Skip to main content
Requires Enterprise plan. Contact sales for access.
Deploy Ona environments as EC2 instances in your own AWS VPC. The runner orchestrator runs as an ECS service, with deployment automated via CloudFormation templates. AWS runner architecture

​
Features

FeatureDescription
Direct connectivityYour own Network Load Balancer with custom domain and SSL/TLS
Private endpointsAWS PrivateLink to management plane (no public internet)
Ona AgentsAI-powered development workflows
HTTP proxySupport for environments behind corporate firewalls
Custom CAEnterprise certificate authority support
Fine-grained IAMPermission boundaries for enterprise security

​
Prerequisites

Before deploying:
  1. AWS Account with permissions to create CloudFormation stacks with IAM resources
  2. Capacity planning - See Capacity planning
  3. AMI access - If your organization restricts AMIs, allowlist:
    AMI NameOwner Account IDPurpose
    bottlerocket-aws-ecs-1-x86_64149721548608Runner service
    gitpod/images/gitpod-next/ec2-runner-ami-*995913728426Environments
  4. Domain name you control with DNS modification access
  5. SSL/TLS certificate in ACM with SANs for yourdomain.com and *.yourdomain.com

​
Next steps