Automic VaultAutomic Vault

brew

Install org-formation with Homebrew

Infrastructure as Code (IaC) tool for AWS Organizations. Version 1.0.17 via Homebrew; verified from local package data.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install org-formation

local Homebrew formula metadata

overview

Package summary

Infrastructure as Code (IaC) tool for AWS Organizations

Commands and aliases

  • aws-organization-formation
  • ofn
  • org-formation

history

Project history and usage

AWS Organization Formation, distributed as org-formation, is a TypeScript CLI for managing AWS Organizations as infrastructure as code. It models accounts, organizational units, service control policies, cross-account CloudFormation resources, and account-provisioning tasks in version-controlled templates.

Project history

The org-formation-cli repository was created on 2019-08-22. The project emerged in the period when AWS Organizations and multi-account landing zones were becoming ordinary cloud architecture, but many account and policy changes were still performed through consoles or bespoke scripts.

Its README presents three central features: IaC for AWS Organizations resources, CloudFormation annotations for cross-account provisioning, and automation of account creation and resource provisioning. The docs describe organization.yml templates containing Accounts, OUs, SCPs, and root-account metadata.

Adoption history

AWS's Open Source Blog published a 2020 series on managing AWS Organizations with org-formation, describing it as an open-source, community-supported tool for managing different aspects of AWS Organizations through IaC. That coverage helped place the package in the AWS multi-account governance ecosystem rather than only in its GitHub niche.

The GitHub repository shows meaningful operator adoption for a specialized cloud-governance CLI, with more than a thousand stars and topics covering AWS, Control Tower, landing zones, organizations, CloudFormation, and DevOps.

How it is used

Typical use starts with org-formation init organization.yml, which creates a local organization-formation file and an S3-backed state file. Operators then run update or change-set commands to apply changes to accounts, OUs, service control policies, and related resources.

Teams use the tool in CI/CD to review and apply AWS Organizations changes from source control. The README also documents Docker usage that mounts local AWS credentials, reflecting a common operational pattern for high-privilege organization-management tooling.

Why package nerds care

org-formation is significant because it packages AWS Organizations governance as a normal CLI with npm, Docker, and Homebrew entry points. It turns a high-privilege, account-wide administrative workflow into an installable developer tool with templates, task files, and repeatable command semantics.

For package metadata, it is a good example of an IaC package whose executable names differ across distributions: aws-organization-formation on npm, org-formation and ofn as CLIs, and org-formation as the Homebrew formula.

Timeline

  • 2019-08-22: org-formation/org-formation-cli repository created on GitHub.
  • 2020-08: AWS Open Source Blog published its org-formation walkthrough series.
  • 2024-02: GitHub release pages show v1.0.x maintenance releases in the stable line.

Related projects

  • Related AWS services include AWS Organizations, service control policies, CloudFormation, CodeCommit, CodePipeline, and Control Tower. The org-formation-reference repository provides a best-practices reference architecture for starting AWS Organizations with org-formation.

Sources

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:infrastructure

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 1 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
./.org-formationrcorganization.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.aws/credentials~/.aws/config

executables

Installed executables

CommandKindExposureNote
aws-organization-formationcliglobal executable
ofncliglobal executable
org-formationcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.0.17
manager updated
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/org-formation/org-formation-cli

install metadata

Package metadata

Package keybrew:org-formation
Version1.0.17
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/org-formation
Homepagehttps://github.com/org-formation/org-formation-cli
Repositoryhttps://github.com/org-formation/org-formation-cli
Upstream docshttps://github.com/org-formation/org-formation-cli#readme
LicenseMIT
Source archivehttps://registry.npmjs.org/aws-organization-formation/-/aws-organization-formation-1.0.17.tgz
Dependenciesnode
Bottleavailable (on all)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameorg-formation
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment