Fairwinds | Blog

The Benefits of Using an Open Source IDP Design On AWS

Written by Andy Suderman | Oct 23, 2025 6:07:49 PM

Platform engineering teams face an important choice: implement an Internal Developer Platform (IDP) using proprietary SaaS or assemble one grounded in open source. While vendor demos look polished, open source IDPs, especially those anchored on Amazon Web Services (AWS) and Kubernetes, offer long-term flexibility, innovation, and control. Open source and platform engineering aren’t going away any time soon; in fact, 96% of organizations report increased or steady investment in open source in the past year (State of Open Source 2025) and platform engineering is a top-five organizational priority at over 80% of enterprises.

True Platform Ownership

Open source IDPs break the cycle of vendor lock-in, letting teams build, customize, and evolve their platform stack on their terms. Building in-house gives your platform team full control of the stack, from infrastructure management tools like Kubernetes (often deployed on Amazon Elastic Kubernetes Service (EKS) for scalability and reliability) to developer-facing interfaces such as Backstage (an open source framework for building developer portals). Organizations can modify, extend, or migrate their platform independently, taking advantage of AWS’s open APIs while ensuring long-term strategic flexibility.​

In the past, proprietary IDP vendors have sometimes disappointed customers with sudden licensing changes and forced migrations. A Kubernetes-based open source IDP eliminates this risk. Integrations such as AWS Controllers for Kubernetes (ACK) enable platform teams to manage AWS resources natively from within an IDP built on EKS, preserving customizations and operational experience regardless of any specific vendor's business decisions.​

Open Source Isn’t Always Ideal

While open source IDP designs provide flexibility and control, they’re not the right fit for every organization. Teams lacking platform engineering resources or deep technical expertise, or those with aggressive go-live timelines may find proprietary IDP solutions more practical in the short term.

The right fit depends on your resources and timeline. Proprietary systems can accelerate rollouts and simplify compliance, while open source, though powerful, sometimes requires more upfront time investment and internal expertise.

Situation

Proprietary Systems

Open Source Systems

Limited In-house Expertise

Managed platform reduces operational burden/learning curve

May require internal platform team and/or managed services to set up and maintain

Urgent Rollout Timelines

Out-of-the-box readiness

Potential for longer initial setup and integration timelines

Security & Compliance Needs

Certified vendor compliance/accountability

Must configure and maintain audits internally

Skills Development

Managed learning curve with guided docs and vendor training

In-house training and skills development

Vendor Accountability

SLA-backed reliability

Community support, variable response times unless you have a managed service provider

Many organizations begin with a hybrid approach, building the core IDP around open source tools, but layering in managed services for reliability and support. This approach provides both agility and predictability without the risk of full vendor lock-in.

Cost Predictability and Total Cost of Ownership

Open source IDP designs offer superior cost predictability compared to proprietary alternatives. While initial implementation may require investment in technical expertise, open source solutions typically deliver lower total cost of ownership (TCO) over five years, especially when leveraging AWS cost transparency tools and managed infrastructure. Once deployed, open source IDPs avoid per‑user licenses and scale efficiently using AWS features like Karpenter. A cloud provider’s pay-as-you-go model, combined with open source software, results in more predictable cost structures.​

At Spotify, one key performance indicator is the time until new engineers are productive, measured as the time until the employee merged their 10th PR. The time required dropped 55% in the two years after deploying Backstage, indicating less overall complexity in the ecosystem and providing a proof point for IDP success.
— Strategies for adopting | Backstage Software Catalog and Developer Platform

Beyond immediate cost control, operational transparency amplifies long‑term value; an open source model compounds returns through continuous optimization and shared innovation.

Community & Ecosystem Maturity

The open source community, including AWS-sponsored projects like Bottlerocket OS (a Linux-based open source operating system built by AWS for running containers), and active contributions to Backstage and ArgoCD, delivers continuous improvements, enabling faster vulnerability remediation and feature growth.

