Gruntwork publishes open-source infrastructure utilities that target DevOps and cloud engineering teams who manage large-scale AWS estates. Its two core offerings—cloud-nuke and Terragrunt—solve complementary lifecycle problems: the former performs scheduled or on-demand sweeps of designated accounts to delete orphaned resources such as stray VPCs, snapshots, Lambda functions and RDS instances that accumulate during continuous integration testing, keeping cloud bills predictable and security postures tidy; the latter is a thin wrapper around HashiCorp Terraform that injects extra orchestration, remote-state locking and hierarchical configuration inheritance so platform engineers can keep dozens of related stacks DRY without repeating backend blocks or provider assumptions. Together they support use cases ranging from nightly sandbox scrubbing in CI/CD pipelines to enforcing consistent tagging and billing policies across multi-account AWS organizations. Both utilities are distributed as single-binary releases for Windows, macOS and Linux, integrate cleanly with existing automation via exit codes and JSON logs, and are governed by permissive open-source licenses that encourage commercial adoption. Gruntwork’s software is available for free on get.nero.com, where downloads are served through trusted Windows package sources such as winget, always install the latest upstream release, and can be pulled in batch alongside other infrastructure tools.

cloud-nuke

cloud-nuke was created for situations when you might have an account you use for testing and need to clean up leftover resources so you're not charged for them

Details
Terragrunt

Terragrunt is a thin wrapper for Terraform that provides extra tools for keeping your Terraform configurations DRY, working with multiple Terraform modules, and managing remote state.

Details