Platform
Every service on this platform inherits the same contract. Read it once here rather than rediscovering it per service.
Start here
Section titled “Start here”Getting started Signup to a machine you can SSH into, in eight steps.
The contract
Section titled “The contract”Authentication How a request is signed and what the credential scope must contain.
Requests and responses Wire format, headers, and the request-id contract.
Errors The error shape, and what each class means for whether you should retry.
Pagination Tokens, ordering, and why three actions deliberately do not paginate.
Idempotency Which calls are safe to retry, which are naturally idempotent, and the one that is neither.
ARNs and identifiers Identifier shapes, and what a not-found means when the resource is someone else’s.
Accounts and tenancy What an account is, and what it can see.
Time, numbers and money How every timestamp and every amount is rendered.
Metering events The shape of a usage record.
API versioning What is promised across versions.
Endpoints and regions The endpoint shape, regions and zones.
Where things actually are
Section titled “Where things actually are”Service endpoints Every hostname this cloud publishes, what speaks each one, and how traffic reaches it.
Web console and VNC The two browser routes in, including the one that works before the network does.
Guarantees
Section titled “Guarantees”What we verify before selling it The three claims a machine checks on every deploy — the hardware is as big as the catalog says, every alias tells the truth about size, and no allocation oversells the box — and everything those checks deliberately do not cover.
Security
Section titled “Security”Credentials and trust Which of your secrets this platform can hand back to you, what that means for blast radius, and what is not protected yet.