Automate S3, VPC, and IAM infrastructure at enterprise scale. 40 actions with full IAM automation, cross-account roles, and 31 policy templates across 9 AWS services. 15% bundle savings.
The Enterprise Bundle combines three purpose-built provisioning tools into a single, integrated infrastructure solution for enterprise ML organizations. Deploy production-ready S3 storage, VPC networking, and IAM security from simple YAML configuration files - 40 automated actions across storage, networking, and security, all executed via Docker containers and deployed through CloudFormation.
S3 Provisioner automates the complete lifecycle of AWS S3 bucket provisioning. Purpose-built for machine learning workloads, it transforms a simple YAML configuration into production-ready S3 infrastructure - complete with ML-optimized folder structures (130+ folders), automated lifecycle policies for cost optimization, and least-privilege IAM policies. Choose between shared buckets (multiple ML solutions in one bucket) or dedicated buckets (one per solution) for isolation. 19 actions cover everything from configuration validation to complete infrastructure teardown.
VPC Provisioner deploys a full 3-tier VPC architecture - including public, private, and database subnets across multiple availability zones - with internet gateways, NAT gateways, elastic IPs, and routing. 9 actions handle the complete lifecycle from template generation to drift detection and stack deletion.
SEC Provisioner (Enterprise-12) automates IAM security infrastructure - 12 IAM groups, full service roles, assumable roles, cross-account roles, and 31 least-privilege policy templates across 9 AWS services including KMS, Trusted Advisor, and Pipeline. By shifting security left, teams can build compliant ML environments in minutes rather than weeks. 12 actions cover policy generation, audit exports, isolated test deployments, and drift detection.
Deploy across multiple AWS accounts, environments, and regions with consistent results. Every tool generates CloudFormation templates you own, can inspect, and customize independently. HTML reports document your infrastructure for compliance and team visibility.
Designed for DevOps engineers, MLOps engineers, security architects, and platform teams who need standardized, repeatable infrastructure across ML projects, environments, and accounts. Enterprise tier adds cross-account roles for centralized access management across your AWS organization. 15% savings versus purchasing each tool individually.
Key Capabilities:
End-to-End ML Infrastructure: Deploy production-ready S3 storage, VPC networking, and IAM security from a single set of YAML configuration files. 40 automated actions cover the complete infrastructure lifecycle - from validation to deployment to teardown.
ML-Ready Storage: Automatically provision S3 buckets with 130+ folder hierarchies organized by ML pipeline phase, 4 lifecycle policy profiles for cost optimization, and support for shared or dedicated bucket patterns.
Production Networking: Deploy a full 3-tier VPC architecture - public, private, and database subnets across multiple availability zones - with internet gateways, NAT gateways, elastic IPs, and routing configured automatically.
Enterprise-Grade Security: Automatically generate 12 IAM groups, full service roles, assumable roles, cross-account roles, and 31 least-privilege policy templates across 9 AWS services including KMS, Trusted Advisor, and Pipeline. No manual JSON policy writing required.
Safe, Validated Deployments: Every tool validates YAML schemas and CloudFormation templates before execution. Isolated test deployments verify permissions and resource limits without affecting production.
Continuous Compliance: Drift detection across all three infrastructure layers identifies unauthorized manual changes. HTML reports and audit exports document your entire infrastructure for compliance and team visibility.
Configure: Define your S3 storage, VPC networking, and IAM security infrastructure in simple YAML configuration files
Execute: Run each Docker container with your config mounted
Review: Generate CloudFormation templates and IAM policies, then validate before deploying
Deploy: Deploy to AWS via CloudFormation for immediate, reliable resource creation
Technical Requirements:
Docker 20.10 or later
AWS account with S3, VPC, IAM, and CloudFormation permissions
AWS credentials (access key or IAM role)
512 MB RAM minimum
Highlights
40 Automated Actions - Complete infrastructure lifecycle across S3 storage (19 actions), VPC networking (9 actions), and IAM security (12 actions). From configuration validation to drift detection to teardown, all executed via Docker containers and deployed through CloudFormation.
Enterprise-Grade IAM with ML-Optimized Storage - 12 IAM groups, full service roles, assumable roles, cross-account roles, and 31 policy templates across 9 AWS services. S3 buckets with 130+ ML folder hierarchies. 3-tier VPC with multi-AZ high availability.
