gruntwork-io/cloud-nuke

Health v2 · maintenance only

Adoption not part of the score

3178 stars · 378 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

cloud-nuke is a Go CLI tool that deletes all resources in a cloud account (primarily AWS, supporting 125+ resource types), designed for cleaning up test accounts and removing leftover or default resources. It offers dry-run inspection, region and resource-type filtering, config-file-based granular control, and a separate command for removing default VPCs and permissive security group rules.

Use cases

• clean up all resources in an AWS test account
• delete leftover cloud resources to reduce costs
• remove default VPCs and permissive default security group rules
• preview which cloud resources would be deleted before nuking
• delete only specific resource types like EC2 or S3
• wipe resources in specific AWS regions
• programmatically clean up cloud accounts as a Go library

When to choose

• you need to wipe a non-production AWS account clean of all resources
• you want to eliminate forgotten resources that generate cloud costs
• you need to remove insecure default VPCs and security group rules across accounts
• you want dry-run inspection and fine-grained filtering before deletion

When to avoid

• you are targeting a production account - the aws command is highly destructive
• you need multi-cloud cleanup beyond AWS
• you need a general-purpose infrastructure management tool rather than deletion
• you cannot tolerate the risk of accidental mass deletion

Facets

cli-tool · maturity active

cli cloud infrastructure-as-code developer-tools security cloud-computing infrastructure-as-code developer-tools cli windows go aws resource-cleanup cost-management destructive-operations gruntwork devops automation linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gruntwork-io/cloud-nuke")