Infraready

by infraready099

141 downloads
Not rated
GitHub

Description

# InfraReady.io **Your AI-built app, deployed to your own AWS in 20 minutes. No DevOps. No Kubernetes.** InfraReady is a one-click infrastructure deployment platform for solo founders, vibe coders, and early-stage startups. Connect your GitHub repo and AWS account — InfraReady…

About

# InfraReady.io **Your AI-built app, deployed to your own AWS in 20 minutes. No DevOps. No Kubernetes.** InfraReady is a one-click infrastructure deployment platform for solo founders, vibe coders, and early-stage startups. Connect your GitHub repo and AWS account — InfraReady deploys your entire production…

Details

Author
infraready099
Downloads
141
Categories
Developer Tools

- One-click deployment to your own AWS account
- 11 SOC2/HIPAA-ready modules (VPC, RDS, ECS, Storage, Security, and more)
- Cross-account access via STS AssumeRole (revocable in 10 seconds)
- OpenTofu native — standard IaC with no vendor lock-in
- Enterprise Landing Zone for multi-account AWS Organizations
- Pre-deployment Checkov compliance scanning (blocks CRITICAL/HIGH findings)

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Infraready
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Connect your GitHub repo URL in the setup wizard, connect your AWS account via a one-click CloudFormation template (60 seconds), choose from 11 available modules (VPC, RDS, ECS, Storage, Security, etc.), and click deploy. Developer quick start requires cloning the repo, deploying the runner Lambda via OpenTofu, building and pushing the Docker image, and running the web app with Supabase and SQS credentials.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "infraready": {
            "infrareadu-code-first": {
                "command": "docker",
                "args": [
                    "build",
                    "-f",
                    "packages/runner/Dockerfile",
                    "-t",
                    "infraready-runner",
                    "."
                ]
            }
        }
    }
}

McpServers

{
    "infrareadu-code-first": {
        "command": "docker",
        "args": [
            "build",
            "-f",
            "packages/runner/Dockerfile",
            "-t",
            "infraready-runner",
            "."
        ]
    }
}

InfraReady.io

Your AI-built app, deployed to your own AWS in 20 minutes. No DevOps. No Kubernetes.

InfraReady is a one-click infrastructure deployment platform for solo founders, vibe coders,
and early-stage startups. Connect your GitHub repo and AWS account — InfraReady deploys
your entire production infrastructure automatically using OpenTofu.

You own 100% of your infrastructure. We never touch your data.

---

The Problem

Every solo founder who builds with AI (Cursor, Claude, Bolt) hits the same wall:

> "My app works on localhost. How do I get it to production on AWS?"

- AWS has 200+ services. Which ones do you actually need?
- Terraform/OpenTofu modules exist — but configuring them takes weeks
- DevOps engineers cost $150K+/year — you don't have one
- Railway/Render are easy, but you lose control and pay 10x more at scale

The Solution

InfraReady gives you battle-tested, SOC2-ready AWS infrastructure in 3 steps:

1. Connect your GitHub repo — paste your repo URL
2. Connect your AWS account — one CloudFormation click (60 seconds)
3. Choose your modules — VPC, Database, App Server, Storage, Security — Deploy

Your infra is live in your own AWS account. Your data never touches our servers.
InfraReady's role can be revoked in 10 seconds.

---

Architecture

┌─────────────────────────────────────────────────────────────────────┐
│  Your Browser                                                       │
│  infraready.io → Setup Wizard → Choose modules → Deploy button      │
└──────────────────────────────┬──────────────────────────────────────┘
                               │ HTTPS
                               ▼
┌─────────────────────────────────────────────────────────────────────┐
│  InfraReady (our AWS account)                                       │
│                                                                     │
│  Next.js App (Vercel)  →  API Routes  →  SQS FIFO Queue            │
│                                               │                     │
│                                               ▼                     │
│                                    Lambda Runner (Container)        │
│                                    ├── OpenTofu binary bundled      │
│                                    ├── All 11 modules bundled       │
│                                    └── Streams logs → Supabase      │
└──────────────────────────────┬──────────────────────────────────────┘
                               │ STS AssumeRole (cross-account)
                               │ ExternalId: your-unique-secret
                               ▼
┌─────────────────────────────────────────────────────────────────────┐
│  YOUR AWS Account                                                   │
│                                                                     │
│  InfraReadyRole (created by CloudFormation, revocable any time)     │
│       │                                                             │
│       ├── VPC (10.0.0.0/16, 2 AZs, NAT Gateway, Flow Logs)        │
│       ├── RDS PostgreSQL (encrypted, Secrets Manager, backups)      │
│       ├── ECS Fargate (ALB, auto-scaling, ECR, CloudWatch)         │
│       ├── S3 + CloudFront (HTTPS, HSTS, lifecycle rules)            │
│       ├── Security Baseline (GuardDuty, SecurityHub, CloudTrail)    │
│       └── Terraform state → your S3 bucket (we can't read it)      │
└─────────────────────────────────────────────────────────────────────┘

