AWs Well-Architected Tool Alternatives (September 2025)

AWS Control Tower provides a single location to set up a well-architected, multi-account environment to govern your AWS workloads with rules for security, operations, and compliance.

Amazon CloudWatch is a monitoring service built for DevOps engineers, developers, site reliability engineers (SREs), IT managers, and product owners.

AWS Cloud Development Kit (CDK) is an open-source software development framework used to model and provision your cloud application resources with familiar programming languages.

AWS CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage AWS and third-party resources.

AWS Config is a config tool that helps you assess, audit, and evaluate the configurations and relationships of your resources.

AWS Service Catalog helps you create and manage IaC templates approved for use on AWS so anyone can discover approved, self-service cloud resources.

AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation.

AWS Device Farm is an application testing service that allows you to test iOS, Android, and web applications on real smartphones, tablets and desktop web browsers.

Amazon SWF is a cloud process flow management application that gives developers tools to coordinate applications across multiple machines.

Discover the tools that you need to simplify and accelerate your migration and modernization with AWS Migration Hub. Learn more about key benefits and tools.

AWS Cloud Map is a cloud resource discovery service. With Cloud Map, you can define custom names for your application resources, and it maintains the updated location of these dynamically changing resources. This increases your application availability because your web service always discover the most up-to-date locations of its resources.

Azure Advisor is a recommendation service that analyzes your configurations and usage, then helps you follow Azure best practices to optimize your deployments.

AWS Compute Optimizer recommends more efficient AWS compute resources for your workloads to reduce costs and improve performance.

AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organizations.

Driven by the need for greater productivity, lower costs, and more recently being able to scale a remote workforce, organizations around the world are moving their IT workloads to the cloud. Planning a move to the cloud requires upfront pre-migration planning; this is as important as the implementation itself. But it can be daunting to know where to start or what needs to be in place for a successful migration. The Amazon Web Services (AWS) Cloud Adoption Readiness Tool (CART) can help provide insight into your level of readiness and what you can do to improve it.

Amazon CloudFront is a content delivery network (CDN) service that helps you distribute your static and dynamic content quickly and reliably with high speed performance, security, and developer ease-of-use.

Amazon DevOps Guru is a machine learning service designed to detect abnormal operating patterns so you can identify issues before they impact your customers.

AWS Systems Manager is a secure end-to-end management solution for resources on AWS and in multicloud and hybrid environments.

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS

AWS App Mesh is an application networking service mesh that lets you more easily monitor and control communications across services.

AWS Budgets is the simplest way to monitor your AWS spend and be alerted when you exceed or are forecasted to exceed your desired spending limit.

The AWS Command Line Interface (CLI) provides a unified tool to manage your AWS services directly from the command line.

Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure.

AWS Direct Connect is a cloud service that links your network directly to AWS to deliver consistent, low-latency performance.

Amazon QuickSight is a cloud-native, serverless, business intelligence (BI) with native machine learning (ML) integrations and usage-based pricing, allowing insights for all users.

AWS Step Functions lets you orchestrate multiple AWS services into serverless workflows so that you can build and update applications quickly.

AWS Cloud9 is a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser.

AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS cloud costs and usage over time.

AWS Cloud WAN makes it easy to build, manage, and monitor a unified global network—connecting your cloud and on-premises resources.

Amazon Web Services offers reliable, scalable, and inexpensive cloud computing services. Free to join, pay only for what you use.

AWS IoT Device Defender makes it easier to maintain, manage, and configure security policies for all your IoT devices. Get the tools to identify and respond to security issues.

Build your AWS Cloud Skills with AWS Training and Certification. Learn AWS online with free digital training, in-person classroom training, virtual classroom training, and private on-site and virtual training. Learn more!

Introduces AWS OpsWorks.

Use the AWS Schema Conversion Tool to make heterogeneous database migrations predictable. Learn more about the supported conversions and how to download today.

AWS Artifact provides on-demand access to select security reports, compliance reports, and agreements with AWS.

AWS CodeCommit is a managed source control repository that makes it easier for teams to securely collaborate on code with contributions encrypted in transit and at rest.

Amazon GuardDuty is a threat detection service that monitors for malicious activity and anomalous behavior to protect AWS accounts, workloads, and data.