Open source IDPs also foster innovation at a pace most proprietary vendors struggle to match. The Cloud Native Computing Foundation (CNCF) community, along with AWS’s own commitment to active open source engineering, accelerates new capabilities. For example, Backstage grew from 10 to over 40 certified plugins in three years, supporting production integrations across AWS, Kubernetes, and CI/CD tools. Many projects are enterprise-ready and built for easy deployment. Their quality is confirmed by AWS certification, and they include pre-built Infrastructure as Code (IaC) modules and add-ons for large-scale operations.​

Beyond immediate ROI, open source Internal Developer Platforms drive long‑term team resilience. Engineers gain transferable Kubernetes, GitOps, and AWS knowledge, skills that reduce recruiting friction and prevent technology lock‑in. Importantly, community-driven development ensures that IDP components address real developer needs rather than vendor profit margins.

“AWS has been a valued partner in supporting the cloud native ecosystem,” said Chris Aniszczyk, CTO of CNCF. “This renewed credit contribution empowers our community to innovate, build, and test at scale, ensuring Kubernetes continues to meet the evolving needs of enterprises across clouds while maintaining cost-efficient, resilient infrastructure.”
— AWS Support Fuels Kubernetes Innovation, Driving Global Adoption and Open Source Sustainability | CNCF

Customization and Integration Flexibility

With open APIs, platform teams can enable governance, reporting, or new workflows without requiring vendor approval.

Key Integration Considerations

  • Layered Architecture on AWS: Use Infrastructure as Code (IaC), Identity and Access Management (IAM), and GitOps tooling, such as Crossplane for infrastructure provisioning and ArgoCD for delivery to unify infrastructure and application automation. Amazon Simple Storage Service (S3) buckets provide native object storage and AWS Lambda functions extend compute automation.
    Blend open source automation with AWS managed services like Amazon Relational Database Service (Amazon RDS), Secrets Manager, and Cedar to enforce policy and reduce cognitive overhead.
  • Unified Authentication and RBAC: Integrate AWS IAM OpenID Connect (OIDC) and IAM roles for service accounts (IRSA) into Kubernetes. This ties every user or service to a traceable AWS identity, preserving fine-grained access policies across clusters.
  • Enterprise Observability and SLOs: Large organizations must correlate application with infrastructure visibility. Combining open source observability stacks (Prometheus, Grafana) with AWS-native options (CloudWatch, X-Ray) creates full-stack insight for both platform and application performance.
  • Multi-Cluster and Hybrid Scalability: Enterprises running across multiple AWS regions or local data centers can federate clusters through ACK Controllers or AWS Global Accelerator.

Real-World Integration at Scale

SIXT’s Crossplane on EKS implementation shortened deployment pipelines while maintaining governance by enabling unified CI/CD, secrets, and monitoring on EKS, with open source controllers, cutting deployment pipeline times by 40% and improving cross-team visibility.

The integration ecosystem around open source tools is also inherently more resilient. When platform components adhere to open standards and open APIs, integration with AWS resources, whether through plugins or Kubernetes controllers, becomes even more straightforward, eliminating the need to replace existing toolchains for compatibility reasons.

Governance and Policy Enforcement

With policy engines like OPA/Gatekeeper, Kyverno, and Polaris, Kubernetes-based IDPs enable policy-as-code and fully auditable controls across on-prem, hybrid, and cloud environments.​

The ability to audit and modify policy logic ensures every deployment remains secure and compliant, allowing teams to verify controls independently rather than relying on vendor assurances. Organizations can easily check that controls implemented both on open source IDPs and cloud infrastructure function correctly.

Research from the Platform Engineering community shows nearly 70% of IDP initiatives struggle or stall at enterprise scale, usually due to skills gaps or lack of clear objectives. However, platforms that measure DORA metrics and involve developers in product design are twice as likely to achieve budget and adoption targets.
— Platform leadership 101: Why 67% of platform initiatives are failing

Start Building Your Own Open Source IDP on AWS Today

Your platform engineering team doesn’t need to wait for a vendor roadmap to build a platform that meets your organization’s unique needs. With open source frameworks and managed services on Amazon EKS, you already have the foundation for a secure, scalable, and fully customizable Internal Developer Platform.

Whether you're modernizing existing infrastructure or launching your first IDP pilot, start by assessing:

  • Where vendor lock-in or licensing limits innovation
  • Which AWS services your team already trusts and can extend through open APIs
  • What developer challenges can be solved through automation, transparency, and open collaboration

Open source IDPs built on AWS give your teams control, transparency, and adaptability in a fast-evolving cloud landscape, accelerating delivery, improving governance, and driving sustainable innovation. Start building today with Fairwinds’ Kubernetes IDP Quick Start on EKS.