---

Module Catalog

Starter / Pro Tier (Single Account)

| Module | What it creates | SOC2 | HIPAA | Est. cost/mo |
|--------|----------------|------|-------|-------------|
| vpc | VPC, subnets, NAT, Flow Logs | ✅ | ✅ | ~$32 |
| rds | PostgreSQL 15, encrypted, Secrets Mgr | ✅ | ✅ | ~$13+ |
| ecs | ECS Fargate, ALB, ECR, auto-scaling | ✅ | ✅ | ~$20+ |
| storage | S3 + CloudFront, HTTPS, lifecycle | ✅ | ✅ | ~$1+ |
| security | GuardDuty, SecurityHub, CloudTrail, Config | ✅ | ✅ | ~$35 |
| waf | WAF Web ACL, rate limiting, managed rules | ✅ | ✅ | ~$5 |
| kms | Customer-managed KMS key, auto-rotation | ✅ | ✅ | ~$1 |
| backup | AWS Backup vault, daily snapshots | ✅ | ✅ | ~$5 |
| vpc-endpoints | Private S3/ECR/SSM access (no NAT) | ✅ | ✅ | ~$7 |
| inspector-ssm | Vulnerability scanning, patch mgmt | ✅ | ✅ | ~$2 |
| macie | S3 PII/PHI data discovery | ✅ | ✅ | ~$1 |

Enterprise Tier (Multi-Account Landing Zone)

For Series A+ startups needing AWS Organizations, centralized security, and full compliance:

| Component | What it creates |
|-----------|----------------|
| organizations | AWS Organizations, OUs, account factory |
| scp | Service Control Policies (deny root, restrict regions) |
| security | Centralized GuardDuty, SecurityHub, Config aggregation |
| logging | Org CloudTrail, Log Archive account (7-year retention) |
| networking | Transit Gateway, shared VPC, centralized egress |
| identity | IAM Identity Center (SSO), permission sets |

See packages/landing-zone/ for details.

---

Security Model

How cross-account access works

1. Customer runs a CloudFormation template (one click, 60 seconds)
2. CloudFormation creates InfraReadyRole in their account
3. The role's trust policy only allows InfraReady's AWS account ID + a unique ExternalId
4. InfraReady calls sts:AssumeRole with the ExternalId to deploy
5. All actions are logged in CloudTrail in the customer's account
6. Revoke access any time: delete InfraReadyRole → InfraReady is immediately locked out

What InfraReady can and cannot do

| Can do | Cannot do |
|--------|-----------|
| Create/modify resources defined in modules | Access customer code or data |
| Read CloudFormation stack outputs | Read S3 bucket contents |
| Write Terraform state to customer's S3 | Exfiltrate credentials |
| Tag all resources with ManagedBy=infraready | Act outside the defined IAM policy |

Terraform state

State lives in your S3 bucket (infraready-state-{project}-{region}).
InfraReady creates this bucket in your account but cannot read the state files —
state access requires the same cross-account role, which you control.

---

Pricing

| Tier | Price | Environments | Modules | Support |
|------|-------|-------------|---------|---------|
| Starter | $29/mo | 1 | All 11 | Email |
| Pro | $99/mo | Unlimited | All 11 + Landing Zone | Priority |
| Enterprise | Custom | Unlimited | Custom + white-glove | Dedicated |

These prices are for InfraReady's service fee. AWS charges are separate and billed directly to your account.

---

Quick Start (for developers)

1. Deploy InfraReady's own infrastructure

```bash

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.