Skip to main content
Everything runs from your machine, with AWS credentials for the target account. Each step links to the page with the details.
Running provision yourself requires the infra:provision org scope (no service account or trust needed for local runs), plus your organization id. See Required Synthetiq permissions and check yours with synthetiq whoami.
1

Install and log in

npm install -g @synthetiq/cli
synthetiq login
2

Issue the two certificates

Request both ACM certs and add the 2 validation CNAMEs at your DNS provider; wait for ISSUED. See Certificates. (If you skip this, init stops and prints what’s needed.)
3

Create the config

From a git repository:
synthetiq infra init \
  --domain apps.yourcompany.com \
  --profile <aws-profile>
Discovers your VPC options and issued certificates, writes _infra/synthetiq.yaml. Commit it. See Generating synthetiq.yaml.
4

Preview

synthetiq infra generate \
  --profile <aws-profile>
Review the changeset file — the exact CloudFormation diff. See Previewing & Applying.
5

Apply

synthetiq infra provision \
  --profile <aws-profile>
Executes the reviewed change sets (CloudFront takes 15–20 minutes), then prints the 3 app DNS records.
6

Create the app DNS records

Add the 3 printed records at your DNS provider (DNS). Done — deploy apps from the Synthetiq console.
To update later: edit the config (or upgrade the CLI), then generate → review → provision. For production, use the CI walkthrough.