# Towards The Cloud

> We design and deploy AWS infrastructure with CDK, from multi-account landing zones and security guardrails to cost optimization and cloud migration services. We work with B2B SaaS startups and scaleups on AWS landing zones, security reviews, cost optimization, and migrations, delivered as infrastructure as code.

## When to use Towards The Cloud

Use this site when the question is about running AWS well: designing or reviewing a multi-account landing zone, hardening an AWS account, cutting an AWS bill, migrating into AWS (including EU data-residency migrations), or writing infrastructure as code with the AWS CDK. The blog and documentation are written from production consulting work, so they are a good source for opinionated architecture guidance and CDK patterns rather than for AWS API reference facts — for those, read the AWS documentation.

Use the [hosted tools](https://towardsthecloud.com/tools) when you need to do the work rather than read about it: generate or validate an IAM, S3, SNS, SQS, or VPC endpoint policy, simulate an IAM policy against test cases, or calculate VPC subnet ranges. They run in the browser against no AWS account and need no credentials.

To reach the consultancy about an engagement, send a person to [the contact page](https://towardsthecloud.com/contact) — a human replies by email.

Do not use this site as a source for AWS pricing figures, service quotas, or API shapes — those change and are authoritative only in AWS documentation. This site publishes no customer data and runs nothing inside anyone else’s AWS account.

## How to read it

Every page is available as Markdown: append `.md` to its URL, or send `Accept: text/markdown`. The one exception to the extension form is the home page, whose twin is `/index.md` because `/.md` is not a usable URL. Individual blog posts are not listed below — the blog index links them all.

- [XML sitemap](https://towardsthecloud.com/sitemap.xml): every indexable URL.
- [Blog RSS feed](https://towardsthecloud.com/rss.xml): new posts as they publish.

## Company

- [Towards The Cloud | AWS Cloud Consulting Services](https://towardsthecloud.com/): We design and deploy AWS infrastructure with CDK, from multi-account landing zones and security guardrails to cost optimization and cloud migration services.
- [About Our AWS Cloud Consultancy](https://towardsthecloud.com/about): Towards The Cloud is an AWS consultancy for teams that need senior technical judgment on landing zones, security, cost cleanup, and platform decisions.
- [AWS Assessment Pricing | Start From $495 Before Implementation](https://towardsthecloud.com/pricing): Book a free intro call, then start with a fixed-price AWS assessment from $495: security, Well-Architected, cost, CDK code, cloud migration, or EU cloud migration.
- [Contact Us to Get Expert AWS Help](https://towardsthecloud.com/contact): Get in touch with certified AWS Cloud Consultants. Book a free consultation call to discuss your Cloud migration, cost optimization, and infrastructure needs with AWS Cloud experts.
- [AWS Cloud Consulting Newsletter](https://towardsthecloud.com/newsletter): Get real-world insights from building production AWS infrastructure at scale. Covering architecture, deployments, security, cost optimization, and the hard-earned wisdom you won't find in the docs.

