☁️ archetype: infra

Ship infra-as-code without the public-S3 incident.

Building with Terraform, Pulumi, Helm, or AWS CDK? GreatCTO auto-detects the infra archetype and ships SOC2 controls, drift detection, IAM least-privilege, and migration-rollback gates from day one.

$ npx great-cto init Back to home ↗

What you avoid

The 5 infra bugs that make news.

Without GreatCTO

☐S3 bucket public — 200M records on HaveIBeenPwned
☐IAM AdministratorAccess on CI role · root-equivalent
☐No drift detection — manual changes break terraform plan
☐Migration without rollback — schema lock for 6 hours
☐Helm upgrade fails mid-rollout — half the fleet broken
☐Outage · breach · TechCrunch headline.

With GreatCTO

✓tfsec / checkov gate · public-S3 blocked at PR
✓IAM least-privilege via Access Analyzer + iamlive
✓Drift detection in CI · alerts on manual changes
✓db-migration-reviewer signs off rollback path
✓Helm: canary + automatic rollback on probe failure
✓SOC2 Type 2-clean · zero outages from infra.

Auto-applied gates

Detected: `main.tf` / `Pulumi.yaml` / `Chart.yaml` →
infra archetype.

Compliance auto-suggested: soc2 · cis-benchmarks. Specialist agents activated:

01 · security-officer

SOC2 + CIS

CIS AWS / GCP / Azure benchmarks · SOC2 Type 2 controls · tfsec · checkov · IAM least-privilege · KMS rotation · CloudTrail enforced.

02 · db-migration-reviewer

Migration safety

Lock duration · rollback strategy · zero-downtime patterns · PII column handling · index creation safety. Blocks deploy if no rollback path exists.

03 · devops

Canary + rollback

Canary 5% → 20% → 100% · health probes · automatic rollback · GitOps reconciliation · drift alerts.

04 · performance-engineer

Capacity planning

Right-sizing · auto-scaling thresholds · cost-per-request · ASG / HPA tuning · spot vs on-demand mix.

Real-world examples

Companies operating as infra.

3 startups in this space. Click for full pack mapping.

Kong

API gateway + service connectivity

growthUS

Vercel

Frontend cloud + AI SDK

series-eUS

Tyk

Open-source API gateway

series-bGB

Listed companies operate in this space. Inclusion is based on publicly available product descriptions and does not imply endorsement of or by GreatCTO.