Your cloud.
Your rules.
Liberra reads your AWS account. Nothing changes until you say so. Here is exactly how that works.
How Liberra connects
You deploy a CloudFormation stack in your AWS account. That stack creates one IAM role. Liberra uses that role and nothing else.
Free vs Pro
Two clear modes. No surprises.
Inventory, costs, security checks. Liberra reads your account and tells you what it finds. Nothing changes.
Liberra proposes the action and shows you exactly what will happen. You click Approve or Reject. Nothing runs until you say so.
Every write requires approval
Before anything changes in your account, you see exactly what will happen. Not a summary. The actual resource, the actual action.
What is permanently blocked
These operations are blocked before they ever reach AWS. No confirmation flow, no override. They simply do not run.
Six services are blocked entirely: organizations, sts, account, sso, sso-admin, identitystore.
The exact IAM policy every user gets. The full blocked operations list. The enforcement code. All public, nothing redacted.