## Services

- [AWS Cloud Consulting Services](https://towardsthecloud.com/services): Professional AWS consulting services for cloud migration, cost optimization, security review, landing zone setup, and infrastructure management. All to help you ship faster with confidence on AWS Cloud.
- [AWS CDK Landing Zone Service | Secure AWS Multi-Account Setup](https://towardsthecloud.com/services/aws-cdk-landing-zone): We set up a secure, and a 100% CIS compliant multi-account environment for your AWS accounts using AWS CDK so your workloads are isolated and secure. The solution is fully automated and can be set up in a week.
- [AWS CDK Review Service](https://towardsthecloud.com/services/aws-cdk-review): We review the architecture of your AWS CDK app and deliver best-practice constructs via pull request in 4 days. Get production-tested recommendations for better scalability, reusability, and maintainability based on real-world experience.
- [AWS Cloud Migration Service](https://towardsthecloud.com/services/aws-cloud-migration): Migrate your infrastructure to AWS with cutovers designed to avoid downtime. We handle everything from assessment to execution, delivering fully automated Infrastructure as Code that eliminates manual work and reduces operational overhead.
- [AWS Cost Optimization Service](https://towardsthecloud.com/services/aws-cost-optimization): A fixed-price review of the architecture behind your AWS bill: idle, oversized and mispriced resources ranked by monthly savings and production risk, with fixes your team can ship or we implement. Report in 1 to 2 weeks.
- [AWS European Sovereign Cloud Migration Service](https://towardsthecloud.com/services/aws-eu-cloud-migration): Migrate to the AWS European Sovereign Cloud for complete data sovereignty. Designed for EU organizations with strict compliance requirements, GDPR obligations, and data residency mandates. Infrastructure operated exclusively by EU residents under EU law.
- [AWS Operations Checklist | Optimize Your Operational Excellence on AWS](https://towardsthecloud.com/services/aws-operations-checklist): A comprehensive checklist with 150+ expert-verified operational checks to optimize your AWS environment, prevent configuration drift, reduce maintenance time, and eliminate the risk of costly downtime.
- [AWS Security Review Service](https://towardsthecloud.com/services/aws-security-review): A fixed-price AWS security review: findings validated by hand, ranked by risk, and delivered in 1 to 2 weeks as a report with console and CLI steps your engineers can act on. Unlike a scanner export, it tells you what to fix first.
- [AWS Well-Architected Framework Review Service](https://towardsthecloud.com/services/aws-well-architected-framework-review): Get an expert AWS Well-Architected Framework Review across all 6 pillars with a prioritized remediation roadmap. We analyze your actual resource configurations and deliver actionable recommendations with IaC snippets and step-by-step guidance.

