Provider Connections

CloudInfraOS connects to your cloud providers and SaaS platforms, syncing resources, costs, and configuration. All credentials are encrypted with AES-256-GCM at rest.

Supported Providers

• AWS — EC2, S3, RDS, Lambda, and all AWS services via IAM access keys
• GCP — Compute Engine, Cloud Storage, Cloud Run, and more via service account keys
• Azure — Virtual Machines, Blob Storage, Functions, and more
• Vercel — Deployments, domains, environment variables, and serverless functions
• GitHub — Repository metadata, actions, and deployment tracking
• Stripe — Subscription and billing data
• Resend — Email delivery and notification infrastructure

How Connections Work

Each provider connection stores encrypted credentials in your CloudInfraOS database. When you initiate a sync, CloudInfraOS uses these credentials to call the provider's API and pull in the latest resource data, cost snapshots, and configuration state.

Syncs can be triggered manually or configured to run on a schedule. The sync status and last-synced timestamp are visible in the provider connection panel under project settings.

Security

All provider credentials are encrypted using AES-256-GCM before being stored in the database. The encryption key is never stored alongside the data. CloudInfraOS never logs or exposes raw credentials in API responses or audit logs.

Environments

Provider connections can be tagged with environments (production, staging, development), letting you organize and filter resources by deployment stage.