Skip to content

Dedicated Tenancy Deployment Guide

This guide shows how to configure Dedicated Tenancy for Provider Hosted, BYOC Anywhere, and Air-Gapped deployments.

Provider Hosted

For Compose-based SaaS Products, set OMNISTRATE_DEDICATED_TENANCY and configure the provider account with hostedDeployment:

x-omnistrate-service-plan:
  name: 'Dedicated-Tenancy SaaS'
  tenancyType: 'OMNISTRATE_DEDICATED_TENANCY'
  deployment:
    hostedDeployment:
      awsAccountId: '<AWS_ACCOUNT_ID>'
      awsBootstrapRoleAccountArn: 'arn:aws:iam::<AWS_ACCOUNT_ID>:role/omnistrate-bootstrap-role'

For complete isolation, you can also configure one deployment per cell with maximumDeploymentsPerCell: 1. See Custom Deployment Cell Placement and Customer Networks.

BYOC Anywhere

For Compose or Plan-based services, replace hostedDeployment with byoaDeployment and onboard each customer account:

deployment:
  byoaDeployment:
    awsAccountId: '<AWS_ACCOUNT_ID>'
    awsBootstrapRoleAccountArn: 'arn:aws:iam::<AWS_ACCOUNT_ID>:role/omnistrate-bootstrap-role'

Use the dedicated tenancy design for each customer account, then follow BYOC Deployment for account onboarding and instance deployment.

What's next