cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources (by cloud-custodian)

Cloud-custodian Alternatives

Similar projects and alternatives to cloud-custodian

  1. terraform

    Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

  2. Judoscale

    Save 47% on cloud hosting with autoscaling that just works. Judoscale integrates with Django, FastAPI, Celery, and RQ to make autoscaling easy and reliable. Save big, and say goodbye to request timeouts and backed-up task queues.

    Judoscale logo
  3. serverless-graphql

    Discontinued Serverless GraphQL Examples for AWS AppSync and Apollo

  4. direnv

    unclutter your .profile

  5. LocalStack

    💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline

  6. steampipe

    Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

  7. diagrams

    :art: Diagram as Code for prototyping cloud system architectures

  8. apprise

    Apprise - Push Notifications that work with just about every platform!

  9. InfluxDB

    InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.

    InfluxDB logo
  10. aws-nuke

    Discontinued Nuke a whole AWS account and delete all its resources.

  11. SonarQube

    Continuous Inspection

  12. checkov

    Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

  13. glow

    Render markdown on the CLI, with pizzazz! 💅🏻

  14. enhancements

    Enhancements tracking repo for Kubernetes

  15. OSQuery

    SQL powered operating system instrumentation, monitoring, and analytics.

  16. falco

    Cloud Native Runtime Security

  17. gatekeeper

    🐊 Gatekeeper - Policy Controller for Kubernetes

  18. kube-bench

    Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

  19. docker-bench-security

    The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

  20. cfn_nag

    Linting tool for CloudFormation templates

  21. OPAL

    Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...) (by permitio)

  22. sceptre

    Build better AWS infrastructure

  23. CodeRabbit

    CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

    CodeRabbit logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better cloud-custodian alternative or higher similarity.

cloud-custodian discussion

Log in or Post with

cloud-custodian reviews and mentions

Posts with mentions or reviews of cloud-custodian. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-01-22.
  • Cutting down AWS cost by $150k per year simply by shutting things off
    8 projects | news.ycombinator.com | 22 Jan 2024
    > The best optimization is simply shutting things off

    This is the way.

    A similar idea has been bouncing around in my mind for a while now. An ideal, turnkey system would do the following:

    - Execute via Lambda (serverless).

    - Support automated startup and shutdown of various AWS resources on a schedule influenced by specially formatted tags.

    - Enable resources to be brought back up out of schedule when demand dictates.

    - Operate as a TCP/HTTP proxy that can delay clients so that a given service can be started when it is dormant or, even better, the service isn't serverless but you want it to be. This can't work for everything, but perhaps enough things such that the need to run always on services is reduced.

    Cloud Custodian [1] can purportedly do some of this, but I've been reluctant to learn yet another YAML-based DSL to use it.

    So this is my "make things designed to be always-on serverless instead" project and the work AWS has done to make Java apps function on Lambda keeps me thinking about the potential to take things that 1) have a relatively long startup time and 2) are designed to be long running service loops, and find a way to force them into the serverless execution model.

    [1] https://cloudcustodian.io/

  • When have you screwed up, bad?
    1 project | /r/sysadmin | 6 Dec 2023
    Goal was to clear up anything old and set us up to rotate keys in use. Why did I do it in the end of December? It was a quarterly goal and I learned to push those across the line if I wanted a good review. Great incentive, that one. I used Cloud Custodian for this. It has a terrible bug where the code says you'll be acting on days since the key was used but actually is reading days since it was created.
  • Open-Source tools for monitoring ML/AI usage- Recommendations?
    1 project | /r/devops | 4 Nov 2023
    What is wrong with https://github.com/cloud-custodian/cloud-custodian?
  • Automate deletion of aws ebs snapshots older than year
    1 project | /r/sysadmin | 14 Apr 2023
    You can start reading about it here.
  • Optimizing cost on an app which is not used 24/7
    2 projects | /r/aws | 23 Feb 2023
    Use a tool like this https://cloudcustodian.io/ to manage instance on/off hours or go fargate.
  • Going for the CCP with a Compliance background. Any insight on what direction to pursue in AWS?
    1 project | /r/AWSCertifications | 10 Feb 2023
    Certs aside, there are some great compliance tools out there that you might want to become familiar with. Here is one that comes to mind (is open-source): https://cloudcustodian.io/
  • What are some of the community's best recommendations and use cases for Cost Optimization and FinOps
    1 project | /r/aws | 22 Dec 2022
  • EC2 start and stop via Lambda
    3 projects | /r/aws | 3 Dec 2022
    I'd use a combination of Cloudcustodian for start/stop scheduling and Apprise for notifications.
  • Tag Enforcement
    1 project | /r/aws | 7 Nov 2022
    Cloud custodian is a good utility if config rules doesn’t satisfy your needs. It’s also cross platform.
  • 26 AWS Security Best Practices to Adopt in Production
    1 project | dev.to | 21 Sep 2022
    AWS Security with open source – Cloud Custodian is a Cloud Security Posture Management (CSPM) tool. CSPM tools evaluate your cloud configuration and identify common configuration mistakes. They also monitor cloud logs to detect threats and configuration changes.
  • A note from our sponsor - CodeRabbit
    coderabbit.ai | 22 Apr 2025
    Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR. Learn more →

Stats

Basic cloud-custodian repo stats
32
5,632
9.4
5 days ago

Sponsored
Save 47% on cloud hosting with autoscaling that just works
Judoscale integrates with Django, FastAPI, Celery, and RQ to make autoscaling easy and reliable. Save big, and say goodbye to request timeouts and backed-up task queues.
judoscale.com

Did you know that Python is
the 2nd most popular programming language
based on number of references?