Every project gets its own view of AWS.
Cloudbase is a private, read-only explorer for AWS. Connect an account once, then choose the services and items each project owns, so one project’s data never turns up in another.
One account, many projects, no mix-ups.
Real AWS accounts hold more than one app. Cloudbase lets you cut an account into projects and gives each one only its own part.
- Pick the services
- Turn on only what the project uses. Services you leave off disappear from its sidebar, its overview and the combined tables.
- Pick the items
- Narrow a service to exact resources: these three Lambda functions, that one bucket. Everything else in the account stays out of view.
- Enforced on the server
- A project that doesn’t include something can’t load it, even by guessing a URL. Lists, details, data views and changes are all checked.
Browse what you actually run.
Tables you can search and sort, a detail panel for each resource, and data views for DynamoDB items, S3 objects, Cognito users and log events. Plus cost and billing for the account.
- LambdaFunctions
- API GatewayAPIs
- DynamoDBTables
- S3Buckets
- CloudFrontDistributions
- CognitoUser pools
- IAMRoles, Users
- CloudWatchLog groups, Alarms
Built to look, not to touch.
- Read-only until you say otherwise
- Editing DynamoDB items, deleting S3 files and managing Cognito users is off for every project by default. Turn it on per project, and every change is written to an audit log first.
- Credentials stay on the server
- Access keys are checked, then stored only as AES-256-GCM ciphertext. They never reach your browser. IAM roles use an external ID, so nothing secret is stored at all.
- The account is checked before anything is saved
- Cloudbase proves your credentials belong to the account ID you typed. If they don’t, the project is not saved and no AWS call is made.
- Each person sees only their own projects
- Projects live in Postgres with row-level security, read with the signed-in user’s session.