support within the AWS SDK for Python (Boto3) and AWS CLI v1. It details migration paths to modern Python 3.x runtimes and the container-native AWS CLI v2 architecture. Critical reading for legacy system maintainers undergoing platform modernization initiatives.

Cost Optimization

  • (2024) ec2-spot-converter ⭐ 199 [PYTHON CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — ec2-spot-converter is an open-source tool built to programmatically convert existing AWS on-demand EC2 instances to spot instances and vice versa without manual reconstruction. It reduces downtime by preserving root volume data and configuration profiles during transitions. Critical for engineers optimizing test workloads and maximizing cost-savings.
  • (2026) vantage.sh [N/A CONTENT] [COMMUNITY-TOOL] — Vantage.sh is a modern cloud cost management (FinOps) platform providing deep visibility into AWS, Snowflake, and Kubernetes expenditures. It aggregates resource usage metrics to recommend automated saving policies, RI purchasing, and spot transitions. Grounding confirms its role as a premier enterprise tool to manage complex multi-cloud financial posture.
  • (2021) techcrunch.com: Vantage makes managing AWS easier [N/A CONTENT] [COMMUNITY-TOOL] — A TechCrunch feature analyzing how Vantage simplifies AWS cost tracking and optimization, offering deep contrast to complex cloud bills. The article highlights Vantage's rise as an essential interface for development organizations navigating fine-grained container pricing and resource usage. Key reading for CFOs and cloud finance architects.

Developer SDKs

  • (2026) AWS SDK for Java [JAVA CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — The main portal for the AWS SDK for Java, featuring setup guides, performance tuning notes, and integration standards. It is the foundational SDK for Java-based enterprise applications leveraging S3, DynamoDB, or AWS Lambda. Crucial for software engineers designing highly resilient cloud applications using modern async client wrappers.

Developer Tooling

  • (2026) github.com/one2nc/cloudlens 🌟 ⭐ 590 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Cloudlens is an open-source, interactive terminal UI built to monitor and navigate various cloud infrastructure components. It acts as an easy-to-use 'k9s' equivalent for AWS resources, allowing administrators to inspect S3, EC2, and VPC metrics directly in their shell. A must-have for terminal-first systems engineers seeking immediate cloud diagnostics.
  • (2026) AWS Management Tools Blog [N/A CONTENT] [COMMUNITY-TOOL] — The official AWS Management and Governance Tools Blog, serving as the authority on systems manager, Config, CloudTrail, and CloudWatch updates. It hosts standard architectures for designing observability frameworks and cloud optimization. Crucial for enterprise platform administrators ensuring alignment with modern AWS best practices.
  • (2023) aws.amazon.com/blogs: Introducing Amazon CodeWhisperer for command line [N/A CONTENT] [COMMUNITY-TOOL] — An AWS Developer blog introducing automated command-line capabilities for Amazon CodeWhisperer. It highlights AI-driven command completion and automatic CLI parameter translation directly in modern terminal emulators. Essential for platform engineers aiming to dramatically accelerate shell and infrastructure-as-code scripting efficiency.
  • (2022) genbeta.com: Amazon lanza CodeWhisperer, su propia alternativa a GitHub Copilot… que no insertará código ya licenciado sin avisar [N/A CONTENT] [COMMUNITY-TOOL] — A Spanish Genbeta article introducing Amazon CodeWhisperer as AWS's direct competitor to GitHub Copilot, emphasizing its unique compliance filters to avoid licensing violations. While historically accurate regarding CodeWhisperer's initial launch features, the service has since evolved into Amazon Q Developer, with a broader security and multi-file architecture focus.
  • (2021) AWS Toolkits for Cloud9, JetBrains and VS Code now support interaction with over 200 new resource types 🌟 [N/A CONTENT] [COMMUNITY-TOOL] — An AWS announcement highlighting the release of updated AWS Toolkits for popular IDEs (Cloud9, JetBrains, VS Code), expanding interaction capabilities to over 200 resource types. This update greatly reduced context switching for developers, enabling local generation of IAM, DynamoDB, and CloudFormation schemas without visiting the AWS web console.