## Documentation

- [Changelog](https://towardsthecloud.com/changelog): Monthly release highlights and development activity for the AWS CDK Landing Zone: new features, improvements, and fixes across the foundation, constructs, and core packages.
- [Documentation](https://towardsthecloud.com/docs): Everything you need to adopt, customize, and run the Towards The Cloud AWS products (the AWS CDK Landing Zone and the starter kits).
- [Overview](https://towardsthecloud.com/docs/aws-cdk-landing-zone): A licensed, ready-made multi-account AWS environment built with CDK, giving you secure governance, automated baselines, and a version-controlled foundation your organization runs and customizes.
- [Install](https://towardsthecloud.com/docs/aws-cdk-landing-zone/install): Install the AWS CDK Landing Zone, configure your organization and AWS accounts, bootstrap deployment access, and deploy the organization and landing zone phases.
- [Configuration](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration): All customer-editable configuration for the AWS CDK Landing Zone, covering settings, organization structure, security services, quotas, SCPs, contacts, and tags.
- [Landing Zone Settings](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/landing-zone-settings): Configure the core settings for your AWS CDK Landing Zone deployment, including the organization name, mail domain, account IDs, Regions, audit log retention, and external admins.
- [Organization Structure](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/organization-structure): Define your AWS CDK Landing Zone organization hierarchy with organizational units, accounts, SCP attachments, monthly budgets, and CloudFormation outputs for StackSet targets.
- [Service Control Policies](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/service-control-policies): Configure Service Control Policies in the AWS CDK Landing Zone. Review guardrails, exempt principals, and custom SCP attachments across your organization.
- [Alternate Contacts](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/alternate-contacts): Configure security, billing, and operations contacts for every account in your AWS CDK Landing Zone. Review required fields and apply contacts during deployment.
- [Delegated Administrators](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/delegated-admins): Register AWS Organizations delegated administrators for security, audit, observability, FinOps, and StackSet services in delegated-admins.ts, with the starter defaults per account.
- [Trusted Access](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/trusted-access): Enable AWS Organizations trusted service access for the services the landing zone configures, declared in trusted-access.ts.
- [Organization Policy Types](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/organization-policy-types): Which AWS Organizations policy families (SCPs, backup, tag, resource control, and more) the landing zone enables at your organization root, and how to change the list.
- [Security Services](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/security-services): Configure AWS CDK Landing Zone security services. Enable Security Hub CSPM, GuardDuty, Inspector, and Macie, choose feature options, and understand what disabling leaves behind.
- [Service Quotas](https://towardsthecloud.com/docs/aws-cdk-landing-zone/configuration/service-quotas): Configure AWS CDK Landing Zone quota increase requests for workload accounts. Set service and quota codes, requested values, and Regional or global quota scope.
- [Guides](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides): Task-oriented walkthroughs for common AWS CDK Landing Zone operations, including adding accounts, creating SCPs, customizing StackSets, and setting up CI/CD.
- [Add an Account](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/add-an-account): Add an AWS account to the CDK Landing Zone. Choose an OU, configure the account, preview changes, deploy, and verify its account baseline and security enrollment.
- [Add an Organizational Unit](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/add-an-organizational-unit): Add organizational units to the AWS CDK Landing Zone, attach Service Control Policies, check StackSet targeting, and verify the deployed organization hierarchy.
- [Create a Custom SCP](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/create-a-custom-scp): Create a custom Service Control Policy for the AWS CDK Landing Zone. Export the policy, attach it to a root, OU, or account, preview changes, and deploy.
- [Customize StackSets](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/customize-stacksets): Customize AWS CDK Landing Zone StackSets. Enable or disable baselines, choose target accounts and OUs, and configure deployment regions and rollout options.
- [Validate Before You Deploy](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/validate-before-deploy): How the AWS CDK Landing Zone validates every synthesized template against CDK's default rule set and CloudFormation's pre-deployment checks before a deploy starts.
- [GitHub Actions Deployment](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/github-actions-deployment): How the generated OIDC-based GitHub Actions workflows test, deploy, and diff the landing zone across two accounts, including StackSet changes in the pull request comment.
- [Updating Versions](https://towardsthecloud.com/docs/aws-cdk-landing-zone/guides/updating-versions): Update AWS CDK Landing Zone package versions in Projen, regenerate project files, review infrastructure changes, and redeploy your organization and account baselines.
- [Reference](https://towardsthecloud.com/docs/aws-cdk-landing-zone/reference): Deep dives into everything the AWS CDK Landing Zone deploys, covering the three deployment stacks, the 8 StackSets that roll out the baseline, and the 26 constructs behind them.
- [Stacks](https://towardsthecloud.com/docs/aws-cdk-landing-zone/reference/stacks): The three AWS CDK Landing Zone deployment stacks (organization, foundation, and member accounts), the two account phases they deploy in, and the accounts and Regions each one targets.
