Federated multi-cloud · Azure + AWS

From an approved architecture to running infrastructure.

The platform team's paved road, end to end. An app owner answers the intake, a real policy engine gates it, then tenancy, Terraform, JFrog and Harness run the provisioning — streamed live, with a diagram that always matches what was built.

See how it works ↓
Access is invite-only · paper simulation — no real cloud resources are created.
provisioning console · live
TENANCY$ aws organizations create-account --name orders-api-prod
TENANCYAccount ACTIVE — prod · us-east-1 · 695807774611
SCAFFOLDworkspace orders-api-prod (ws-89GxREiZ) · remote state enabled
CISentinel policy set: 12 policies passed
CIPlan: 18 to add, 0 to change, 0 to destroy
TF APPLYaws_eks_cluster.main: Creation complete after 4m12s
TF APPLYaws_db_instance.main: Creation complete after 3m39s
JFROGPublished docker-prod-local/orders-api:1.0.287
HARNESSCanary 100% healthy (error-rate 0.0%)
DONEorders-api is ACTIVE — 18 resources · live
Intake
52 questions
Policy
12 real rules
Codegen
37 files
Tenancy
Sub / Account
Terraform
plan + apply
JFrog
artifact
Harness
canary deploy

It generates the repo, not just a plan

37 files · 4 platforms

Every request emits a complete provisioning bundle across four platforms and two layers: golden Terraform modules, Harness stage and pipeline templates, JFrog repository conventions and Xray policies, and the landing-zone hierarchy. Browse it in the app or download the .zip.

A policy gate that actually says no

blocks the run

Twelve real rules run against every request — regulated data forces customer-managed keys, prod must be Multi-AZ, Tier-0 can't auto-promote. A failure blocks provisioning until the spec is fixed.

Watch it build, line by line

live stream

Approve a request and the console streams live: tenancy vended, terraform apply creating each resource, the image pushed to Artifactory, then a canary rollout stepping 10 → 50 → 100%.

Diagrams that match the Terraform

SVG · PNG

The topology is derived from the same function that generates the infrastructure, so the DMZ, app and data subnets you see are exactly what gets built. Attach your own ARB diagram beside it. Download as SVG or PNG.

A platform playbook, not just a demo

16 sections

Sixteen sections on how a developer platform is built and run in a regulated enterprise — golden paths, identity and secrets, cloud migration, the CI/CD gate chain, observability, incidents and the AI platform.

What you'll see inside

Screenshots from the running app — not mockups.

The generated bundle
The generated bundle

Platform and app layers side by side — Harness templates, JFrog conventions, golden Terraform modules. Every file readable in the browser, the whole thing downloadable.

Intake, with the topology deriving live
Intake, with the topology deriving live

Answer the architecture questions and the target placement redraws as you go — the same derivation that later generates the Terraform.

The deployed architecture
The deployed architecture

Real tenancy IDs, the artifact, the live endpoint. Rendered from the request, not drawn by hand.

The platform playbook
The platform playbook

A reference document on running a platform in a bank — with worked golden-path examples.

How it works
01
Intake

52 questions across 13 sections capture the whole spec — or upload the Excel template and it auto-fills.

02
Policy

The rules engine grades the request and blocks anything that breaks the guardrails.

03
Generate

Terraform modules, Harness pipeline templates and JFrog conventions are emitted from the answers — deterministically, no AI involved.

04
Approve

A platform engineer reviews the plan, the cost estimate and the generated topology.

05
Provision

Tenancy is vended, Terraform applies, the artifact ships, Harness rolls it out — streamed live.

See a provisioning run end to end

Submit a request, watch the policy engine grade it, approve it, and follow the build live. Every request is private to the account that created it.

CloudPro · a ports-and-adapters simulation of a federated Azure + AWS provisioning platform.