SaaSLayer

What is SaaSLayer

Who this is for: builders evaluating whether SaaSLayer fits their product.

SaaSLayer is deployable, AWS-backed infrastructure for SaaS products. It packages the platform layer most teams discover too late — user service, IAM-style RBAC, tenant-aware deployment orchestration, API keys, audit trails, event delivery, and embeddable admin/user surfaces — as modules that slot into an AWS-backed product without stitching every low-level service together by hand.

The modules

  • User Service — Cognito-backed user pools, owner bootstrap, and the first admin identity for each customer deployment.
  • Permissions — DynamoDB-native, IAM-style authorization with one-read permission checks on the hot path.
  • Deployer / Control Plane — provisions and operates each Customer's Instance: module deployments, manifests, updates, teardown.
  • Event Delivery — transactional outbox, HMAC-signed webhooks, EventBridge transport, retry/backoff.
  • Admin Console and Embedded Widgets — surfaces for Customer Admins and components you embed in your own product for End Users.

What SaaSLayer is not

  • Not a generic SaaS template or app scaffold.
  • Not only an auth widget or a hosted dashboard.
  • Not a black-box authorization vendor that forces every permission check through a remote service.
  • Not a replacement for AWS — it is an experience layer on top of AWS infrastructure you can reason about.

Where to go next