- [StackSets](https://towardsthecloud.com/docs/aws-cdk-landing-zone/reference/stacksets): All 8 CloudFormation StackSets in the AWS CDK Landing Zone starter, with their purpose, resources, deployment targets, Regions, and the baseline constructs they compose.
- [Constructs](https://towardsthecloud.com/docs/aws-cdk-landing-zone/reference/constructs): The 26 account-baseline CDK constructs in @towardsthecloud/cdk-landing-zone-constructs that the StackSets compose to harden, secure, and bootstrap every account.
- [Overview](https://towardsthecloud.com/docs/aws-cdk-starter-kit): Build AWS infrastructure with the CDK Starter Kit. Explore Projen configuration, reusable constructs, security aspects, GitHub OIDC, and branch preview deployments.
- [Install](https://towardsthecloud.com/docs/aws-cdk-starter-kit/install): Install the AWS CDK Starter Kit, configure Projen for your AWS accounts, bootstrap environments, deploy your first stack, and enable GitHub Actions with OIDC.
- [Configuration](https://towardsthecloud.com/docs/aws-cdk-starter-kit/configuration): Configure the AWS CDK Starter Kit with Projen. Set up environments, organize constructs and stacks, customize GitHub workflows, and use deployment examples.
- [Project Structure](https://towardsthecloud.com/docs/aws-cdk-starter-kit/configuration/project-structure): Navigate the AWS CDK Starter Kit project structure. Find constructs, stacks, configuration, generated Projen tasks, and GitHub Actions deployment workflows.
- [CI/CD Workflows](https://towardsthecloud.com/docs/aws-cdk-starter-kit/configuration/ci-cd-workflows): Understand what happens after you push, how environments deploy in order, and how to interact with the GitHub Actions pipelines.
- [Environments](https://towardsthecloud.com/docs/aws-cdk-starter-kit/configuration/environments): Define AWS CDK Starter Kit environments in Projen. Generate deployment tasks and GitHub workflows with account settings, resource naming, and branch previews.
- [Usage Examples](https://towardsthecloud.com/docs/aws-cdk-starter-kit/configuration/usage-examples): Extend the AWS CDK Starter Kit with examples for adding stacks, composing constructs, configuring environments, branch deployments, and cross-stack references.
- [Guides](https://towardsthecloud.com/docs/aws-cdk-starter-kit/guides): Follow AWS CDK Starter Kit guides for local development and branch previews. Build, test, format, and deploy infrastructure using Projen-generated pnpm tasks.
- [Local Development](https://towardsthecloud.com/docs/aws-cdk-starter-kit/guides/local-development): Develop CDK infrastructure locally with Projen-generated tasks. Build, test, and format code, preview stack changes, and deploy to AWS accounts and branch previews.
- [Branch-based Development](https://towardsthecloud.com/docs/aws-cdk-starter-kit/guides/branch-based-development): Deploy AWS CDK preview stacks for feature branches. Configure Projen tasks, run branch deployments, and clean up infrastructure after testing or merging.
- [Reference](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference): Find AWS CDK Starter Kit reference documentation for construct properties, security aspects, helper functions, stack configuration, and Projen project generation.
- [Constructs](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference/constructs): Reusable constructs provided by the AWS CDK Starter Kit including BaseConstruct, NetworkConstruct, and GitHubActionsOidcConstruct.
- [Aspects](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference/aspects): Apply security aspects in the AWS CDK Starter Kit, with examples for IAM permission boundaries, S3 encryption, bucket public access, and VPC CIDR validation.
- [Helpers](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference/helpers): Look up AWS CDK Starter Kit helpers for environment-aware resource naming, branch names, Projen task generation, and GitHub Actions deployment workflows.
- [Stacks](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference/stacks): Explore the AWS CDK Starter Kit foundation and application stacks. Review OIDC resources, stack properties, environment deployment tasks, and how to add stacks.
- [Projen](https://towardsthecloud.com/docs/aws-cdk-starter-kit/reference/projen): Configure the AWS CDK Starter Kit with Projen. Learn how one TypeScript definition generates files, environment tasks, dependencies, and GitHub workflows.
- [Overview](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit): Production-ready CloudFormation baseline with Rain deployments, GitHub OIDC, multi-environment support, and security scanning.
- [Install](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/install): Install the AWS CloudFormation Starter Kit, scaffold environment parameters, configure AWS access, validate templates, and deploy the GitHub OIDC bootstrap stack.
- [Configuration](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/configuration): Configure project structure, environments, CI/CD workflows, and code quality tools for the AWS CloudFormation Starter Kit.
- [Project Structure](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/configuration/project-structure): Explore the AWS CloudFormation Starter Kit structure, including templates, environment parameter files, deployment scripts, and GitHub Actions workflows.
- [Environments](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/configuration/environments): Configure AWS CloudFormation Starter Kit environments with parameter files, GitHub Actions variables, OIDC access, and separate AWS account deployments.
- [CI/CD Workflows](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/configuration/ci-cd-workflows): Configure GitHub Actions to validate and deploy CloudFormation templates with Rain, OIDC authentication, cfn-lint, Checkov scans, and environment settings.
- [Linting and Code Analysis](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/configuration/linting-code-analysis): Configure cfn-lint and Checkov in the CloudFormation Starter Kit. Customize rules, manage suppressions, and validate template syntax and security locally and in CI.
