
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@fleetbase/aws-marketplace
Advanced tools
AWS Marketplace SaaS integration extension for Fleetbase
A comprehensive AWS Marketplace SaaS integration extension for Fleetbase that enables CloudFormation template deployment through AWS Marketplace while meeting all SaaS integration requirements.
This extension provides a complete solution for publishing Fleetbase as a SaaS product on AWS Marketplace while maintaining the ability to deploy CloudFormation templates. It handles customer registration, subscription management, usage tracking, billing, and CloudFormation deployment management.
Install Backend Package:
composer require fleetbase/aws-marketplace
php artisan vendor:publish --provider="Fleetbase\AwsMarketplace\Providers\AwsMarketplaceServiceProvider"
php artisan migrate
Configure Environment:
# Add to .env file
AWS_MARKETPLACE_PRODUCT_CODE=your_product_code
AWS_MARKETPLACE_ACCESS_KEY_ID=your_access_key
AWS_MARKETPLACE_SECRET_ACCESS_KEY=your_secret_key
CLOUDFORMATION_DEFAULT_TEMPLATE_URL=https://your-bucket.s3.amazonaws.com/template.yaml
Install Frontend:
cd addon && pnpm install && pnpm build
For detailed installation instructions, see the Installation Guide.
# AWS Marketplace Configuration
AWS_MARKETPLACE_PRODUCT_CODE=your_product_code
AWS_MARKETPLACE_SELLER_ID=your_seller_id
AWS_MARKETPLACE_ACCESS_KEY_ID=your_access_key
AWS_MARKETPLACE_SECRET_ACCESS_KEY=your_secret_key
AWS_MARKETPLACE_REGION=us-east-1
# CloudFormation Configuration
CLOUDFORMATION_DEFAULT_TEMPLATE_URL=https://your-bucket.s3.amazonaws.com/template.yaml
CLOUDFORMATION_TEMPLATE_BUCKET=your-cloudformation-templates
CLOUDFORMATION_ALLOWED_REGIONS=us-east-1,us-east-2,us-west-1,us-west-2
# Billing Configuration
MARKETPLACE_BILLING_ENABLED=true
MARKETPLACE_USAGE_DIMENSION=deployment_hours
MARKETPLACE_METERING_ENABLED=true
For complete configuration options, see the Configuration Guide.
Customers subscribe through AWS Marketplace and are redirected to your Fleetbase instance for registration:
https://your-fleetbase-domain.com/console/marketplace/register?x-amzn-marketplace-token=TOKEN
Once registered, customers can deploy CloudFormation templates:
// Create deployment via API
POST /api/marketplace/deployments
{
"stack_name": "my-fleetbase-deployment",
"deployment_region": "us-east-1",
"template_url": "https://bucket.s3.amazonaws.com/template.yaml",
"parameters": {
"InstanceType": "t3.medium",
"Environment": "production"
}
}
The extension automatically tracks deployment hours and submits usage to AWS Marketplace:
// Usage is tracked automatically
$billingService = app(BillingService::class);
$billingService->recordUsage($subscription, 'deployment_hours', 2.5);
The extension provides a comprehensive REST API for all marketplace operations:
POST /marketplace/register
- Customer registrationPOST /marketplace/webhook
- AWS Marketplace webhooksGET /marketplace/config
- Public configurationGET /marketplace/subscription
- Subscription detailsGET /marketplace/deployments
- List deploymentsPOST /marketplace/deployments
- Create deploymentGET /marketplace/billing/summary
- Billing summaryFor complete API documentation, see the API Reference.
├── Models/
│ ├── MarketplaceCustomer.php # Customer management
│ ├── MarketplaceSubscription.php # Subscription tracking
│ ├── CloudFormationDeployment.php # Deployment management
│ ├── MarketplaceBillingRecord.php # Usage tracking
│ └── MarketplaceEvent.php # Event logging
├── Services/
│ ├── AwsMarketplaceService.php # AWS Marketplace API
│ ├── CloudFormationService.php # CloudFormation operations
│ ├── CustomerService.php # Customer management
│ ├── BillingService.php # Usage and billing
│ └── NotificationService.php # Communications
└── Http/
├── Controllers/
│ └── MarketplaceController.php # API endpoints
└── Middleware/
├── ValidateMarketplaceToken.php
└── EnsureMarketplaceAccess.php
├── routes/
│ ├── register.js # Registration flow
│ └── dashboard.js # Main dashboard
├── controllers/
│ ├── register.js # Registration logic
│ └── dashboard.js # Dashboard logic
├── templates/
│ ├── register.hbs # Registration UI
│ └── dashboard.hbs # Dashboard UI
└── services/
└── marketplace.js # API service
Clone Repository:
git clone https://github.com/fleetbase/aws-marketplace.git
cd aws-marketplace
Install Dependencies:
# Backend dependencies
composer install
# Frontend dependencies
pnpm install
Run Tests:
# Backend tests
composer test
# Frontend tests
pnpm test
git checkout -b feature/amazing-feature
)git commit -m 'Add amazing feature'
)git push origin feature/amazing-feature
)# Run all tests
composer test
# Run specific test suites
composer test:unit
composer test:integration
composer test:lint
# Run all tests
pnpm test
# Run specific tests
pnpm test:ember
pnpm test:lint
Prepare Environment:
# Optimize for production
composer install --no-dev --optimize-autoloader
php artisan config:cache
php artisan route:cache
Deploy Frontend:
pnpm build --environment=production
Run Migrations:
php artisan migrate --force
For detailed deployment instructions, see the Deployment Guide.
The extension provides health check endpoints:
# Check overall health
curl https://your-domain.com/api/marketplace/health
# Check AWS connectivity
curl https://your-domain.com/api/marketplace/health/aws
# Check billing status
curl https://your-domain.com/api/marketplace/health/billing
Comprehensive logging is available:
storage/logs/marketplace.log
storage/logs/marketplace-billing.log
storage/logs/laravel.log
For detailed troubleshooting, see the Troubleshooting Guide.
This project is licensed under the AGPL-3.0-or-later License - see the LICENSE.md file for details.
See CHANGELOG.md for a list of changes and version history.
If you discover any security-related issues, please email security@fleetbase.io instead of using the issue tracker.
FAQs
AWS Marketplace SaaS integration extension for Fleetbase
We found that @fleetbase/aws-marketplace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.