AWS Runners allow you to deploy Ona’s runner infrastructure directly within your own AWS VPC, giving you complete control over your development environments while maintaining security and compliance requirements. When you deploy an AWS Runner, development environments are created as EC2 instances that are automatically sized based on your environment class requirements. The runner orchestrator itself runs as an ECS service within a dedicated ECS cluster in your AWS account. The entire deployment is automated through CloudFormation templates that we provide, making setup straightforward while ensuring best practices for security and scalability. Overview of AWS runner architecture Overview of AWS runner architecture

​
Benefits of AWS Runner

AWS Runners let you run Ona environments inside your AWS account with enterprise‑grade controls. Key benefits include:
  • Direct connectivity using your own Network Load Balancer with your domain and SSL/TLS certificate
  • AI agent integration for accelerated development workflows (Enterprise tier)
  • Private connectivity to the management plane via AWS PrivateLink (no public internet traversal)
  • Fine‑grained IAM with permission boundaries to meet enterprise security requirements
  • HTTP proxy support for environments behind corporate firewalls
  • Custom CA certificate support for enterprise CAs and certificate chains
Next steps: