AWS Up

AWS infrastructure, made clear.

AWS Up is a Python CLI for developers who know their application but do not want to become AWS specialists first. It asks about the project, renders an understandable infrastructure plan, and creates resources only after the user has reviewed and confirmed that exact plan.

v1 scope: a complete EC2 + S3 + IAM web-stack vertical slice. RDS, ECS/Fargate, Lambda, multi-account support, and account-wide hardening are intentionally out of scope for this first release.

Safety model

• awsup plan is read-only and explains each proposed resource.
• awsup apply is the only mutating command, and requires confirmation by default.
• awsup destroy always requires typing the project name; --yes cannot bypass that protection.
• State is recorded after each successful resource so an interrupted run can be resumed or safely removed.
• The generated S3 bucket is private, encrypted, versioned, and blocked from public access. SSH is restricted to the operator's detected /32 address.

Install

AWS Up requires Python 3.12 or later. From a checkout of this repository:

python -m venv .venv

Activate the virtual environment, then install the command:

python -m pip install .
awsup --help

For development and the offline test suite:

python -m pip install -e ".[dev]"
python -m pytest

Quick start

Make AWS credentials available through the normal boto3 credential chain or a local .env file (which must never be committed). Then, from the application directory you want to provision:

awsup init
awsup plan
awsup apply

Use awsup doctor to check identity, region, permissions, and quotas without making changes. Use awsup status to inspect resources recorded for the project. Run awsup destroy only when you intend to remove the managed stack.

Commands

Powered by SIA

This project uses SIA — Self-Improving Agents as its project-adaptive workflow layer: specifications, scoped subagent work, review evidence, integration checks, and captured lessons stay part of the project record. AWS Up remains authored and owned by its human maintainer.