A free, browser-based multi-cloud reference and compliance tool built for cloud engineers, students, and infrastructure teams. No account. No install. No data sent anywhere.
Two professional tools in a single HTML file. Open it in any browser and start working immediately.
The toolkit covers the full breadth of day-to-day cloud engineering work across Azure, AWS, and GCP. Every tool runs entirely in the browser with no external calls.
Engineers switching between clouds or working in multi-cloud environments spend significant time translating concepts and services between providers. These tools eliminate that friction.
| Tool | What it does |
|---|---|
| Cloud Service Mapper | Side-by-side mapping of equivalent services across Azure, AWS, and GCP. Filter by category: compute, storage, networking, databases, serverless, containers, and more. |
| IAM Concepts | Compares identity and access concepts across all three clouds. Users, roles, policies, service accounts, managed identities — mapped and explained side by side. |
| CLI Cheat Sheet | The most-used CLI commands for az, aws, and gcloud in one place. Covers auth, resource listing, deployment, and log querying. |
| Cloud Resource Naming | Generates compliant resource names following Microsoft CAF conventions for Azure, AWS tagging standards, and GCP resource naming rules. Covers 30+ resource types. |
| VM / Instance Type Advisor | Filters and compares VM sizes and instance types across Azure, AWS, and GCP by vCPU, RAM, and workload type. Helps you find the right size without hunting through provider documentation. |
Subnet planning, CIDR arithmetic, and firewall rules are a daily part of cloud infrastructure work. These tools handle the calculations so you can focus on the design.
| Tool | What it does |
|---|---|
| CIDR Calculator | Enter any CIDR block and get the network address, broadcast address, usable IP range, subnet mask, wildcard mask, and total host count. |
| Subnet Splitter | Split any CIDR block into equal subnets. Specify how many subnets you need and get the full breakdown instantly. |
| CIDR Overlap Detector | Paste multiple CIDR blocks and detect overlaps. Essential when merging VNets, setting up VPN peering, or planning hub-and-spoke topologies. |
| IP in Subnet Check | Verify whether a specific IP address falls within a given subnet. Useful when debugging routing rules and NSG policies. |
| VPC / VNet Subnet Planner | Plan a full VNet or VPC address space. Allocate subnets for different tiers (web, app, data, management, gateway) and get the full subnet map. |
| Firewall Rule Builder | Build NSG rules (Azure), Security Group rules (AWS), or Firewall rules (GCP) with a guided form. Outputs ready-to-use Bicep, Terraform, or CLI syntax. |
IaC scaffolding takes time to get right. These tools generate correct, opinionated starting points for the most common IaC patterns across all three clouds.
| Tool | What it does |
|---|---|
| Terraform Module Scaffold | Generates a complete Terraform module structure: main.tf, variables.tf, outputs.tf, and versions.tf. Choose Azure, AWS, or GCP and get provider-specific resource stubs. |
| Terraform Remote Backend | Generates the backend configuration block for Azure Blob Storage, AWS S3 with DynamoDB locking, or GCP Cloud Storage. Includes the init commands. |
| CI/CD Pipeline Generator | Generates GitHub Actions workflows for Terraform or Bicep deployments using OIDC authentication. Covers plan-on-PR and apply-on-merge patterns. |
| Bicep Module Scaffold | Generates a Bicep module with typed parameters, outputs, and metadata decorators following CAF conventions. |
| Bicep Parameters File | Generates a .bicepparam file to match an existing Bicep module. Supports Key Vault secret references for secure parameter values. |
Working with AKS and Kubernetes manifests requires getting the structure right before you apply. These tools scaffold and reference the most common patterns.
| Tool | What it does |
|---|---|
| K8s Manifest Generator | Generates Deployment, Service, ConfigMap, and HPA manifests. Set replicas, resource requests and limits, liveness probes, and environment variables through a form. |
| AKS Node Pool Configurator | Configure AKS system and user node pools with the right VM size, autoscaler settings, taints, and labels for your workload. Outputs az CLI or Terraform. |
| Helm Chart Scaffold | Generates the full Helm chart directory structure: Chart.yaml, values.yaml, deployment.yaml, service.yaml, and helpers. |
| kubectl Reference | A searchable quick reference for the most-used kubectl commands. Covers pods, deployments, services, namespaces, logs, exec, port-forward, and rollouts. |
Reusable cloud scripting patterns for Bash, PowerShell, and Python - covering the operations that come up repeatedly in cloud engineering work.
