EXTENSIONS
User-built models, drivers, vaults, and reports — the parts that plug into swamp.
Filter by what you need and pull what fits.
Fact Store Aurora Bootstrap
One-shot bootstrap for @twonines/fact-store backed by AWS Aurora Postgres Serverless v2. Provisions the RDS cluster + writer instance, the enclosing VPC networking primitives (DB subnet group, security group), an IAM managed policy scoped to rds-db:connect on the cluster, and an IAM workload role that trusts a caller-provided principal (e.g., an AWS SSO permission set ARN). A companion workflow runs the provisioner and then configures @webframp/postgres-datastore against the newly created cluster using a fresh RDS IAM auth token.
Aws Iam Role Audit
Read-only fleet IAM lens for an integration's roles across many accounts. A
Aws Integration Coverage
Coalesces a CloudFormation StackSet lens (@jentz/aws-stackset-audit) and an
Zitadel
Careful, non-destructive administration of a Zitadel instance over its Management API (v1 REST), authenticated with a JWT private-key service account. Read/audit of orgs, projects, applications, users and managers; idempotent provisioning of OIDC/API applications and machine (service) users; project-role and user-grant authorization (roles, grants, and the role-assertion flag that surfaces roles in tokens); rotation of client secrets, PATs, machine keys and secrets; and reversible deactivate/reactivate. Machine identities only. The only hard delete is a single, verify-first project-role removal (roles have no deactivate state); secrets are emitted once and marked sensitive.
Aws/iam
AWS IAM infrastructure models
Cloudflare/iam
Cloudflare iam infrastructure models
Gcp/iam
Google Cloud iam infrastructure models