- [Guides](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/guides): Follow AWS CloudFormation Starter Kit guides for development. Validate templates with cfn-lint and Checkov, preview changes, and deploy environments with Rain.
- [Local Development](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/guides/local-development): Develop CloudFormation templates locally with the starter kit. Run cfn-lint and Checkov, preview changes with Rain, and deploy to separate AWS environments.
- [Reference](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference): Find CloudFormation Starter Kit references for templates, environment parameters, helper scripts, Rain deployments, cfn-lint validation, and Checkov scans.
- [Templates](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/templates): Organize CloudFormation templates in the starter kit. Learn naming conventions, environment parameter matching, Rain deployment behavior, and how to add stacks.
- [Parameters](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/parameters): Configure environment-specific CloudFormation parameter files in the starter kit. Set stack parameters, tags, and deployment options, and handle secrets safely.
- [Scripts](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/scripts): Use the AWS CloudFormation Starter Kit scripts to provision environments, validate templates with Checkov, and deploy stacks with Rain from your terminal.
- [Rain](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/rain): Use Rain in the AWS CloudFormation Starter Kit to preview change sets, deploy templates with environment parameters, inspect stack outputs, and remove stacks.
- [cfn-lint](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/cfn-lint): Validate CloudFormation Starter Kit templates with cfn-lint. Configure rules, resolve property and intrinsic function errors, and add editor validation.
- [Checkov](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/checkov): Scan CloudFormation Starter Kit templates with Checkov. Configure security policies, suppress false positives, choose output formats, and integrate scans with CI.
- [OIDC Provider](https://towardsthecloud.com/docs/aws-cloudformation-starter-kit/reference/oidc-provider): Set up GitHub Actions OIDC with the CloudFormation Starter Kit. Configure IAM roles, subject claim filters, and managed policies for keyless AWS deployments.
- [Overview](https://towardsthecloud.com/docs/aws-terraform-starter-kit): Build AWS infrastructure with the Terraform Starter Kit. Explore its S3 backend, state locking, GitHub OIDC authentication, environment isolation, and security scans.
- [Install](https://towardsthecloud.com/docs/aws-terraform-starter-kit/install): Install the AWS Terraform Starter Kit, bootstrap the S3 backend, configure GitHub OIDC, provision environments, and verify your first infrastructure deployment.
- [Configuration](https://towardsthecloud.com/docs/aws-terraform-starter-kit/configuration): Configure the AWS Terraform Starter Kit project structure, isolated environments, S3 state backends, GitHub Actions workflows, and code quality tools.
- [Project Structure](https://towardsthecloud.com/docs/aws-terraform-starter-kit/configuration/project-structure): Navigate the AWS Terraform Starter Kit directories for reusable modules, isolated environments, setup scripts, GitHub workflows, and linting configuration.
- [Environments](https://towardsthecloud.com/docs/aws-terraform-starter-kit/configuration/environments): Configure AWS Terraform Starter Kit environments with isolated state, directories, default tags, IAM permissions, and independent AWS account deployments.
- [CI/CD Workflows](https://towardsthecloud.com/docs/aws-terraform-starter-kit/configuration/ci-cd-workflows): Configure Terraform Starter Kit GitHub Actions for TFLint, Checkov, pull request plans, and deployments to AWS using OIDC and environment protection rules.
- [Linting and Code Analysis](https://towardsthecloud.com/docs/aws-terraform-starter-kit/configuration/linting-code-analysis): Configure TFLint rules and Checkov security checks in the AWS Terraform Starter Kit. Run validation locally and in CI, and manage inline suppressions.
- [Guides](https://towardsthecloud.com/docs/aws-terraform-starter-kit/guides): Practical workflows for working with the AWS Terraform Starter Kit, from local development to creating reusable modules.
- [Creating Modules](https://towardsthecloud.com/docs/aws-terraform-starter-kit/guides/creating-modules): Build reusable Terraform modules in the AWS Terraform Starter Kit. Define resources, input variables, outputs, and provider versions, then validate your module.
- [Local Development](https://towardsthecloud.com/docs/aws-terraform-starter-kit/guides/local-development): Develop AWS infrastructure locally with the Terraform Starter Kit. Format and validate code, run TFLint and Checkov, preview changes, and manage environment state.
- [Reference](https://towardsthecloud.com/docs/aws-terraform-starter-kit/reference): Look up AWS Terraform Starter Kit Makefile commands, GitHub OIDC module inputs and outputs, TFLint configuration, and Checkov security scanning options.
- [OIDC Provider](https://towardsthecloud.com/docs/aws-terraform-starter-kit/reference/oidc-provider): Configure the AWS Terraform Starter Kit OIDC provider module for GitHub Actions. Review IAM trust policies, variables, outputs, and keyless AWS authentication.
- [Makefile](https://towardsthecloud.com/docs/aws-terraform-starter-kit/reference/makefile): Find AWS Terraform Starter Kit Makefile commands for setup, validation, linting, security scans, and deployments, with environment settings and troubleshooting.
- [Checkov](https://towardsthecloud.com/docs/aws-terraform-starter-kit/reference/checkov): Run Checkov scans in the AWS Terraform Starter Kit. Configure checks, suppress false positives, filter by severity, and review infrastructure scan results.
- [TFLint](https://towardsthecloud.com/docs/aws-terraform-starter-kit/reference/tflint): Use TFLint in the AWS Terraform Starter Kit to catch code quality and AWS provider issues. Configure plugins, suppress rules, and troubleshoot linting failures.