| Tool | What it does |
|---|---|
| Bash Snippets | Cloud-focused Bash snippets: resource enumeration, log querying, health checks, deployment automation, and cost queries across Azure, AWS, and GCP. |
| PowerShell Snippets | Azure PowerShell snippets for resource management, policy assignment, key vault operations, and Azure AD tasks. |
| Python Snippets | Python snippets using boto3, azure-sdk, and google-cloud libraries. Covers storage, compute, secrets management, and monitoring APIs. |
| CLI Setup Guide | Step-by-step authentication and configuration guide for az, aws, and gcloud. Covers service principal setup, OIDC, and multi-account profiles. |
Cost awareness is part of responsible cloud engineering. These tools help you model savings, set governance controls, and build reporting structures.
| Tool | What it does |
|---|---|
| Savings Plan Calculator | Compare on-demand vs reserved instance vs savings plan pricing across Azure, AWS, and GCP. Enter your workload profile and get the estimated annual saving. |
| Budget Alert Advisor | Generates the configuration for Azure Budget Alerts, AWS Budgets, or GCP Budget Notifications. Outputs Bicep, CloudFormation, or Terraform. |
| Chargeback Report Builder | Build a cost allocation structure using resource tags. Generates the query logic for Azure Cost Management, AWS Cost Explorer, or GCP Billing export. |
Switch to Compliance Checker mode using the toggle at the top of the page.
Paste or upload a Bicep, Terraform HCL, or ARM JSON template. The checker runs 38 rules mapped to the CIS Microsoft Azure Foundations Benchmark and Microsoft Cloud Adoption Framework naming conventions. Results appear instantly in the browser. Nothing is uploaded or transmitted.
| Category | Rules | Covers |
|---|---|---|
| Naming | 4 | CAF prefixes for storage accounts, Key Vaults, NSGs, and resource groups |
| Tags | 4 | Environment, Owner, CostCentre, and ManagedBy tag governance |
| Storage | 4 | Public blob access, HTTPS-only traffic, minimum TLS version, network ACL default action |
| Key Vault | 4 | Soft delete, purge protection, RBAC authorisation mode, network restriction |
| Networking | 4 | Wildcard NSG rules, SSH open to internet, RDP open to internet, public IP on VMs |
| IAM | 4 | Owner role at broad scope, hardcoded credentials, managed identity, principalType |
| Observability | 3 | Diagnostic settings, Log Analytics workspace, retention period >= 365 days |
| Encryption | 2 | Encryption at rest, database TLS enforcement |
| Kubernetes | 3 | AKS RBAC, network policy, cluster autoscaler |
| IaC Quality | 4 | Hardcoded secrets, outdated API versions, missing outputs, parameter descriptions |
| Terraform | 3 | Remote state backend, provider version pinning, required_version |
| Bicep | 1 | targetScope declaration |
Each finding shows the severity (Critical, High, Medium), the rule name, a plain-English description of the issue, and the exact remediation with a code fix. Findings are grouped by category and collapsible. Use the severity filter chips to focus on Critical or High issues first.
The score ring shows your overall compliance score as a percentage. Export the full report as JSON or copy a text summary.
This is the web companion to the CloudCheck VS Code extension, which runs the same checks inline as you write your templates in VS Code.
Open cloud-toolkit.html in any browser. No server, no build step, no account.
Visit the live version: headspace222.github.io/cloud-engineering-toolkit
Use the Toolkit / Compliance Checker toggle at the top to switch between modes.
- CloudCheck VS Code Extension - inline compliance linting in VS Code
- CloudCheck GitHub - extension source and rule documentation
Built by (https://github.com/headspace222)
Found this useful? A star on the repo helps other engineers find it.