AWS Cost & Usage Reports contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations.

Amazon Redshift is a fast, fully managed cloud data warehouse that makes it simple and cost-effective to analyze all your data.

AWS Deep Learning AMIs provides ML practitioners with curated, secure frameworks, dependencies, and tools to accelerate and scale deep learning in the cloud.

AWS Batch allows developers, scientists, and engineers to efficiently process hundreds of thousands of batch and machine learning computing jobs on AWS.

AWS Database Migration Service (DMS) is a highly resilient, secure cloud service that provides database discovery, schema conversion, data migration, and ongoing replication to and from a wide range of databases and analytics systems.

AWS Global Accelerator is a networking service that simplifies traffic management and improves performance by up to 60%.

Amazon Simple Email Service (SES) is a cost-effective, flexible, and scalable email service provider that allows developers to send email from within any application.

Amazon EC2 Auto Scaling helps you maintain application availability and define how to scale Amazon EC2 capacity to meet the demands of your application.

AWS License Manager makes it easier for you to manage your software licenses from vendors, such as Microsoft, SAP, Oracle, and IBM, across AWS and on-premises environments.

AWS IoT Device Management allows you to securely onboard, organize, monitor, and remotely manage IoT devices at scale.

Build and test code with automatic scaling, and pay only for the build minutes you use.

AWS CodeDeploy makes it easier for you to rapidly release new features, avoid downtime during application deployment, and handle the complexity of updating your applications.

Connect Active Directory to AWS resources or set up a new directory on AWS for your directory-aware workloads.

AWS IAM Identity Center is the AWS solution for connecting your workforce users to AWS managed applications such as Amazon Q Developer and Amazon QuickSight, and other AWS resources. You can connect your existing identity provider and synchronize users and groups from your directory, or create and manage your users directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:

Amazon Route 53 is a highly available and scalable cloud domain name system (DNS) service. Enables to customize DNS routing policies to reduce latency.

AWS App Runner helps you deploy and scale from your source code or container image to a secure web application on AWS.

Amazon Relational Database Service (RDS) is a fully managed, open-source cloud database service that allows you to easily operate and scale your relational database of choice, including Amazon Aurora, PostgreSQL, SQL Server, and MySQL.

Amazon Virtual Private Cloud (VPC) is a service that lets you launch AWS resources in a logically isolated virtual network that you define.

A fully-managed, cloud-native directory from Amazon Web Services (AWS)

AWS Local Zones are a type of AWS infrastructure deployment that make it possible to run low latency applications closer to end users or on-premises installations in a specific geography.

AWS Glue is a serverless data integration service that makes it easy to discover, prepare, integrate, and modernize the extract, transform, and load (ETL) process.

AWS IoT Greengrass is an open-source edge runtime and cloud service that helps you build, deploy, and manage intelligent device software.

Run AWS infrastructure and services on premises for a truly consistent hybrid experience.

AWS Lambda is a serverless compute service for running code without having to provision or manage servers. You pay only for the compute time you consume.

Amazon Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data.

AWS Secrets Manager allows you to rotate, manage, and retrieve database credentials, API keys, and other secrets through their lifecycle.

AWS Clean Rooms helps companies and their partners more securely analyze and collaborate on their collective datasets without sharing or copying one another’s underlying data.

Amazon API Gateway helps you build HTTP, REST, and WebSocket APIs with a fully managed service that makes it easy to create, publish, maintain, manage, monitor, and secure APIs.

AWS Organizations enables centralized cloud account management as you grow and scale your AWS resources.

AWS Ground Station is a fully managed service that lets you control satellite communications, downlink and process satellite data, and scale your satellite operations quickly, easily and cost-effectively without having to worry about building or managing your own ground station infrastructure

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that simplifies setup and operation of open-source message brokers on AWS.

AWS CodePipeline automates the build, test, and deploy phases of your release process each time a code change occurs.

Amazon GameSparks is a fully managed game backend service that manages and scales your cloud infrastructure.

Amazon EC2 Auto Scaling is a feature that ensures the right number of EC2 instances are available for an application's load, maintaining availability by automatically adding or removing EC2 instances. To use Auto Scaling, in the EC2 Console, create a launch template, then create an Auto Scaling Group (ASG).

