Become a Gruntwork Subscriber
Choose the plan just right for your team.
- Gruntwork Landing Zone
Automatically apply security baselines, defined in Terraform, to all your AWS accounts, ensuring that all of your accounts are properly configured with AWS CloudTrail, AWS Config, AWS Config rules, Amazon GuardDuty, Macie, IAM roles, IAM Access Analyzer, VPCs, and more.Terraform account baselines
Configure monitoring and audit logging for all your AWS accounts using CloudTrail and AWS Config.Monitoring: CloudTrail, AWS Config
Set up best-practice networking infrastructure for all of your AWS accounts, including VPCs, subnets, route tables, Internet Gateways, NAT Gateways, VPC endpoints, NACLs, and more.Networking: VPCs, subnets, etc
Configure security scanning for all your AWS accounts using GuardDuty and Macie.Scanning: GuardDuty, Macie
Use IAM users, roles, and groups for authentication and authorization in your AWS accounts.IAM: users, roles, groups
Use Control Tower to create and manage your AWS accounts, OUs, and controls, while under the hood, managing everything as code using Terraform.Control Tower integration
Use Single Sign On (SSO) with an existing Identity Provider (e.g., Active Directory, Google, Okta) for authentication and authorization in your AWS accounts.AWS Identity Center (SSO)
Configure guard rails for all your AWS accounts using Service Control Policies (SCPs) and AWS Config Rules.Guard Rails: SCPs, Config Rules
- Gruntwork Pipelines
Instead of directly giving your CI server admin-level permissions needed to launch arbitrary infrastructure, Gruntwork Pipelines enables a secure infrastructure pipeline by granting the sensitive permissions solely to an isolated worker that exposes a limited, locked down interface.Secure, isolated workers
Automatically run terraform/terragrunt 'plan' on PRs and 'apply' on merge.Plan and apply workflows
Automatically require approvals for terraform/terragrunt 'plan' output before an 'apply' is allowed. Includes Slack integration for a ChatOps driven approach.Approval workflows
Automatically promote releases across your environments: e.g., dev -> stage -> prod.Promotion workflows
Use the patcher CLI to automatically update your Terraform and Terragrunt dependencies.CLI-driven updates
When a new release contains breaking changes, Patcher can automatically apply patches from the maintainer to transform your code to work around the backward compatibility.Patch breaking changes
When new releases come out, get automated pull-requests to update you to the new version.Automated (PR-driven) updates
- IaC Library
Reusable, battle-tested Terraform modules for deploying application workloads on top of ECS, EKS, EC2, and ASGs.Orchestration: ECS, EKS, EC2, ASG
Reusable, battle-tested Terraform modules for deploying data stores such as RDS, ElastiCache, and S3.Data stores: RDS, ElastiCache, S3
Reusable, battle-tested Terraform modules for deploying analytics, search, and streaming tools such as Elasticsearch, Kafka, and Kinesis.Analytics: Elasticsearch, Kafka
Reusable, battle-tested Terraform modules for deploying serverless workloads on top of Lambda and API Gateway.Serverless: Lambda, API Gateway
Use the repo-copier CLI tool to copy all the Terraform code to your own version control system, including updating all internal cross-references and authentication details.Self-hosting (repo-copier)
Get support from the Gruntwork team and other Gruntwork customers via the Gruntwork Knowledge Base.Community support
Get support via email, a private shared Slack channel, and scheduled video calls directly from the Gruntwork team. Includes SLAs on response times.Enterprise support
Get hands-on help, onboarding, and guidance from the Gruntwork team in setting up your DevOps Foundations.Guided onboarding
Gruntwork works directly with your team to build world-class infrastructure, which we then support & maintain on an ongoing basis.ConsultingAvailable
Get an opinionated, best-practices, end-to-end tech stack, customized to your needs, 100% defined as code, deployed into your AWS accounts—all in about a day!Reference Architectureincluded
Get support via email or a private Slack channel, with an SLA of 2 business days.Professional Support+$1,950 / monthincluded
Get access to our CIS Service Catalog, where all the modules are compliant with the CIS AWS Foundations Benchmark. If you pick this and the Reference Architecture add-on, the entire Reference Architecture will be compliant with the CIS AWS Foundations Benchmark!CIS Compliance Package+$1,250 / monthincluded
Annual contract, billed monthly.Subscription fee$795 / per month
A user is a human or machine that accesses the Gruntwork code repos, training materials, or support services.Included users20
Need help deciding?
Discounted pricing is available for non-profits, educational institutions, and startups with fewer than 10 employees. We are happy to answer your questions and provide additional information: contact us.
Gruntwork is available in the AWS marketplace!
