> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS enterprise runner

<Note>Available on the Enterprise plan. [Contact sales](https://ona.com/contact/sales) to learn more.</Note>

The Enterprise AWS Runner provides agent support and direct connectivity options for organizations that need greater control over their infrastructure.

## Key features

* **Ona AI agent integration** - Enhanced development workflows with AI-powered assistance
* **Direct connectivity** - Bypasses central gateways by using your own Network Load Balancer, secured with your custom domain and SSL/TLS certificate
* **Private VPC endpoints** - Connect to the management plane via AWS PrivateLink for enhanced security without public internet traversal
* **Enhanced security** - Fine-grained IAM policies with permission boundaries for enterprise security requirements
* **HTTP proxy support** - Custom HTTP proxy configuration for environments behind corporate firewalls
* **Custom CA certificate support** - Support for enterprise certificate authorities and custom certificate chains

<img src="https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/enterprise-runner.webp?fit=max&auto=format&n=Q_1IX0KXPpRB22I5&q=85&s=fffc3e56c7efdc40af88429d389eccd0" alt="Enterprise Runner architecture" width="2966" height="1926" data-path="images/docs/flex/runners/enterprise-runner.webp" />

*Enterprise Runner architecture*

## Prerequisites

Before deploying your Enterprise AWS Runner, ensure you have:

1. **AWS Account** with elevated permissions for enterprise features

2. **Capacity Planning** - Follow our [Capacity Planning](/docs/ona/runners/aws/capacity-planning) guide to determine your infrastructure requirements

3. **AMI Access** - If your organization restricts AMI usage, allowlist the AMIs runners and environments run on

   | AMI Name                                     | Owner Account ID | Owner | Purpose                  |
   | -------------------------------------------- | ---------------- | ----- | ------------------------ |
   | `gitpod/images/gitpod-next/ec2-runner-ami-*` | `995913728426`   | Ona   | Development environments |

   For more details, review our [AMI Requirements](/docs/ona/runners/aws/detailed-access-requirements#ami-requirements) guide

4. **Domain Name** that you control with DNS modification capabilities

5. **SSL/TLS Certificate** provisioned in AWS Certificate Manager (ACM). Your SSL certificate must include both Subject Alternative Names (SANs):
   * `yourdomain.com` (root domain)
   * `*.yourdomain.com` (wildcard subdomain)

## Network requirements

The Enterprise Runner requires a custom VPC with specific networking setup for enhanced security and direct connectivity.

<img src="https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/aws-networking-enterprise.webp?fit=max&auto=format&n=Q_1IX0KXPpRB22I5&q=85&s=05a7c30d96f4564388005310bdb2a511" alt="Network Configuration Diagram" width="8020" height="5312" data-path="images/docs/flex/runners/aws-networking-enterprise.webp" />

*Network Configuration Diagram*