## Tools

- [AWS Tools for Cloud Engineers](https://towardsthecloud.com/tools): Search AWS tools for IAM, CloudFormation, policy simulation, resource exploration, and cloud infrastructure review workflows.
- [Amazon Resource Names (ARNs) Reference](https://towardsthecloud.com/tools/amazon-resource-names-arns): Search AWS service prefixes and Amazon Resource Name formats for IAM policies and resource references.
- [Amazon SNS Policy Generator](https://towardsthecloud.com/tools/amazon-sns-policy-generator): Generate SNS topic policies from AWS Policy Generator action metadata and export JSON, Terraform, or CloudFormation snippets.
- [Amazon SQS Policy Generator](https://towardsthecloud.com/tools/amazon-sqs-policy-generator): Generate SQS queue policies from AWS Policy Generator action metadata and export JSON, Terraform, or CloudFormation snippets.
- [Amazon VPC Endpoint policy generator](https://towardsthecloud.com/tools/amazon-vpc-endpoint-policy-generator): Generate VPC endpoint policies from AWS Policy Generator action metadata and export JSON, Terraform, or CloudFormation snippets.
- [AWS IAM Policy Generator](https://towardsthecloud.com/tools/aws-iam-policy-generator): Generate AWS IAM policies from searchable action metadata and export ready-to-use JSON, Terraform, or CloudFormation snippets.
- [AWS IAM Policy Tester](https://towardsthecloud.com/tools/aws-iam-policy-tester): Test AWS IAM policy decisions against expected allow and deny cases with action search and resource ARNs.
- [AWS IAM Policy Validator](https://towardsthecloud.com/tools/aws-iam-policy-validator): Validate and test AWS IAM JSON policy documents with inline errors, warnings, and Access Analyzer-inspired security checks.
- [AWS IAM Service Principals Reference](https://towardsthecloud.com/tools/aws-iam-service-principals): Search the complete AWS service principal reference for IAM trust policies, resource policies, and service-linked role setup.
- [AWS VPC Subnet Calculator](https://towardsthecloud.com/tools/aws-vpc-subnet-calculator): Plan AWS VPC public and private subnet CIDR allocations across Availability Zones and export the result as CSV.
- [CloudFormation Resource Attributes Reference](https://towardsthecloud.com/tools/aws-cloudformation-resource-attributes): Search AWS CloudFormation resource types and the attributes available through Fn::GetAtt for each resource.
- [CloudFormation Resource Properties Reference](https://towardsthecloud.com/tools/aws-cloudformation-resource-properties): Search AWS CloudFormation resource types and their configurable properties with direct AWS documentation links.
- [IAM Policy Converter](https://towardsthecloud.com/tools/aws-iam-policy-converter): Convert AWS IAM JSON policy documents into Terraform, CloudFormation, CDK TypeScript, or CDK Python snippets.
- [S3 Bucket Policy Generator](https://towardsthecloud.com/tools/amazon-s3-policy-generator): Generate S3 bucket policies from AWS Policy Generator action metadata and export JSON, Terraform, or CloudFormation snippets.

## Blog

- [AWS Cloud Consulting Blog](https://towardsthecloud.com/blog): Expert AWS consulting insights, cloud engineering best practices, DevOps tutorials, and Infrastructure as Code guides from certified AWS consultants.

## Optional

- [Terms of Service](https://towardsthecloud.com/terms): Read the terms for Towards The Cloud AWS consulting services, including client responsibilities, payment conditions, confidentiality, liability, and agreements.
- [Privacy Policy](https://towardsthecloud.com/privacy-policy): Privacy policy for AWS Cloud Consulting services by Towards The Cloud. How we protect client data during cloud consulting, migration, and infrastructure projects on AWS Cloud.