provider-family-aws

by upbound

Supplies ProviderConfig and related CRDs so workload clusters authenticate to AWS APIs; pair with service-scoped provider-aws-* packages and the family provider for credentials wiring.

provider-aws-accessanalyzer

by upbound

Continuously analyzes IAM and resource policies for overly permissive S3, IAM, KMS, and cross-account access paths; tune findings with archive rules for least-privilege and external-access (IAM Access Analyzer) governance.

provider-aws-account

by upbound

Manages account-level contacts and communication preferences for billing, operations, and security notices, and controls which AWS Regions are available for resource creation in the account.

provider-aws-acm

by upbound

Requests and renews public TLS 1.2+ certificates (RSA/ECC), automates DNS-01 or email validation, and attaches them to ALB/NLB, API Gateway, and CloudFront for HTTPS and mutual-TLS patterns without manual PEM handling.

provider-aws-acmpca

by upbound

Runs a private certificate authority for issuing internal TLS and client certificates, defines issuance policies and permissions, and automates CA hierarchy and certificate lifecycle for workloads inside your org.

provider-aws-amp

by upbound

Hosts managed Prometheus workspaces to scrape metrics, store time series, and evaluate alerting rules so you can monitor Kubernetes and AWS services with familiar PromQL and Alertmanager workflows.

provider-aws-amplify

by upbound

Builds and hosts full-stack web and mobile apps from Git (React, Next.js-friendly workflows), wires Cognito auth and serverless APIs, and manages preview branches and webhooks for CI/CD-style frontend delivery.

provider-aws-apigateway

by upbound

Publishes REST/OpenAPI-style APIs with custom domains, Lambda or Cognito JWT authorizers, stages, and integrations to Lambda, HTTP proxies, and AWS APIs; throttles traffic and fronts legacy HTTP backends behind one edge endpoint.

provider-aws-apigatewayv2

by upbound

Delivers low-latency HTTP APIs and bidirectional WebSocket APIs with routes, JWT or Lambda auth, VPC links to private integrations, and custom domains for modern microservice and real-time workloads.

provider-aws-appautoscaling

by upbound

Applies target tracking, step, and scheduled scaling policies to ECS services, DynamoDB, Aurora, and other application resources so capacity follows demand without per-service custom autoscaler code.

provider-aws-appconfig

by upbound

Rolls out feature flags and configuration to applications using environments, deployment strategies, and validation so you can stage releases, run experiments, and avoid big-bang config changes.

provider-aws-appflow

by upbound

Moves data between SaaS systems (e.g. Salesforce, Zendesk) and S3, Redshift, or Snowflake-bound sinks with scheduled or event-triggered flows, field mapping, and incremental CDC-style sync without custom ETL workers.

provider-aws-appintegrations

by upbound

Connects third-party SaaS products into EventBridge so external events can drive automation and routing alongside native AWS event sources.

provider-aws-applicationinsights

by upbound

Observes .NET, SQL Server, and IIS stacks to surface application problems, anomalies, and dependency issues with guided diagnostics and CloudWatch integration for faster MTTR on business-critical apps.

provider-aws-appmesh

by upbound

Runs a service mesh that routes HTTP and gRPC between microservices with virtual nodes and gateways, applies retries and traffic shifting, and gives uniform observability across ECS, EKS, and EC2 backends.

provider-aws-apprunner

by upbound

Runs containerized web services and APIs from a container image or source repo with built-in load balancing, TLS, autoscaling, VPC connectivity, and GitHub connections for simple production hosting without managing clusters.

provider-aws-appstream

by upbound

Streams desktop applications or full non-persistent desktops to browsers, manages fleets and images, and integrates with directories so software can be delivered securely without installing clients on end-user devices.

provider-aws-appsync

by upbound

Exposes managed GraphQL (AppSync) APIs with DynamoDB/Lambda/OpenSearch resolvers, WebSocket subscriptions, AppSync caching, and Cognito/IAM fine-grained auth for mobile and web clients.

provider-aws-athena

by upbound

Runs serverless ANSI SQL (Presto/Trino engine) over S3 data lakes—Parquet, ORC, Iceberg, and Glue Data Catalog tables—with workgroups, saved queries, and governed access without provisioning query clusters.

provider-aws-autoscaling

by upbound

Defines Auto Scaling groups with launch templates and mixed instances, attaches load balancers, implements lifecycle hooks and step scaling, and combines scheduled actions with dynamic policies to keep fleet size matched to load.

provider-aws-autoscalingplans

by upbound

Builds predictive and dynamic scaling plans that coordinate capacity across EC2, ECS, DynamoDB, and related resources using a single strategy for applications with tightly coupled scaling signals.

provider-aws-backup

by upbound

Centralizes backup policies and vaults, selects resources by tag or ARN, enforces legal hold and vault lock, and supports copy jobs across Regions and accounts for ransomware-aware recovery.

provider-aws-batch

by upbound

Schedules containerized batch, ML, and HPC jobs on EC2, Fargate, and Spot compute environments with job queues, fair-share scheduling, and GPU instance types for CUDA/ML training offload.

provider-aws-bedrock

by upbound

Routes LLM inference through managed profiles to Anthropic, Amazon, Cohere, and other foundation models with quotas, monitoring, and failover between model variants (RAG-ready when paired with knowledge bases).