Open deployment manager

Template gallery

Compile-tested starter graphs for common stacks. Pick one from the Templates button in the editor and it lands on your canvas, pre-wired and fully editable. Nothing deploys until you plan and approve.

Every template here is checked against the same compiler that plans it.

Google Cloud

17 templates

Web serviceA container on Cloud Run with its own private network.

Web service + PostgresCloud Run and a private Cloud SQL Postgres, with the connection details injected as environment variables.

Full web appCloud Run with Postgres, a private assets bucket, and an API-key secret — every connection wired.

Web app + cacheCloud Run with private Cloud SQL Postgres and Memorystore Redis — sessions and hot reads beside the database.

Worker + queueA public API publishing to Pub/Sub and a worker pool consuming it — the queue keeps a traffic spike from becoming a database spike.

Scheduled jobCloud Scheduler starting a Cloud Run job on a cron schedule — a container that runs to completion, authenticated with its own identity.

Public websiteCloud Run behind a global HTTPS load balancer with a managed certificate and your own domain — edit the zone and hostname to yours.

Serverless appCloud Run with Firestore and a private bucket — no database instance to size, pay per operation.

Web service + AlloyDBCloud Run and an AlloyDB Postgres cluster on the private network, started as a free 30-day trial.

Web app + ValkeyCloud Run with private Cloud SQL Postgres and Memorystore for Valkey — Google's recommended cache engine, over Private Service Connect.

Web service + MySQLCloud Run and a private Cloud SQL MySQL instance, with the connection details injected as environment variables.

Private image registryA worker pool that builds and pushes to a private Artifact Registry repository — the registry your other services pull from.

Task queueA public API enqueuing to Cloud Tasks and a private Cloud Run handler receiving each task as an authenticated request — rate limits and retries live in the queue.

Static egress IPA Cloud Run service behind Cloud NAT, so every outbound request leaves from one reserved IP a partner can allowlist.

Event-driven functionA public API publishing to Pub/Sub and a Cloud Run function invoked per message through Eventarc — a consumer with no loop to write.

Protected siteThe public site behind Cloud Armor — a per-IP rate limit and preconfigured SQL-injection and XSS rules on the load balancer.

Static siteA bucket served through the HTTPS load balancer with Cloud CDN at your domain, and an uptime check that emails you when it goes down.

AWS

17 templates

Web serviceA container on ECS Fargate with its own VPC and public subnets.

Web service + PostgresECS Fargate and a private RDS Postgres, with the connection details injected as environment variables.

Full web appECS Fargate with Postgres, a private assets bucket, and an API-key secret — every connection wired.

Public websiteECS Fargate behind an Application Load Balancer with an ACM certificate and your own domain — edit the zone and hostname to yours.

Protected siteThe load-balanced service behind AWS WAF — a per-IP rate limit and AWS's managed rule groups on the Application Load Balancer.

Event-driven functionA public API publishing to SQS and a Lambda function invoked per batch through an event source mapping — a consumer with no loop to write.

Scheduled functionEventBridge Scheduler invoking a Lambda function on a cron schedule — swap the placeholder code bucket for yours.

Static siteA private bucket served through CloudFront, with a Lambda function that uploads the site on each publish.

Transactional emailA sending domain on SES with DKIM, SPF and DMARC records written into your zone, and a Lambda function granted send on that identity only.

Web app + cacheECS Fargate with private RDS Postgres and ElastiCache Redis — sessions and hot reads beside the database.

Web app + ValkeyECS Fargate with private RDS Postgres and ElastiCache for Valkey — Redis-compatible, at a lower price per node.

Web service + AuroraECS Fargate and an Aurora Postgres cluster on the private network, starting at a single instance.

Web service + MySQLECS Fargate and a private RDS MySQL instance, with the connection details injected as environment variables.

Worker + queueAn API publishing to SQS and a Fargate worker consuming it — the queue keeps a traffic spike from becoming a database spike.

Scheduled jobEventBridge Scheduler starting an ECS task on a cron schedule — a container that runs to completion, with its own task role.

Serverless appECS Fargate with DynamoDB and a private S3 bucket — no database instance to size, pay per request.

Private image registryA Fargate worker that builds and pushes to a private ECR repository — the registry your other services pull from.

Azure

16 templates

Web serviceA container on Azure Container Apps with its own network and HTTPS hostname.

Web service + PostgresA container app and a private Postgres Flexible Server, with the connection details injected as environment variables and the password read from Key Vault.

Full web appA container app with Postgres, a private blob container, and a Key Vault for an API key — every connection wired.

Web app + cacheA container app with private Postgres and Azure Cache for Redis — sessions and hot reads beside the database.

Worker + queueA public API sending to a Service Bus queue and a worker consuming it — the queue keeps a traffic spike from becoming a database spike.

Scheduled jobA Container Apps job on a cron schedule — a container that runs to completion, with its own timeout and retries.

Serverless appA container app with a serverless Cosmos DB database and a private blob container — no database instance to size, pay per request.

Web service + MySQLA container app and a private MySQL Flexible Server, on a network with the MySQL delegation switched on.

Image pipelineA private Container Registry, a builder worker that pushes to it, and a service that pulls from it with its managed identity.

Static site + APIAn Azure Static Web App for the built site and a container app for its API, on one network.

Protected public siteA Container App behind Premium Front Door, a managed-TLS domain, WAF and an uptime alert. Set the hostname and alert email before deploying.

Function and messagingA container-based Azure Function with a Service Bus topic, subscription, connection settings and identity grants. Supply a container containing your function code.

Static egressA Container App with a NAT gateway and one static outbound IP for external allowlists.

Scheduled HTTP requestCall a public Container App endpoint every hour. Configure the request path and method for your application.

App with emailA Container App connected to Azure Communication Services and an Azure-managed sending domain. Send through the Azure Email SDK in your code.

Event streamingA Container App and a partitioned Event Hubs stream with a consumer group, connection settings and managed identity grants. Add your producer or consumer code.