Introducing superwerker
Tags: aws, cloud, devops
Published: 2022-02-22 11:54:39

Written by Joern Barthel
_Originally published on February 22nd 2021_

Understanding what goes into a sensible AWS foundational setup is complicated, expensive and does not add value to our customers workloads. In this article we introduce the beginning of an Open Source solution to this problem.

## Well-Architected AWS foundations in one click (and a bit of waiting time)

Amazon Web Services (AWS) presents users with an intimidating landscape of hundreds of services. But almost none of these service can be understood in isolation and many services yield benefits to the platform as a whole in ways that do not translate their feature descriptions and official FAQs very well. The resulting picture is complicated enough for our customers workloads: getting software architecture right without getting lost in [accidental complexity](https://en.wikipedia.org/wiki/No_Silver_Bullet "wikipedia - No Silver Bullet") is [hard enough as it is](https://pages.awscloud.com/EMEA-partner-DL-SCMP-Kreuzwerker-Solution-Brief-2020-learn.html "AWS Cloud kreuzwerker solution brief"). But it is our firm belief that it shouldn't need experienced consultants to create a sensible and "foundational" AWS setup that enables our customers to start building their workloads in a Well-Architected manner.

![Periodic-Table-of-Amazon-Web-Services](//images.ctfassets.net/hqu2g0tau160/RZogICNFA3sk6WCs3TfaJ/71a5e75b9f40015b726e8b0c3267766a/Periodic-Table-of-Amazon-Web-Services.jpg)
*[1] AWS Periodic-Table*

With this thought in mind, we teamed up with our friends from superluminar, an AWS Advanced Consulting Partner in Hamburg, to build the first [open-source landing zone](https://github.com/superwerker/superwerker "github superwerker") setup that is also an official [AWS Quickstart](https://aws.amazon.com/quickstart/architecture/superwerker/ "AWS Quickstart"): [superwerker](http://superwerker.cloud/ "superwerker webpage")! Out of the box, it currently supports the following features (some of them as optional, out-out features) with minimal upfront costs:

- Automated AWS Control Tower and [AWS Single Sign-On](https://aws.amazon.com/single-sign-on "AWS Single Sign On") (SSO) setup to enable the current best practices for multi-account setups, such as security and compliance guardrails
- [AWS Security Hub](https://aws.amazon.com/security-hub "AWS Security Hub") for continuous monitoring of AWS security standards in all accounts, and the aggregation of findings in the Control Tower "Audit" account
- [AWS GuardDuty](https://aws.amazon.com/guardduty "AWS Guard Duty") continuous threat detection in all accounts, and the aggregation of findings in the Control Tower "Audit" account
- [AWS Backup](https://aws.amazon.com/backup "AWS Backup") for all database types and opt-out for dev/test accounts
- Automated [billing and budget](https://aws.amazon.com/aws-cost-management/aws-budgets "AWS Budget") setup with alerts for increased usage
- [Service control policy](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html "Policies") based on integrity protection and common policies
- [CloudWatch](https://aws.amazon.com/cloudwatch "AWS Cloudwatch") Dashboard as a "living" documentation for the Quickstart
- Unified workflow notifications using the [AWS Systems Manager](https://aws.amazon.com/systems-manager/ "AWS System Manager") (SSM) [OpsCenter](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter.html "AWS OpsCenter")
- [Amazon Simple Email Service](https://aws.amazon.com/ses "AWS SES") (SES) based Secure Root Email to consolidate the handling of all root emails for AWS member accounts - this will also enable future workflow such as the automated recovery of newly created member accounts

![superwerker gif groß](//images.ctfassets.net/hqu2g0tau160/76CaijUHafQzr6NPo6ijGP/82a92f03a4039a8ab03662c4869f73b5/superwerker.gif)

You can easily try out this [Quickstart](https://aws.amazon.com/quickstart/architecture/superwerker/ "AWS Quickstart") today by following the [documentation](https://aws-quickstart.github.io/quickstart-superwerker/ "AWS Quickstart Documentation") on the homepage or by following the [instructions](https://github.com/superwerker/superwerker#quick-install "github superwerker install") on the homepage of the open-source solution. We will add more features in the next few months, more documentation and will focus on evolving superwerker into a true, off-the-shelf solution for building future proofed AWS platforms. 

## Conclusion

Interested in learning more about superwerker? Are you unsure if your organization will profit from it and need general guidance? You can join the conversation by joining our [mailing list](https://groups.google.com/forum/#!forum/superwerker/join "Mailing List"), the #superwerker Slack channel on the OG-AWS Slack (via it's [invite link](http://slackhatesthe.cloud/ "slack invite")) and reaching out to aws-leads@kreuzwerker.de.

Our team of consultants is here to help you accelerate your AWS journey, and to keep your focus on your workloads instead of doing undifferentiated heavy lifting work on your Cloud platform. We look forward to working with you!

---
[1] AWS Periodic-Table: [AWS Geek](https://www.awsgeek.com/Periodic-Table-of-Amazon-Web-Services/ "AWS Geek source")