Telophase
Why Telophase?
Automation and Compliance are key concerns when adopting multi-account AWS. Telophase orchestrates the management of AWS Organizations alongside your infrastructure-as-code (IaC) provider, like Terraform or CDK. Using a single tool for these allows:
- Workflow Automation: Automates account creation and decommissioning, integrating with existing automation workflows, like CI or ServiceNow.
- IaC <> Account Binding: Enables binding accounts to specific IaC stacks for automatic provisioning of baseline resources.
- Easier Compliance Deployment: Enables binding Service Control Policies (SCPs) to accounts as part of your Account provisioning workflow to make sure every Account is compliant. We make it easy to test SCPs before they are deployed.
Currently, Telophase is a CLI tool only. In the future, we plan to offer a web UI.
Install
Go is the only supported installation method. If you'd like another method, please let us know by opening an issue!
go install github.com/santiago-labs/telophasecli@latest
Quick links
- Intro
- Features
- CLI
- Organization.yml Reference
Future Development
- Support for multi-cloud organizations with a unified account factory.
- Drift detection/prevention
- Guardrails around account resources
- Guardrails around new Accounts, similar to Control Tower rules.
Comparisons
Telophase vs Control Tower
Manage Accounts via code not a UI. Telophase leaves the controls up to you and your IaC.
Telophase vs CDK with multiple environments
Telophase wraps your usage of CDK so that you can apply the cdk to multiple
accounts in parallel. Telophase lets you focus on your actual infrastructure and
not worrying about setting up the right IAM roles for multi account management.