terraform · opentofu · ansible
Infrastructure code
that proves itself.
Every module is statically validated and clears our publish gate before it's listed. The ones marked live-testedwere applied, verified, and destroyed in a real cloud sandbox — so you see exactly what's proven, module by module.
- 126
- published modules
- 20
- clouds & platforms
- 20
- live-tested · apply→verify→destroy
- 100%
- pass the static + plan gate
the guarantee
Three gates between a module and your `apply`.
Not a promise — a pipeline. Every artifact runs it before it can be listed.
Static validation
fmt · validate · tflint · Checkov. The bugs that never need a cloud account get caught here first.
Live test
Applied to a real cloud account, asserted against, then destroyed — with the teardown verified to an empty state. No leaks, no stray bills.
The publish gate
One invariant decides listing: static passed, andeither a confirmed live pass or an explicit, labeled quarantine. An apply that didn't tear down is an incident — not a pass.
Featured modules
All 126 modules →Production VPC (Multi-AZ)
Battle-tested multi-AZ VPC with public/private/database subnets, NAT, endpoints, and flow logs.
$129.00
AWSSQS Queue with DLQ
SQS standard/FIFO queue with dead-letter queue, redrive policy, SSE, and least-privilege queue policy.
$49.00
AWSSNS Topic with Subscriptions
SNS standard/FIFO topic with encryption, delivery policies, and SQS/Lambda/email subscriptions.
$49.00
AWSSecurity Group with Rule Presets
Security groups with named rule presets (https, postgres, redis...) using modern standalone rule resources.
$49.00
AWSSecrets Manager Secret
Secrets with versioning, resource policies, replication, and optional Lambda rotation scaffolding.
$49.00
AWSAWS S3 Bucket (hardened)
Private S3 bucket with encryption, versioning, public-access block, and TLS-only policy.
$49.00
From checkout to `apply` in minutes
- 1
Buy a module, or subscribe
Pay once for perpetual use of a single module, or subscribe for all-access. Every artifact carries a clear commercial license.
- 2
Download — signed and watermarked
You get a checksummed archive plus a signed license key tied to your account.
- 3
Init and apply
Versions are pinned and a working example ships in the box. Run it with Terraform or OpenTofu.
Stop vetting strangers' Terraform.
Every module is static-verified, plan-tested & signed; the live-tested ones were applied, verified, and torn down in a real sandbox — so the only thing left to do is ship.