🚨 Notice: ConsoleMe & Weep Are Being Archived 🚨

This repository will be archived and set to read-only on March 1, 2026. After this date, no further changes, issues, or pull requests will be accepted. The Discord server will also be deleted.

🙏 Thank You

Since open-sourcing ConsoleMe and Weep in March 2021, the projects have grown into a widely adopted AWS IAM management solution (now with 3,200+ GitHub stars). We’re grateful to everyone—inside and outside Netflix—who has contributed code, feedback, documentation, and ideas over the years. Your support has been critical to the success of this ecosystem.

❓ Why Are We Archiving?

Over time, the internal versions of ConsoleMe and Weep at Netflix have evolved significantly, especially following a major refactor last year. As a result, the open-source versions now diverge substantially from our internal implementations and no longer reflect how we use or operate these tools.

At the same time, due to ongoing bandwidth and resourcing constraints, we are no longer able to:

• Keep the OSS codebase aligned with our internal versions
• Responsively triage issues, review pull requests, and support the community

Maintaining two divergent versions of ConsoleMe and Weep is no longer sustainable for the team.

ℹ️ What Does This Mean for You?

• The codebase will remain publicly available in read-only mode.
• No new issues, pull requests, or discussions will be accepted after archiving.
• Existing issues and pull requests will be closed.
• The Discord community will be deleted.

If you’d like to continue development, we encourage you to fork the repository and maintain your own version.

Thank you again to everyone who has used, contributed to, or advocated for ConsoleMe and Weep over the years.

— The Cloud Security Team at Netflix

---

ConsoleMe

Check out our quick start guide , documentation , feature videos , ReInvent Talk, and Blog Post .

Overview

ConsoleMe is a web service that makes AWS IAM permissions and credential management easier for end-users and cloud administrators.

ConsoleMe provides numerous ways to log in to the AWS Console.

An IAM Self-Service Wizard lets users request IAM permissions in plain English. Cross-account resource policies will be automatically generated, and can be applied with a single click for certain resource types.

Weep (ConsoleMe’s CLI) supports 5 different ways of serving AWS credentials locally.

Cloud administrators can create/clone IAM roles and natively manage IAM roles, users, inline/managed policies, S3 Buckets, SQS queues, and SNS topics across hundreds of accounts in a single interface.

Users can access most of your cloud resources in the AWS Console with a single click. Cloud administrators can configure ConsoleMe to authenticate users through ALB Authentication, OIDC/OAuth2, or SAML.

… And more. Check out our docs to get started.

Project resources

• Docs
• Weep (our CLI)
• Source Code
• Issue tracker
• Blog Post
• ReInvent Talk

Third Party Mentions

• Achieving least-privilege at FollowAnalytics with Repokid, Aardvark and ConsoleMe
• Netflix’s ConsoleMe local installation on Linux machine
• Improving database security at FollowAnalytics with AWS IAM database authentication and ConsoleMe
• Awesome IAM Policy Tools
• Netflix on AWS Case Study
• Netflix Open Sources ConsoleMe to Manage Permissions and Access on AWS

Companies that use ConsoleMe (alphabetically sorted)

• AB180
• Calm
• FollowAnalytics
• myKaarma
• National Center for Biotechnology Information
• Feel free to submit a PR or let us know in an Issue if you'd like to add your company to this list.