Any cloud service
Universal Cloud Identity
Use BigQuery on GCP, SQS and DynamoDB on AWS, and Microsoft Entra ID on Azure in the same deployment. A workload presents its Control Plane identity and Control Plane exchanges it for a short-lived credential in the target cloud. No keys are embedded in the container, so there is nothing to re-key when traffic moves to another location.
An app on Hetzner reading from AWS RDS. A service in Azure writing to GCP BigQuery. An ML pipeline drawing on services from all three.
Workload
Identity3 accounts
AWSconnecteds3 read · dynamodb query · sqs send
Azureconnectedmicrosoft entra id read · azure openai access
GCPconnectedbigquery query · cloud storage read · pub/sub publish
Servicesany of 600+
DynamoDBaws
SQSaws
S3aws
RDSaws
Entra IDazure
Key Vaultazure
Azure OpenAIazure
BigQuerygcp
Cloud Storagegcp
Pub/SubgcpTemplate catalog
Or deploy from Control Plane's native services library, provisioned in seconds and running on your virtual cloud at a fraction of the public cloud cost.
- Provisioned in seconds. One template creates every resource it needs.
- Configurable. Resource limits, firewall rules, replicas, backups, locations.
- Versioned. Pin a release, track every revision, roll back any time.
- Open. Every template is public on GitHub.
