Validated Deployments / Cloud Baselines

Pick the cloud lane that matches the posture you want to prove.

The current cloud validated scope comes from Amazon EKS. Each lane keeps the tested topology and the matching deployment recipe adjacent, so you can confirm the architecture first and then reproduce it without jumping across unrelated nav branches.

Open EKS DevelopmentOpen EKS Hardened

Use cloud baselines when you need to

• compare validated development and hardened EKS topologies
• see the exact trust boundary, edge model, and storage assumptions before deployment
• move from architecture to deployment recipe without losing the lane context

Validated cloud lanes

1. 01

   EKS Development

   Shared terminating edge, AWS KMS auto-unseal, JWT bootstrap, and S3 backups for a realistic but non-production lane.

   Open lane
2. 02

   EKS Hardened

   Dedicated passthrough edge, AWS KMS auto-unseal, OpenBao-managed ACME, and the tighter production posture used in the hardened cloud lane.

   Open lane

Related catalogs

Cloud recipe catalogBrowse the cloud deployment procedures directly if you already know which lane you want.Validated deployments overviewReturn to the section entry if you still need to compare cloud and local baselines.