Coverage

65+ AWS services covered

All the core services you need to bring a real-world AWS estate under Terraform control: compute, networking, data, security, AI/ML, and more. Backed by a 112-test BATS suite across 7 suites with zero real AWS credentials needed to run tests.


Supported services

Grouped by domain

Every supported service, organised by the part of your estate it belongs to.

Compute

ec2ebsecsekslambda

EKS includes clusters, node groups, addons, and Fargate profiles.

Networking

vpcelbcloudfrontroute53acmtransitgatewayvpcendpoints

VPC includes subnets, security groups, route tables, internet gateways, and NAT gateways.

Data

rdsdynamodbelasticachemsks3efsopensearchredshiftdocumentdb

Streaming

kinesisfirehose

Integration

sqssnsapigatewayeventbridgestepfunctionsses

Security & Compliance

iamkmssecretsmanagerwafv2configcloudtrailguardduty

IAM includes roles, instance profiles, and OIDC providers.

Platform & CI/CD

ecrssmcloudwatchbackupcodepipelinecodebuild

Auth

cognito

User pools, clients, and identity pools, fully paginated beyond the 60-pool API limit.

ETL & Analytics

glueathenalakeformationmemorydbemr

Storage & Transfer

fsxtransfer

App Platform

elasticbeanstalkapprunnerlightsailconnectappconfig

AI / ML

bedrocksagemaker

Bedrock agents & knowledge bases; SageMaker domains & endpoints.

Governance & Org

servicecatalogorganizationsramservicequotasxray

Organizations covers accounts & OUs; RAM covers resource shares across accounts.


Quality

Tested before every commit

A 112-test BATS suite across 7 suites (mock AWS CLI and Terraform, no real credentials needed) and ShellCheck static analysis run automatically via a pre-commit hook and GitHub Actions CI, blocking any commit or push that introduces a regression.

112
automated tests
7
test suites
cloudtorepo · drift · import · reconcile · report · run · common
0
real AWS credentials needed
mock AWS CLI in tests/helpers/