15% Bundle Savings - Three purpose-built provisioning tools at a discount versus purchasing individually. Cross-account roles for centralized access management. Deploy consistent infrastructure across AWS accounts, environments, and regions. HTML reports for compliance and audit.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing bundles three tools under one Enterprise license: the S3 Provisioner, the VPC Provisioner, and the SEC Provisioner at its Enterprise-12 level. You buy a single license measured in units, so pricing scales by the number of units you provision rather than by usage or instance size. All three tools come together in one package; you do not select them separately here. The Enterprise-12 designation reflects the SEC Provisioner tier included, which covers 12 IAM groups and cross-account roles. Billing follows a fixed contract term for the whole bundle.
Top-of-mind questions for buyers
What counts as one unit for billing in this Enterprise bundle?
A unit is one license for the full Enterprise bundle. That single license covers all three tools together: the S3 Provisioner, the VPC Provisioner, and the SEC Provisioner at its Enterprise-12 level. You do not count individual buckets, VPCs, or IAM groups as separate billable units.
What does the Enterprise-12 SEC Provisioner tier include compared to lower tiers?
The Enterprise-12 tier covers 12 IAM groups, service roles, and cross-account roles. Lower tiers cover fewer groups and roles. This bundle license fixes you at Enterprise-12, so you do not select a smaller tier here.
Does my cost change as I provision more S3 buckets, VPCs, or IAM roles?
No. The license price is fixed by the number of units you buy, not by how many buckets, VPCs, or roles you provision. You can deploy shared or dedicated buckets and multiple VPC patterns under the same license without a change to your software charge.
www.axontechlabs.com+2
Helpful?
Vendor refund policy
30-day money-back guarantee for monthly subscriptions. Pro-rated refunds for annual subscriptions within first 30 days.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Version 1.2.1 Release Notes
Documentation Fix
Removed internal development reference from Application Architecture documentation
Replaced test account identifier with standard placeholder in sample reports
Compatibility
Fully backward compatible with all 1.2.0 configurations and commands
No functional changes
Additional details
Usage instructions
MLOps Infrastructure Suite - Enterprise includes 3 container images.
S3 Provisioner:
docker run --rm
-v ~/.aws:/home/s3user/.aws:ro
s3-provisioner:latest --help
VPC Provisioner:
docker run --rm
-v ~/.aws:/home/vpcuser/.aws:ro
vpc-provisioner:latest --help
SEC Provisioner (Enterprise-12):
docker run --rm
-v ~/.aws:/home/secuser/.aws:ro
sec-provisioner:enterprise-12 --help
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Axon Evidence is a secure, cloud hosted digital evidence management system (DEMS) designed to empower public safety agencies by centralizing all forms of digital evidence, including video, audio, documents, photos, and more, into a single, intuitive platform. Trusted globally, Axon Evidence ensures chain of custody, integrates seamlessly with Axon body cameras, TASER devices, in car video, and interview solutions, while also supporting third-party data sources. Its compliance is backed by the Axon Trust Center, ensuring adherence to SOC 2, ISO, HIPAA, GDPR, and CJIS program requirements. Agencies can enhance operational efficiency with AI-powered auto-transcription, report drafting with Draft One, real-time translation from Axon Body 4, and integrated live streaming and situational awareness through Axon Respond. Axon Evidence is built to scale, providing security, accessibility, and collaboration across the justice system.
Automate S3, VPC, and IAM infrastructure for growing ML teams. 40 actions with expanded IAM roles and broader policy coverage across 5+ AWS services. 15% bundle savings.
Automate S3, VPC, and IAM infrastructure for ML workloads. 40 actions across storage, networking, and security. Config-driven, Docker-based. 15% bundle savings.
Fusus is a cloud-based Real-Time Crime Center (RTCC) platform that unifies live video, sensor feeds, and mission-critical data into a single operational view for public safety agencies. It seamlessly integrates with existing infrastructure, public and private camera systems, drones, license plate readers, gunshot detection, IoT devices, and CAD/RMS system, without replacing hardware. Agencies gain rapid access to actionable intelligence, enabling faster decisions, improved collaboration, and enhanced community safety.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.