Identity Management

  • (2026) github.com/containerscrew/aws-sso-auth ⭐ 4 [RUST CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A lightweight Rust-based terminal utility (aws-sso-rs) designed to automate AWS IAM Identity Center login workflows and manage local workstation credential lifecycles. It bypasses slow browser integration loops by managing token renewals and profile switching programmatically. Critical for terminal-first developers using security-hardened AWS structures.
  • (2022) dev.to/franciscogm: AWS CLI SSO made easy [N/A CONTENT] [COMMUNITY-TOOL] — A developer-focused guide showing how to simplify multi-account authorization using the AWS CLI and AWS IAM Identity Center (formerly AWS Single Sign-On). It demonstrates optimal config profile structures to enable rapid terminal-based authentication. Highly valued by security administrators striving to eliminate long-term credentials on local workstations.

Infrastructure as Code

  • (2024) github.com/aws-samples/aws-cdk-stack-builder-tool ⭐ 202 [TYPESCRIPT CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An AWS Samples tool configured to dynamically build and modularize AWS CDK stacks based on high-level configuration templates. It streamlines boilerplate IAC setup, allowing platform engineering teams to maintain clean, scalable multi-environment stacks. Ideal for bootstrapping large cloud applications adhering to AWS Well-Architected frameworks.

Local Development

  • (2023) github.com/ualter: AwsBe [RUST CONTENT] [COMMUNITY-TOOL] — AwsBe is a dedicated backend development mockup tool aimed at accelerating testing of AWS CLI and API-driven clients. It reduces dependency on direct AWS connections for dev feedback loops, enhancing local workspace efficiency. Highly valuable for staging environments seeking rapid mocking configurations.

Logging and Auditing

  • (2025) github.com/awslabs/assisted-log-enabler-for-aws: Assisted Log Enabler -' Find resources that are not logging, and turn them on ⭐ 274 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An AWS Labs community-focused repository offering automation scripts to identify resource endpoints that lack active logging and programmatically enable auditing (e.g., S3 server access logging, VPC Flow Logs). It addresses serious audit compliance gaps across expansive, multi-account structures. Live Grounding maintains its high utility for enterprises validating governance against SOC2 and CIS benchmarks.

Networking

  • (2024) github.com/cavaliercoder/vpc-free ⭐ 59 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A specialized tool designed to scan AWS VPC configurations and identify unused IP subnets and available address spaces. It simplifies subnet planning and CIDR allocation by visually exposing gaps in current IP management matrices. Essential for large enterprises implementing zero-trust network segmentations or multi-region Transit Gateway routing.
  • (2025) AWS IP inventory [GO CONTENT] [COMMUNITY-TOOL] — An open-source utility designed to scan and build a complete inventory of IP address allocations across multiple AWS Virtual Private Clouds (VPCs). It offers automated visibility into subnet depletion, Elastic IP overheads, and overall IP utilization patterns. This tool is vital for cloud platform engineers tasked with managing network range exhaustion in hybrid cloud environments.

Open Source Ecosystem

  • (2026) OpenSource at AWS [N/A CONTENT] [COMMUNITY-TOOL] — The main portal showcasing AWS's strategic contributions, governance standards, and active open-source projects. It acts as an architectural guide for platform engineers to align with verified cloud-native upstream projects. Grounding in 2026 verifies its status as a critical reference for production-grade SDK patterns and cloud integrations.

Reference Architectures

  • (2026) AWS Labs GitHub [N/A CONTENT] [ADVANCED LEVEL] [EMERGING] — The central AWS Labs GitHub organization housing hundreds of active experimental projects, tooling integrations, and reference CDK blueprints. Live Grounding highlights this hub as a critical launchpad for emerging patterns in infrastructure-as-code and cloud automation. It provides platform engineering teams with robust, peer-reviewed building blocks for accelerated architecture design.

Resource Querying

  • (2025) github.com/welldone-cloud/aws-list-resources ⭐ 184 [PYTHON CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A targeted utility designed to list all active resources inside an AWS account, bypassing the visibility gaps of typical inventory tools. It scans all supported services and regions, returning clean, actionable reports. Extremely useful for platform engineers cleaning up stale testing environments and auditing cloud billing leakages.

Security Group Management

  • (2022) dev.to: How to Copy a Security Group with Rules from one AWS Account to Another account [N/A CONTENT] [COMMUNITY-TOOL] — A practical technical tutorial detailing programmatic patterns to replicate AWS Security Groups and nested rules across separate AWS accounts. It resolves multi-tenant configuration sync issues using Python and the AWS CLI. This is critical for engineers performing tenant migrations or standing up identical staging environments under modern IAM paradigms.

