> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS enterprise runner

<Note>Available on the Enterprise plan. [Contact sales](https://ona.com/contact/sales) to learn more.</Note>

The Enterprise AWS Runner provides enhanced capabilities including Ona Agents support and direct connectivity options. Designed for enterprise customers who need advanced features and greater control over their infrastructure with custom networking configurations.

## Key features

* **Ona AI agent integration** - Enhanced development workflows with AI-powered assistance
* **Direct connectivity** - Bypasses central gateways by using your own Network Load Balancer, secured with your custom domain and SSL/TLS certificate
* **Private VPC endpoints** - Connect to the management plane via AWS PrivateLink for enhanced security without public internet traversal
* **Enhanced security** - Fine-grained IAM policies with permission boundaries for enterprise security requirements
* **HTTP proxy support** - Custom HTTP proxy configuration for environments behind corporate firewalls
* **Custom CA certificate support** - Support for enterprise certificate authorities and custom certificate chains

<img src="https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/enterprise-runner.webp?fit=max&auto=format&n=Q_1IX0KXPpRB22I5&q=85&s=fffc3e56c7efdc40af88429d389eccd0" alt="Enterprise Runner architecture" width="2966" height="1926" data-path="images/docs/flex/runners/enterprise-runner.webp" />

*Enterprise Runner architecture*

## Prerequisites

Before deploying your Enterprise AWS Runner, ensure you have:

1. **AWS Account** with elevated permissions for enterprise features

2. **Capacity Planning** - Follow our [Capacity Planning](/ona/runners/aws/capacity-planning) guide to determine your infrastructure requirements

3. **AMI Access** - If your organization restricts AMI usage, allowlist the AMIs runners and environments run on

   | AMI Name                                     | Owner Account ID | Owner | Purpose                  |
   | -------------------------------------------- | ---------------- | ----- | ------------------------ |
   | `gitpod/images/gitpod-next/ec2-runner-ami-*` | `995913728426`   | Ona   | Development environments |

   For more details, review our [AMI Requirements](/ona/runners/aws/detailed-access-requirements#ami-requirements) guide

4. **Domain Name** that you control with DNS modification capabilities

5. **SSL/TLS Certificate** provisioned in AWS Certificate Manager (ACM). Your SSL certificate must include both Subject Alternative Names (SANs):
   * `yourdomain.com` (root domain)
   * `*.yourdomain.com` (wildcard subdomain)

## Network requirements

The Enterprise Runner requires a custom VPC with specific networking setup for enhanced security and direct connectivity.

<img src="https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/aws-networking-enterprise.webp?fit=max&auto=format&n=Q_1IX0KXPpRB22I5&q=85&s=05a7c30d96f4564388005310bdb2a511" alt="Network Configuration Diagram" width="8020" height="5312" data-path="images/docs/flex/runners/aws-networking-enterprise.webp" />

*Network Configuration Diagram*