Amazon Elastic Container Service (Amazon ECS) provides a fully managed container service solution that’s easy to use, scalable, secure, and reliable.

Vantage is a self-service cloud cost platform that gives developers the tools they need to analyze, report on and optimize AWS, Azure, and GCP costs.

Amazon AppFlow is an integration service that enables you to securely transfer data between SaaS applications and AWS services without code.

AWS CloudHSM provides total access management control and protection for your encryption keys with secure and compliant hardware security modules (HSMs).

Discover, deploy, and publish serverless applications for common use cases including Alexa Skills, chatbots, IoT, web and mobile back-ends, data processing, and more.

Use AWS Certificate Manager to provision, manage, and deploy public and private SSL/TLS certificates with AWS services and internal connected resources.

Introducing AWS Transfer for SFTP, a fully managed SFTP service for Amazon S3. AWS Transfer for SFTP enables you to easily move your file transfer workloads that use the Secure Shell File Transfer Protocol (SFTP) to AWS without needing to modify your applications or manage any SFTP servers.

Use Amazon VPC Lattice to securely connect your applications and services by defining policies for network access, traffic management, and monitoring.

Custom software solutions: web applications, backend systems & enterprise applications. Scala, Java, Big Data, Machine Learning, Blockchain.

Amazon SQS fully managed message queuing makes it easy to decouple and scale microservices, distributed systems, and serverless applications.

DoiT provides technology that simplifies and automates cloud use and multicloud expertise in analytics, optimization, and governance of cloud architecture.

AWS IoT Analytics makes it simple to run and operationalize analytics on massive volumes of IoT data, without the cost and complexity of building an IoT analytics platform.

AWS IoT SiteWise makes it easy to collect, organize, and analyze data from industrial equipment at scale.

AWS Lake Formation makes it easier to centrally govern, secure, and globally share data for analytics and machine learning.

Implement customer identity and access management (CIAM) that scales to millions of users with Amazon Cognito, fully managed authentication service.

AWS Snowball is a petabyte-scale data transport service that uses secure devices to transfer large amounts of data into and out of the AWS Cloud. Snowball addresses challenges like high network costs, long transfer times, and security concerns to migrate data as efficiently as possible.

UML design and business analysis tool for modeling, documenting, reverse engineering, building and maintaining object-oriented software systems, fast and intuitive. Great features, great price.

UML design and business analysis tool for modeling, documenting, reverse engineering, building and maintaining object-oriented software systems, fast and intuitive. Great features, great price.

Hundreds of scaleups use Aptible instead of building their own internal developer platform. The Aptible platform helps engineering teams to control their AWS resources, guarantee uptime, and achieve enterprise best practices for their infrastructure.

Build, train, and deploy machine learning (ML) models for any use case with fully managed infrastructure, tools, and workflows.

FreeRTOS is an open source, real-time operating system for microcontrollers and microprocessors that makes small, low-power devices easier to program, deploy, and secure.

The easiest way to build and scale generative AI applications with foundation models.

NOTE: In mid-2019 we re-launched and intensified our efforts, deprecating and archiving the old code base of the AWS Service Operator and changing to a community-driven approach. We’re currently in the design phase and invite you to comment on the design issues and become a contributor to the new project, see details at the new GitHub […]

IBM App Connect is application integration software that connects applications and data sources. It features a no-code interface with hundreds of prebuilt connectors, plus the ability to create custom connectors. It can be deployed on-premises, on any cloud, or as a fully managed service on AWS.

Secure First, Then Connect | Cloudbric is the 1st Korean security sevice provider with Industry-leading experts: WAAP- WAF+, WMS,, Rule Set for AWS WAF, PAS, RAS, VPN services.

Visualize your AWS environment as isometric architecture diagrams. Snap together blocks for EC2s, ELBs, RDS and more. Connect your live AWS environment.

Prophaze is a Web and API Security Platform for Layer 2-7 DDOS Protection for AWS, Azure, Google Cloud, Kubernetes . Cloud WAF

CloudEndure, an AWS Company, provides disaster recovery and cloud migration to AWS from any physical, virtual, or cloud-based infrastructure.