Open sourcebluearchio · Open source
CObluearch-aws-core
Shared local runtime
The shared local runtime the other BlueArch tools depend on. Runs on loopback only, owns the local SQLite database, issues a service token for product backends, and centralizes setup, AWS account context, collectors, scans, templates, and notifications. Install it first; your AWS credentials never leave your own config chain.
RuntimeLocal-onlyMulti-account
brew install bluearchio/tap/bluearch-aws-core
Locked · free account required
Open sourcebluearchio · Open source
OPbluearch-aws-ops
Scanning & recommendations
The operations CLI and local dashboard. It scans AWS accounts, generates cost and reliability recommendations, supports alerting and remediation workflows, analyzes logs, and exposes a FastAPI/Vue dashboard bound to loopback. Reads and writes shared state through core.
RecommendationsAlertingLog analysis
brew install bluearchio/tap/bluearch-aws-ops
Locked · free account required
Open sourcebluearchio · Open source
TGbluearch-aws-tags
Tagging & lifecycle
Tag Manager as a public build: discover resources, manage and enforce tags, evaluate tag-policy compliance, configure TTL and lifecycle policies, and analyze cost allocation data. CLI plus a local web dashboard, with nothing phoning home.
Tag policyTTLCost allocation
brew install bluearchio/tap/bluearch-aws-tags
Locked · free account required
Open sourcebluearchio · Open source
GHbluearch-aws-governance
Governance Hub
Governance Hub: a local API, CLI, dashboard, and bundled AWS misconfiguration catalog. It loads catalog data, evaluates supported findings against your inventory, and presents governance and framework views per account. Unsupported catalog entries stay non-executable until evaluators are reviewed.
FindingsFrameworksCatalog
brew install bluearchio/tap/bluearch-aws-governance
Locked · free account required
Open sourcebluearchio · MIT
DBaws-misconfig-db
Misconfiguration database
A structured, queryable database of AWS misconfigurations and best practices — hundreds of recommendations across 40+ services, each with alert criteria, remediation examples, and detection methods. Query it with DuckDB, feed it to an LLM advisor, or generate Cloud Custodian and AWS Config rules from it.
SQL-queryableDuckDBLLM context
git clone https://github.com/bluearchio/aws-misconfig-db
Locked · free account required
Members onlyBlueArch · Members only
AIInfraGPT · bluearch-aws-steward
AI steward for AWS
InfraGPT, shipped as the bluearch-aws-steward package. It pairs your operational logs, live AWS pricing, and account inventory into quantified answers, then carries the change through: the diff, the runbook, the dollar impact, and an audit trail before anything ships. Included with a free account; usage is metered past the free tier.
Agentic opsForecastingAudit trail
pip install bluearch-aws-steward
Locked · free account required
Open source · 6 tools
Our own repos: the local runtime, ops scanning, tag governance, Governance Hub, the misconfiguration database, and Mission Control.
Partner · 4 tools
LeanerCloud tools we deploy in real engagements: AutoSpotting, CUDly, the instance-pricing library, and their Claude Code configuration.
Members only · 1 tool
InfraGPT (bluearch-aws-steward) — the agent that turns findings into shipped changes. Free tier included with membership, metered past it.