Skip to content
0scp Docs

Deploy Guide

0scp runs in your AWS account. After subscribing on AWS Marketplace you launch a CloudFormation stack that provisions the platform. The registration page pre-fills the LicenseKey and LicensingApiUrl for you.

Prerequisites

Section titled “Prerequisites”
  • An AWS account with permission to create CloudFormation stacks, Lambda functions, IAM roles, and DynamoDB tables.
  • For full Organization governance, deploy in your management account (or a delegated administrator). 0scp also supports standalone single-account mode.
  • Your license key from the Marketplace registration page.

1-click launch

Section titled “1-click launch”

  1. Complete the Marketplace subscription. The fulfillment page renders your license key and a Deploy 0scp button.

  2. Click Deploy 0scp — this opens the CloudFormation quick-create console in your account with the template URL and parameters pre-filled:

    ParameterValue
    LicenseKeyPre-filled from registration
    LicensingApiUrlPre-filled (seller endpoint)
    ContainmentModeOrgScp (Organization) or Standalone

  3. Acknowledge the IAM capability checkbox and click Create stack.

  4. Wait for CREATE_COMPLETE (typically a few minutes).

Verify

Section titled “Verify”

Once the stack is up, the runtime calls the licensing service to validate your key. An ACTIVE entitlement unlocks the full platform; an expired or suspended entitlement degrades to read-only (write actions return 402).

Customer stack → LicenseClient → GET {seller}/v1/license/validate?licenseKey&accountId
   ACTIVE     → full platform
   EXPIRED    → read-only
   SUSPENDED  → read-only

Updating

Section titled “Updating”

When you change your Marketplace subscription, AWS notifies the seller licensing service over SNS, which refreshes your entitlement automatically — no stack change required.

See the full Marketplace architecture & launch checklist.