Connecting Cloud Providers

RasnuOS is engineered to be entirely cloud-agnostic. While you can always manually install the RasnuOS Agent on any existing server, the platform becomes exponentially more powerful when you connect your existing cloud provider accounts directly.

By providing RasnuOS with an API token for your cloud provider, you unlock the ability to provision infrastructure, manage firewalls, and orchestrate automated DNS failovers natively from the RasnuOS dashboard.

Supported Cloud Providers

You can currently connect the following infrastructure providers:

• DigitalOcean
• Amazon Web Services (AWS)
• Hetzner Cloud
• Vultr
• Linode (Akamai)
• Google Cloud Platform (GCP) (Coming Soon)
• Microsoft Azure (Coming Soon)

Adding a Cloud Credential

To securely link your cloud provider:

1. Navigate to Infrastructure > Cloud Credentials.
2. Click Connect Provider.
3. Select your provider (e.g., AWS).
4. Provide a strictly scoped API Token or IAM Role.

IMPORTANT

Principle of Least Privilege: When generating an API key in your cloud provider, never provide full administrative access. Scope the token strictly to the permissions required to create instances, manage firewalls, and edit DNS records.

Vault Encryption

When you save a Cloud Credential in RasnuOS, the raw API token is never stored in plaintext. It is immediately encrypted using our HashiCorp Vault Transit Engine.

Even if the RasnuOS databases were fully compromised, the attacker would only acquire useless ciphertext. The tokens are only decrypted in memory at the exact millisecond the RasnuOS Control Plane needs to issue a provisioning command.