Tools
The AWS, DevOps, and AI-coding tools we actually use and recommend - searchable and filterable by tag, not an interactive calculator.
Showing 52 of 52 tools
AWS CDK
Infrastructure as code for AWS in TypeScript, Python, or Go - the backbone of nearly everything we build.
AWS Landing Zone Accelerator
AWS's reference multi-account landing zone solution. Our default starting point for new AWS Organizations.
cdk-nag
A CDK Aspect that checks your constructs against AWS Solutions, HIPAA, NIST 800-53, and other rule packs at synth time.
aws-nuke
Deletes every resource in an AWS account. Essential for keeping sandbox and event accounts clean between runs.
projen
Defines project config - package.json, CI workflows, and more - as code instead of hand-maintained files.
Granted
Fast AWS SSO credential switching from the CLI - no more copy-pasting temporary keys between terminals.
Context7
Up-to-date library documentation fed straight into an AI coding session via MCP, instead of stale training data.
pilot-shell
The framework we run daily on top of Claude Code and Codex to turn ad-hoc habits into enforced rules and hooks.
AWS CLI
The official command-line interface for AWS - the default way we script around services CDK doesn't cover.
eksctl
The official CLI for Amazon EKS - spins up a production-ready cluster in one command.
k9s
A terminal UI for Kubernetes clusters - browse resources, tail logs, and edit manifests without leaving the terminal.
kubectl
The standard Kubernetes CLI - the tool every other entry in this Kubernetes toolbox builds on.
kubectx / kubens
Fast cluster context and namespace switching for kubectl - no more copy-pasting cluster names.
Kustomize
Template-free Kubernetes YAML customization via overlays - our default for environment-specific manifests.
Helm
The package manager for Kubernetes - charts are how we version and ship application deployments.
kind
Runs local Kubernetes clusters in Docker - disposable clusters for testing manifests before they hit real infra.
Flux
GitOps for Kubernetes - continuously reconciles cluster state to what's committed in Git.
Argo CD
Declarative GitOps continuous delivery for Kubernetes - our other GitOps engine, chosen per client's existing stack.
dive
Explores a Docker image layer by layer to find what's bloating the build.
OrbStack
A fast, light Docker Desktop replacement for macOS - our default local container runtime.
Pulumi
Infrastructure as code in real programming languages - the option we reach for when a client wants IaC beyond CDK or CloudFormation.
tenv
Version manager for Terraform, OpenTofu, Terragrunt, and Atmos - keeps every client on the exact version their repo expects.
gitleaks
Scans git repos and commits for hardcoded secrets - wired into our pre-commit hook on every project.
Trivy
Scans container images, filesystems, and IaC for vulnerabilities and misconfigurations in one tool.
sops
Encrypts secrets in files - YAML, JSON, .env - so they can live safely in git, decrypted only at deploy time.
age
A simple, modern file encryption tool - what sops uses under the hood, and useful standalone.
1Password CLI
Pulls secrets from the 1Password vault straight into scripts and CI - nothing pasted into a terminal history.
GitHub CLI
GitHub from the terminal - PRs, issues, releases, and checks without opening a browser tab.
glab
The GitLab equivalent of the GitHub CLI - essential on client engagements that run on GitLab instead of GitHub.
delta
A syntax-highlighting pager for git diffs - makes a two-line change and a rewritten file equally easy to review.
Lefthook
A fast, polyglot git hooks manager - runs lint, gitleaks, and tests before a commit lands.
pre-commit
A framework for managing git hooks across languages - the plumbing several of our other checks run through.
GoReleaser
Builds, packages, and publishes Go binaries across platforms from a single CI step.
fzf
A fuzzy finder wired into shell history, file search, and git branch switching - the single biggest terminal productivity win.
ripgrep
A recursive grep that's both faster and easier to use - the default text search in every terminal and editor here.
bat
cat with syntax highlighting and git-aware line markers - aliased to cat everywhere here.
lsd
A modern ls replacement with icons, color, and a tree view - aliased to ls day to day.
zoxide
A smarter cd that learns your most-used directories and jumps to them from a fragment of the name.
yq
jq for YAML, and XML, properties, and CSV besides - essential for editing Kubernetes manifests and CI config in scripts.
direnv
Loads and unloads environment variables per directory - keeps client credentials from leaking between shells.
RTK
Compresses noisy CLI output - git, kubectl, terraform - before it reaches an AI coding session, cutting token usage 60-90%.
go-task
A YAML-driven task runner - our Makefile replacement for repo-level build, test, and release commands.
Neovim
Our primary editor - modal editing, Lua config, and a plugin ecosystem built for terminal-first workflows.
Visual Studio Code
The editor we reach for outside the terminal - mainly for its debugger and TypeScript tooling.
cmux
A Ghostty-based terminal purpose-built for running several AI coding agents side by side, with vertical tabs and notifications.
Claude Code
The AI coding agent we run daily, wrapped in pilot-shell's rules and hooks for enforced TDD, verification, and review.
Codex
OpenAI's coding agent - our second opinion and companion reviewer alongside Claude Code.
Gemini CLI
Google's open-source terminal AI agent - a quick cross-check against Claude Code or Codex on a tricky diagnosis.
Ollama
Runs open-weight LLMs locally - for experiments and anything that shouldn't leave the machine.
Ready to ship faster on AWS?
Tell us what you are building. We will map the fastest safe path to production and the platform to keep it there.