Every AWS service.
One tool.
InTouch wraps the AWS CLI v2 as a first-class tool — every service, every command, every region. No per-service plugins to add, no SDK stack to maintain. Google Workspace (Drive, Sheets, Docs, Gmail, Calendar), Docker container execution, and the spawn tool for anything the CLI can do complete the cloud-automation surface.
What Actually Ships
AWS (CLI v2)
S3, EC2, Lambda, DynamoDB, RDS, ECS, ECR, SQS, SNS, Secrets Manager, Systems Manager — anything the CLI can do, InTouch can schedule. Credentials via the vault; assumed-role support; region routing per tool.
Google Workspace
Drive file ops, Sheets read/write, Docs export, Gmail send/search, Calendar. Service-account authentication. Wraps the Google Workspace gcloud CLI and native APIs.
Docker
Run any container as a tool. Mount volumes, set env vars, read stdout/stderr, capture exit codes. The escape hatch for any tool that ships as a container — which, in 2026, is most of them.
Azure / GCP via Spawn
No native Azure or gcloud tool today — use the spawn tool to invoke the az or gcloud CLI with credentials sourced from the vault. Same audit trail as a native tool.
HTTP / REST
Any cloud or SaaS REST API. Inline credentials or vault references, header templates, JSON body templates, response-to-property extraction.
Kubernetes via Spawn
kubectl through the spawn tool with a kubeconfig from the vault. Deploy rollouts, run jobs, inspect pod logs — all orchestrated from InTouch.
What Teams Actually Build
Scheduled S3 → DB
Pick up new objects from an S3 prefix (folder trigger via the AWS tool), parse with the DataFrame tool, load into the warehouse. Move processed files to an archive prefix. Alert on parse failures.
Periodic Cost Report
Call aws ce get-cost-and-usage on a Weekday schedule, pipe into a DataFrame transform, email the Top-10 line items to finance. Swap Anthropic for Ollama if the account data should never leave the network.
Container-Based ETL
Use Docker to run dbt, Great Expectations, or any internal container image. Pipe outputs between tools; alert on exit-code != 0. A CI system's cousin, built for recurring work.
Google Sheets Sync
Pull a Sheet into a DataFrame, enrich rows via an AI call, write the result back. Schedule hourly during business, cutoff at 18:00.
Cloud Credentials Belong in a Vault, Not a File
Every cloud credential — AWS access keys, GCP service-account JSON, Docker registry tokens — lives in the encrypted credential vault. Never in ~/.aws/credentials on a server someone forgot about. RBAC on the credential object controls who can run jobs that resolve it.
Cloud Automation, Without the SaaS Relay
Self-hosted, credential-safe, audit-logged. Free Personal edition.