> ## Documentation Index
> Fetch the complete documentation index at: https://docs.serval.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managed in Your AWS

> Run the full Serval application single-tenant in an AWS account you own, operated by your team or by Serval

# Managed in Your AWS

In this delivery model, **you bring an AWS account you own** and the full Serval application runs single-tenant inside it. The application runtime and all customer data remain in that account, and your AWS credentials never leave your environment. The deployment is operated either by your own team (**self-managed**) or by Serval (**Serval-managed**).

<Check>
  Fully self-hosted and single-tenant. The application runtime and customer data live only in your AWS account. You choose whether your team operates the deployment or Serval operates it for you; the deployment is the same in both cases.
</Check>

## Operating the deployment

The operator — your team in self-managed, or Serval in Serval-managed — is responsible for:

* Infrastructure provisioning for the supported self-hosted stack inside your AWS account
* Application installation and upgrades
* Baseline monitoring and operational work
* Applying each new Serval release inside the AWS account

## How it works

```mermaid theme={null}
flowchart LR
    Serval["Serval"] -->|"publishes versioned release"| Release["Versioned release"]
    Release --> Operator["Operator<br/>(your team or Serval)"]
    Operator -->|"applies in your account"| Resources["Your AWS resources<br/>(VPC, EKS, databases, Serval app)"]
```

* **Versioned releases.** Serval publishes each new version as a versioned release.
* **Applied in your account.** The operator applies the release inside your AWS account; your AWS credentials never leave your environment.
* **Onboarding.** Serval provides the deployment definition, a configuration reference, and setup scripts during onboarding.

## Self-managed deployments

If your team operates the deployment, Serval provides a **deployment bundle** — Terraform intended for AWS, along with Kubernetes/Helm configuration and setup scripts — that stands up the full stack. It builds on standard AWS services, including:

* **Amazon EKS** — the Kubernetes platform
* **Amazon Aurora (PostgreSQL)** — application databases
* **Amazon ElastiCache** and **Amazon OpenSearch** — cache and search
* **Amazon S3** — object storage
* **AWS Secrets Manager** — application secrets

<Warning>
  **Align with the provided configuration as much as possible.** Serval ships a standard bundle of Terraform, Kubernetes/Helm, and setup scripts, and can walk your team through applying it in a dedicated setup session. The deployment is designed, tested, and supported against that standard configuration.

  You **can** point the deployment at your own external services — your own PostgreSQL, Redis, Temporal, OpenSearch, or S3-compatible object storage — instead of the ones the bundle provisions, and Serval supports doing so. But **every deviation from the provided configuration adds operational lift on your side and makes upgrades harder to apply cleanly**, because your deployment diverges from the tested baseline. Align with the provided configuration entirely, or as much as possible, to minimize unexpected behavior and keep upgrades simple.
</Warning>

## What you own

* The AWS account and any required internal approvals
* DNS and domain ownership
* AI provider keys and any customer-owned credentials supplied during onboarding
* Environment-specific policies, guardrails, and access reviews
* Whether your team or Serval operates the deployment
* Any networking you need to reach private internal systems (see [Private Network Access](/sections/self-hosting/private-network-access))

## When to choose this model

Choose Managed in Your AWS when you:

* Want the application runtime and data single-tenant in an AWS account you own
* Are standardizing on AWS for the Serval deployment

## Next steps

<CardGroup cols={2}>
  <Card title="Prerequisites" icon="list-check" href="/sections/self-hosting/serval-managed-prerequisites">
    Review the AWS account, DNS, and AI provider requirements before onboarding.
  </Card>

  <Card title="Compare delivery models" icon="route" href="/sections/self-hosting/deployment-models">
    See how the delivery models compare.
  </Card>

  <Card title="Talk to Sales" icon="comments" href="https://www.serval.com/book-demo">
    Start the onboarding process.
  </Card>
</CardGroup>