> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS enterprise runner

> [!NOTE]
>
> Available on the Enterprise plan. [Contact sales](https://ona.com/contact/sales) to learn more.

The Enterprise AWS Runner provides agent support and direct connectivity options for organizations that need greater control over their infrastructure.

## Key features

* **Ona AI agent integration** - Enhanced development workflows with AI-powered assistance
* **Direct connectivity** - Bypasses central gateways by using your own Network Load Balancer, secured with your custom domain and SSL/TLS certificate
* **Private VPC endpoints** - Connect to the management plane via AWS PrivateLink for enhanced security without public internet traversal
* **Enhanced security** - Fine-grained IAM policies with permission boundaries for enterprise security requirements
* **HTTP proxy support** - Custom HTTP proxy configuration for environments behind corporate firewalls
* **Custom CA certificate support** - Support for enterprise certificate authorities and custom certificate chains

![Enterprise Runner architecture](https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/enterprise-runner.webp?fit=max\&auto=format\&n=Q_1IX0KXPpRB22I5\&q=85\&s=fffc3e56c7efdc40af88429d389eccd0)

*Enterprise Runner architecture*

## Prerequisites

Before deploying your Enterprise AWS Runner, ensure you have:

1. **AWS Account** with elevated permissions for enterprise features

2. **Capacity Planning** - Follow our [Capacity Planning](https://ona.com/docs/ona/runners/aws/capacity-planning.md) guide to determine your infrastructure requirements

3. **AMI Access** - If your organization restricts AMI usage, allowlist the AMIs runners and environments run on

   | AMI Name | Owner Account ID | Owner | Purpose |
   | - | - | - | - |
   | `gitpod/images/gitpod-next/ec2-runner-ami-*` | `995913728426` | Ona | Development environments |

   For more details, review our [AMI Requirements](https://ona.com/docs/ona/runners/aws/detailed-access-requirements.md#ami-requirements) guide

4. **Domain Name** that you control with DNS modification capabilities

5. **SSL/TLS Certificate** provisioned in AWS Certificate Manager (ACM). Your SSL certificate must include both Subject Alternative Names (SANs):
   * `yourdomain.com` (root domain)
   * `*.yourdomain.com` (wildcard subdomain)

## Network requirements

The Enterprise Runner requires a custom VPC with specific networking setup for enhanced security and direct connectivity.

![Network Configuration Diagram](https://mintcdn.com/gitpod-13c83c2b/Q_1IX0KXPpRB22I5/images/docs/flex/runners/aws-networking-enterprise.webp?fit=max\&auto=format\&n=Q_1IX0KXPpRB22I5\&q=85\&s=05a7c30d96f4564388005310bdb2a511)

*Network Configuration Diagram*


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.