Security Simulation

  • (2025) awslabs/aws-cloudsaga: AWS CloudSaga - Simulate security events in AWS ⭐ 477 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — AWS CloudSaga is an open-source tool developed by AWS to simulate security events and malicious activity directly inside your AWS environment. It enables security operations teams to validate detection mechanisms, alert pipelines, and incident response procedures. Essential for continuous red-teaming exercises and maintaining robust cloud posture management.

Security and Compliance

  • (2026) ermetic/access-undenied-aws 🌟 ⭐ 272 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Access Undenied on AWS is a highly sophisticated CLI tool that parses AWS 'Access Denied' errors and CloudTrail events, pointing specifically to the policy boundary or SCP causing the block. Live Grounding confirms its acquisition and active hosting under the Tenable GitHub organization. This remains a cornerstone tool for platform engineers troubleshooting complex IAM evaluation logic.
  • (2025) Metabadger ⭐ 143 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Metabadger is an open-source CLI tool built by Salesforce to automate the hardening of EC2 Instance Metadata Service (IMDS) endpoints by enforcing IMDSv2. It reduces the risk of SSRF (Server-Side Request Forgery) attacks by auditing and updating running instances to reject token-free metadata requests. It is a highly practical compliance tool for security engineering teams.
  • (2024) willdady/aws-resource-based-policy-collector: AWS resource-based policy' collector ⭐ 24 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A dedicated security utility that scans and aggregates resource-based policies (e.g., S3 Bucket Policies, KMS Key Policies, SQS Policies) across AWS accounts. It aims to surface overly permissive access matrices that violate least privilege models. The script serves as an important compliance utility for scanning public and cross-account configuration leakage.
  • (2023) ermetic.com: Access Undenied on AWS [N/A CONTENT] [COMMUNITY-TOOL] — The introductory technical blog post outlining the implementation of Access Undenied on AWS. It explains how parsing multi-layered IAM restrictions (such as Permission Boundaries, Service Control Policies, and Session Policies) helps platform teams resolve frustrating 'implicit deny' errors. Essential reading for operations engineers transitioning to strict zero-trust IAM governance.

Storage Management

  • (2025) github.com/awslabs/amazon-s3-tar-tool: Amazon S3 Tar Tool ⭐ 233 [JAVA CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An AWS Labs utility designed to parallelize the creation of TAR archives directly from S3 bucket structures. It prevents the network egress bottle-necks associated with downloading S3 objects locally before compression. Extremely valuable for big data analytics architectures and data lifecycle archival procedures.
  • (2024) github.com/Reaimua/AWS-CLI-Uploader-Project ⭐ 1 [SHELL CONTENT] [COMMUNITY-TOOL] — An educational repository containing custom scripts to automate file uploads to AWS S3 using raw AWS CLI calls. It is highly useful for junior developers learning API interactions, basic credential handling, and bucket policy permissions. Ideal as a simple reference base for shell scripting tutorials.
  • (2023) blog.awsfundamentals.com: Step-By-Step: Emptying S3 Buckets and Directories Using the AWS CLI with S3 RM [N/A CONTENT] [COMMUNITY-TOOL] — A deep dive tutorial from AWS Fundamentals on how to empty S3 buckets containing millions of objects using the AWS CLI. It highlights the differences between simple deleting, multi-object API commands, and utilizing Lifecycle rules to clean buckets at zero cost. Essential for DevOps engineers avoiding massive API transactional bills.

Containers

Developer Tooling (1)

Cloud Emulation

  • (2024) Floci - An AWS Local Emulator Alternative ⭐ 14064 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An active and highly performant local alternative to localstack. Emulates AWS cloud service behavior locally using specialized lightweight container footprints.

Infrastructure

DevOps

Command Line Utilities

Infrastructure as Code (1)

Boilerplates

AWS Templates

  • (2024) AWS Samples (Boilerplates) [MULTI-LANGUAGE CONTENT] [COMMUNITY-TOOL] — A consolidated hub of official and community AWS deployment samples. Houses structured patterns and CloudFormation/Terraform codebases to fast-track prototype development in compliance with AWS architecture standards.

💡 Explore Related: Googlecloudplatform | AWS Pricing | AWS Spain