Vancer Baseline One: Hardened AWS

What it does

Most AWS setups waste months on manual hardening and compliance rules. Vancer Baseline One fixes this instantly. It’s a hardened, enterprise-grade AWS infrastructure repository (Terraform & OpenTofu compatible) built for instant deployment. You get CIS/NIST compliance mapping, KMS encryption, default-deny networking, and least-privilege IAM controls pre-configured out of the box. Buy, clone, and deploy enterprise AWS security in minutes, not months.

Production-ready, hardened Terraform infrastructure for tech startups. Scaled in 5 minutes, not 5 weeks. Every time you run terraform apply , these modules stream live from the Vancer Registry Gateway — pre-audited, always current, zero manual patching. Customer-managed AWS KMS keys with automatic annual rotation, key policy least-privilege, and CloudTrail API logging for every cryptographic operation. Opinionated S3 buckets with mandatory SSE-KMS, Object Lock for immutability, bucket-level public access block, access logging, and versioning enabled by default. Multi-AZ VPC with private/isolated subnets, NAT Gateway, VPC Flow Logs to S3, strict security groups denying all default traffic,…from vancerbaseline.netlify.app

• 
  Komiser – Detect potential AWS cost savings2019 · github.com · ▲166

  Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide! - mlabouardy/komiser

• 
  Digger.dev – A PaaS that generates Terraform, in your AWS account2021 · diggerdev.com · ▲142

  Digger is enterprise-ready, self-hostable infrastructure tooling. Terraform CI/CD, drift detection, PR automation, and state management. Open source DevOps for cloud-native teams.

• 
  Aptible – Deployment platform to automate HIPAA compliance2014 · aptible.com · ▲109

  Deploy apps, databases, and AI on isolated AWS infrastructure with security and compliance enforced by default. HITRUST R2 certified. BAA included.

• 
  Hardened OpenClaw on AWS with TerraformMar 2026 · github.com · ▲10

  I work on AWS infrastructure (ex-Percona, Box, Dropbox, Pinterest). When OpenClaw blew up, I wanted to run it properly on AWS and was surprised by the default deployment story. The Lightsail blueprint shipped with 31 unpatched CVEs. The standard install guide uses three separate curl-pipe-sh patterns as root. Bitsight found 30,000+ exposed instances in two weeks. OpenClaw's own maintainer said "if you can't understand how to run a command line, this is far too dangerous." So I built a Terraform module that replaces the defaults with what I'd consider production-grade: * Cognito + ALB instead…

• 
  ZSvirt – A lightweight, scalable open source virtualization platformSep 2026 · github.com · ▲72

  Core IaaS engine and cloud infrastructure foundation of ZSvirt - ZSvirt/zsvirt

• 
  Precloud – Dynamic tests for infrastructure-as-code2023 · github.com · ▲48

  Infrastructure as code (IaC) often fails during deployment due to dynamic constraints such as name collisions, quota limits and other resource-specific constraints that devs run halfway into an IaC deployment. We witnessed this first hand at TinyStacks and built precloud - an open-source framework to define and run dynamic tests before IaC deployments. The precloud framework currently supports Terraform and AWS CDK with several default checks (unique names, service quota checks and more) and ability to define your own!

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Run full iOS 16.5 firmware on Android Devices▲403

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 16h ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• IR
  I replaced a $120k bowling center system with $1,600 in ESP32s▲2,935

  I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…

  Life & fun · Jul 2026

• 
  Elevators▲1,680

  How elevators push your buttons

  Life & fun · Jul 2026 · john.fun

• 
  18 Words▲1,160

  Play 18 Words, the free daily word puzzle. The official home is 18words.com. Tap Play now to open today

  Life & fun · Jul 2026 · 18words.com

• BA
  Bento - An entire PowerPoint in one HTML file (edit+view+data+collab)▲1,033

  Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…

  Dev tools · Jul 2026 · bento.page

• 
  Getting GLM 5.2 running on my slow computer▲937

  A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…

  AI · Jul 2026 · github.com

• 
  OpenSEO▲928

  Hello! For the last 2 months, I've been building OpenSEO. It's a user friendly UI wrapping the DataForSEO API which has high quality SEO data for keywords, backlinks, AI SEO and competitor research. Instead of paying $100+ per month, you buy DataForSEO credits and pay only for usage. The coolest thing about the project so far has been hearing about what people are building on top of it. People are using coding agents to quickly integrate with Google Search Console, Google Ads and building their own AI SEO and reporting features. Many were already building their own custom solutions around…

  Dev tools · Jul 2026 · openseo.so