netflix/consoleme

A Central Control Plane for AWS Permissions and Access

ConsoleMe

Check out our quick start guide , documentation , feature videos , ReInvent Talk, and Blog Post .

Overview

ConsoleMe is a web service that makes AWS IAM permissions and credential management easier for end-users and cloud administrators.

ConsoleMe provides numerous ways to log in to the AWS Console.

An IAM Self-Service Wizard lets users request IAM permissions in plain English. Cross-account resource policies will be automatically generated, and can be applied with a single click for certain resource types.

Weep (ConsoleMe’s CLI) supports 5 different ways of serving AWS credentials locally.

Cloud administrators can create/clone IAM roles and natively manage IAM roles, users, inline/managed policies, S3 Buckets, SQS queues, and SNS topics across hundreds of accounts in a single interface.

Users can access most of your cloud resources in the AWS Console with a single click. Cloud administrators can configure ConsoleMe to authenticate users through ALB Authentication, OIDC/OAuth2, or SAML.

… And more. Check out our docs to get started.

Project resources

• Discord
• Docs
• Weep (our CLI)
• Source Code
• Issue tracker
• Blog Post
• ReInvent Talk
• Anonymous Feedback Form

Third Party Mentions

• Achieving least-privilege at FollowAnalytics with Repokid, Aardvark and ConsoleMe
• Netflix’s ConsoleMe local installation on Linux machine
• Improving database security at FollowAnalytics with AWS IAM database authentication and ConsoleMe
• Awesome IAM Policy Tools
• Netflix on AWS Case Study
• Netflix Open Sources ConsoleMe to Manage Permissions and Access on AWS

Companies that use ConsoleMe (alphabetically sorted)

• AB180
• Calm
• FollowAnalytics
• myKaarma
• National Center for Biotechnology Information
• Feel free to submit a PR or let us know in an Issue if you'd like to add your company to this list.