Please contact our sales team to subscribe to Gruntwork through the AWS Marketplace, which may allow you to streamline the procurement process and potentially offset your bill (check with your AWS rep to see which credits and offsets are available to you).
Cancel for any reason within 30 days and we'll refund 100% of your fees.
If you cancel, you'll lose support and updates, but as long as any outstanding contract obligations are paid, you can keep using the code at no further cost.
No More Grunt Work
Let us handle the grunt work of the most common infrastructure patterns so you can focus on your business.
What's included with each Gruntwork user license?
When you become a Gruntwork Subscriber, each user license will allow one human or machine user to access our Infrastructure as Code Library, DevOps Training Library plus our community and paid support services In addition, a user license grants the right to a user to access, fork and modify the code, and create derivative works as much as you want.
Can I try Gruntwork Services before committing to an annual subscription?
There are three ways you can try out Gruntwork Services with no commitment:
- You can try out parts of the IaC Library for free by checking out our open source modules.
- Before any contracts are signed, we'd be happy to do a walkthrough of our code, training, and process.
- We offer a 30-day money-back guarantee, so if for any reason you're not happy after signing up, we'll refund 100% of your money in the first 30 days. Check out "What if I want to cancel my Gruntwork Subscription?" for more info.
What if I want to use the code with my own customers?
The Gruntwork Subscription is valid for one company to use to manage its own infrastructure. If you are an agency or reseller that manages infrastructure for other companies, please contact us to discuss licensing options.
How can I modify your Terms of Service?
We recommend that most customers go through our normal checkout flow and accept our standard Terms of Service. In some cases, we can make minor changes to our standard Terms of Service by sending you a DocuSign contract with explicit modifications to the terms, however if you need to make material updates to our standard Terms of Service, you will need to purchase an Enterprise subscription.
Still have questions?
Check out our Full FAQ's.
What payment options do you accept?
For monthly billing, we require automated payments via credit card or ACH transfer. If you wish to use invoices and pay by wire transfer or check instead, you must do annual billing. We also accept AWS Marketplace for annual contracts.
Can I pay with AWS credits?
Yes, please reach out to firstname.lastname@example.org.
What's a user?
A user is any human or machine that makes use of Gruntwork's services, including accessing code from the Infrastructure as Code Library, watching videos in the DevOps Training Library, or submitting requests to support.
Is an annual subscription required?
With the exception of the Reference Architecture, all our products require an annual subscription, however we can bill you either annually or monthly. Why an annual subscription? We give you access to all the code in the IaC Library, and we let you keep that code even if you cancel. If we didn't have the annual subscription requirement, customers could sign up for one day, get access to all the code, and cancel immediately.
However, we offer a 30-day money back guarantee, so if for any reason you're not happy after signing up, we'll let you out of the annual subscription and refund 100% of your money in the first 30 days. Check out "What if I want to cancel my Gruntwork Subscription?" for more info.
What if I want to cancel my Gruntwork Subscription?
We offer a 30-day money-back guarantee. You can try out the Gruntwork Subscription, Professional Support, and the Reference Architecture, and if you're not happy for any reason, you can cancel within the first 30 days, and we'll let you out of the annual subscription and refund 100% of your money.
Note that if you cancel in the first 30 days, you lose the license to the code in the Infrastructure as Code Library, so you must stop using it and delete any references to it; on the other hand, if you do stick with the annual subscription, and cancel after at least one year, you can keep using all the code you had been using up to that point. See "What happens to my code if I cancel my subscription?" for more info.
What happens to my code if I cancel my subscription?
If you cancel within the first 30 days, we'll refund 100% of your money and let you out of the annual subscription, but you lose the license to the code in the Infrastructure as Code Library, so you must stop using it and delete all copies of the code.
If, however, you remain a subscriber for at least 12 months, the license allows you to fork and modify the code and create derivative works as much as you want, and even if you cancel your subscription, you can keep using all the code you had been using up to that point. We recommend that prior to canceling, you make copies of all the repos in the Infrastructure as Code Library into your own version control system. After you cancel your Gruntwork Subscription, you'll no longer have access to the updates, additions, and fixes we make to the Infrastructure as Code Library, support from the Gruntwork team, security alerts, and any other subscription benefits. However, your infrastructure will continue to work just fine and you'll still have all the code you had been using up to that point.
If I require product customization or consulting support, what options are provided?
The best way to personalize and customize products is through our limited consulting services. We are ready to collaborate closely with you to tailor our solutions according to your specific objectives. Please reach out to our team for a detailed discussion of your requirements and to explore the available options for the consulting support.
Need something else?
To discuss volume discounts, or custom support needs, please contact us.