Spin up new multi-account team setups in no time
DevOps Foundations includes a robust, secure, customizable account factory which gives your teams best-practices multi-account structures using AWS Organizations, all based on official AWS recommendations.
Control Tower Integration
Control Tower Integration
Gruntwork Account Factory integrates seamlessly with AWS Control Tower, giving you the benefits of IaC and the convenience of AWS console controls.
Managed as code. Integrate accounts created with Control Tower with your Terraform-managed infrastructure.
Account lifecycle notices. Gruntwork Pipelines provides support for adding, updating, and deleting accounts, and gives notifies you at every step.
Apply controls. Apply controls and guard rails (SCPs, AWS Config Rules) to your account in Control Tower.
Out-of-the-box everything
Out-of-the-box everything
Security baselines. Establish secure, CIS Foundations Benchmark compliant baselines in every new account, and customize them to meet your needs.
SSO. Give your teams easy secure access to their new accounts.
Modern networking. Include a production-ready VPC in each account, optionally with an inspection VPC pattern for added control [enterprise only].
Enforce guard rails. Fill in the gaps not supported by Control Tower, with GuardDuty, Macie, IAM Access Analyzer, and more.
GitOps Ready. All new accounts come with Gruntwork Pipelines installed, so teams can
Empower your app teams
Empower your app teams
Module catalog. Leverage our library to populate your approved catalog of modules.
Infrastructure Scaffolding. Scaffold new Terraform modules from a customizable collection of templates.
GitOps Ready. All new accounts come with Gruntwork Pipelines installed, so teams can.
Secure. Your prod AWS credentials are kept isolated from developers so the blast radius of any changes is kept to a minimum.
Keep all your accounts up-to-date
Keep all your accounts up-to-date
Automatic Updates
Promotion workflows.
Join a community of thousands of developers
Gruntwork proves instrumental in Instrumental’s growth
Gruntwork proves instrumental in Instrumental’s growth
Gruntwork Account Factory integrates seamlessly with AWS Control Tower, giving you the benefits of IaC and the convenience of AWS console controls.
Erem Boto
Senior Software Engineer
How we compare
| Do it yourself (DIY) | Consultant | |
Starting point | Leverage battle-tested code and tooling proven in prod | From scratch | From scratch |
Incentives | Maximize product utility from a reusable library of code | Minimize investment of time | Maximize billable hours |
Scope of work | End-to-end, modular architecture that fulfills the production-grade checklist | Varies depending on team knowledge and time available | Varies depending on consultant knowledge and budget available |
Time to launch | ~1 week (highly predictable) | 3 – 12 months (highly variable) | 3 – 12 months (highly variable) |
Lay your new DevOps Foundations today.
Chat with a DevOps expert and see how our integrated solution can meet the needs of your business and your teams.
© 2024 Gruntwork